-
Bug
-
Resolution: Done
-
Major
-
12.1.14.Final, 13.0.17.Final, 14.0.18.Final, 15.0.0.Final
-
None
-
https://github.com/infinispan/infinispan/pull/11377, https://github.com/infinispan/infinispan/pull/11378, https://github.com/infinispan/infinispan/pull/11379, https://github.com/infinispan/infinispan/pull/11380, https://github.com/infinispan/infinispan/pull/11383, https://github.com/infinispan/infinispan/pull/11405
A client might overload the server by issue frequent RST frames. This can cause a massive amount of load on the remote system and so cause a DDOS attack.
Impact
This is a DDOS attack, any http2 server is affected and so you should update as soon as possible.