Import Source
https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-38449.json
JSON Data
https://api.test.osv.dev/v1/vulns/AZL-38449
Upstream
Published
2019-08-13T21:15:12Z
Modified
2026-04-01T05:13:19.043041Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
CVE-2019-9512 affecting package python-tensorboard for versions less than 2.16.2-1
Details

Some HTTP/2 implementations are vulnerable to ping floods, potentially leading to a denial of service. The attacker sends continual pings to an HTTP/2 peer, causing the peer to build an internal queue of responses. Depending on how efficiently this data is queued, this can consume excess CPU, memory, or both.

References

Affected packages

Azure Linux:3 / python-tensorboard

Package

Name
python-tensorboard
Purl
pkg:rpm/azure-linux/python-tensorboard

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.16.2-1

Database specific

source
"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-38449.json"