Sales Chat - Click Here

HTTP/2 Internal Data Stream DoS (CVE-2019-9517)

Sep 09, 2026

Summary

An HTTP/2 vulnerability allows attackers to cause a denial of service via internal stream exhaustion.


Vulnerability ID Vulnerability Overview
CVE-2019-9517 A client can open an HTTP/2 stream, send a request, and refuse to read the response, forcing the server to queue data internally and exhausting memory resources.


Affected Supported TeraStations

TS5010/3020/3010
Fixed in firmware version 6.12
 

Back to Security Notices

Date Description
09/09/2026 Initial release


Back to Security Notices

X