PT-2026-38561 · Canonical+9 · Adsys+88
Marwan Atia
·
Published
2026-05-07
·
Updated
2026-06-01
·
CVE-2026-33814
CVSS v3.1
7.5
High
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
The product name cannot be determined (affected versions not specified)
Description
Processing of HTTP/2 SETTINGS frames can lead to an infinite loop of writing CONTINUATION frames when a
SETTINGS MAX FRAME SIZE with a value of 0 is received, resulting in a Denial of Service.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
DoS
Infinite Loop
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Adsys
Amazon-Ecs-Init
Apptainer
Aws-Privateca-Issuer
Aws-Privateca-Issuer-Fips
Azure-Storage-Azcopy
Cert-Manager
Cert-Manager-Cmctl-Fips
Cert-Manager-Webhook-Pdns-Fips
Cilium
Cloudflared
Cloudnative-Pg-Fips
Configmap-Reload
Confluent-Cp-Docker-Utils
Confluent-Kafka
Kubernetes Containerd
Distribution
Druid-Exporter-Fips
Elastic-Beats
Go
Go1.25
Go1.26
Golang
Golang-Golang-X-Net
Golang-Golang-X-Net-Dev
Golang.Org/X/Net
Golang.Org/X/Net/Http2
Google-Guest-Agent
Gptscript
Haproxy-Ingress
Hauler
Helm
Helm3
Http/2
Ignition
Ingress-Nginx-Controller-1.15
Juju Core
K8Ssandra-Client-Fips
Karpenter
Karpenter-Fips
Keda
Keda-Fips
Kubernetes Dashboard
Kubernetes-Dashboard-Fips
Kubernetes-Dashboard-Web
Kubernetes-Dns-Node-Cache
Kubernetes-Fips
Kyverno-Fips
Linkerd2
Lxd
Mailpit
Mcphost
Metacontroller
Minio-Operator-Fips
Modelmesh-Runtime-Adapter
Mongodb
Net/Http
Opensearch-K8S-Operator-Fips
Percona-Xtradb-Cluster-Operator-Fips
Policycontroller
Prometheus
Prometheus-Mysqld-Exporter
Prometheus-Operator
Prometheus-Redis-Exporter-Fips
Rabbitmq-Cluster-Operator
Rabbitmq-Messaging-Topology-Operator
Rclone
Regclient
Restic
Restic-Fips
Rqlite
Sealed-Secrets
Spark-Operator
Stdlib
Terragrunt-Fips
Trivy
Velero
Velero-Fips
Velero-Plugin-For-Gcp-Fips
Velero-Plugin-For-Microsoft-Azure-Fips
Wave
Wave-Fips
Weaviate
Weaviate-Fips
Yq
Yunikorn-K8Shim
Yunikorn-K8Shim-Fips
Yunikorn-Web-Fips
Zot