A set of eight vulnerabilities have been disclosed that could lead to a denial-of-service (DoS) condition on unpatched servers. The behavior can be triggered by exploiting vulnerabilities in servers that support HTTP/2 communication, which is 40.0% of all websites on the Internet today. Netflix says that all the attack vectors are variations of the same theme, where a client triggers a response from a vulnerable server and then refuses to read it. The full list of vendors that may be affected by these DoS vulnerabilities is available at the end of the article.
Source: https://www.bleepingcomputer.com/news/security/new-http-2-flaws-expose-unpatched-web-servers-to-dos-attacks/

