A number of HTTP/2 server implementations are vulnerable to eight newly disclosed denial-of-service flaws.