Lucene search
FreeBSDBF545001-B96D-42E4-9D2E-60FDEE204A43HistoryOct 10, 2023 - 12:00 a.m.
h2o -- HTTP/2 Rapid Reset attack vulnerability
2023-10-1000:00:00
vuxml.freebsd.org
50
h2o
http/2
rapid reset
attack
vulnerability
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
0.816
Percentile
98.4%
Kazuo Okuhu reports:
H2O is vulnerable to the HTTP/2 Rapid Reset attack.
An attacker might be able to consume more than adequate amount of
processing power of h2o and the backend servers by mounting the
attack.
Related
msrc
msrc
mskb
mskb
.NET 6.0 Update - October 10, 2023 (KB5031900)
2023-10-10 07:00:00
nessus
nessus
F5 Networks BIG-IP : BIG-IP HTTP/2 DoS (K000137106)
2023-10-13 00:00:00
RHEL 8 : dotnet6.0 (RHSA-2023:5707)
2023-10-16 00:00:00
RHEL 9 : nginx (RHSA-2023:5711)
2023-10-16 00:00:00
redhat
redhat
(RHSA-2023:5708) Important: dotnet6.0 security update
2023-10-16 08:02:40
(RHSA-2023:5710) Important: dotnet6.0 security update
2023-10-16 08:03:52
(RHSA-2023:5749) Important: .NET 7.0 security update
2023-10-16 14:29:28
almalinux
almalinux
Important: .NET 7.0 security update
2023-10-16 00:00:00
Important: dotnet6.0 security update
2023-10-16 00:00:00
Important: tomcat security update
2023-10-19 00:00:00
broadcom
broadcom
HTTP2 Rapid Reset Vulnerability (CVE-2023-44487)
2023-10-17 00:00:00
osv
osv
BIT-2023-44487
2023-10-25 06:19:08
gRPC-Go HTTP/2 Rapid Reset vulnerability
2023-10-25 21:17:37
Denial of service from HTTP/2 Rapid Reset in google.golang.org/grpc
2023-11-01 22:39:27
amazon
amazon
Important: nghttp2
2023-10-16 13:45:00
rocky
rocky
nghttp2 security update
2023-10-24 18:36:50
nginx:1.22 security update
2023-11-11 23:00:06
fedora
fedora
[SECURITY] Fedora 37 Update: fizz-2023.10.16.00-1.fc37
2023-10-24 01:13:17
[SECURITY] Fedora 37 Update: mvfst-2023.10.16.00-1.fc37
2023-10-24 01:13:18
[SECURITY] Fedora 37 Update: watchman-2021.05.10.00-24.fc37
2023-10-24 01:13:18
prion
prion
Design/Logic Flaw
2023-10-10 14:15:00
oraclelinux
oraclelinux
nginx:1.22 security update
2023-10-26 00:00:00
tomcat security update
2023-10-24 00:00:00
varnish security update
2023-10-24 00:00:00
ibm
ibm
cbl_mariner
cbl_mariner
CVE-2023-44487 affecting package helm for versions less than 3.14.0-1
2024-01-23 22:55:47
CVE-2023-44487 affecting package vitess for versions less than 16.0.2-5
2024-07-22 19:00:45
CVE-2023-44487 affecting package prometheus for versions less than 2.37.0-10
2024-09-21 03:20:33
redos
redos
ROS-20240402-08
2024-04-02 00:00:00
ROS-20240805-01
2024-08-05 00:00:00
ROS-20231107-01
2023-11-07 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for nghttp2 (EulerOS-SA-2024-1068)
2024-01-09 00:00:00
Fedora: Security Advisory for proxygen (FEDORA-2023-7934802344)
2023-11-05 00:00:00
Fedora: Security Advisory for fb303 (FEDORA-2023-7934802344)
2023-11-05 00:00:00
vulnrichment
vulnrichment
CVE-2023-44487
2023-10-10 00:00:00
atlassian
atlassian
debian
debian
[SECURITY] [DSA 5522-2] tomcat9 regression update
2023-10-12 20:30:56
[SECURITY] [DSA 5570-1] nghttp2 security update
2023-12-01 20:29:08
[SECURITY] [DLA 3617-2] tomcat9 regression update
2023-10-16 22:23:23
githubexploit
githubexploit
Exploit for Uncontrolled Resource Consumption in Ietf Http
2023-12-11 23:12:03
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
0.816
Percentile
98.4%
Related for BF545001-B96D-42E4-9D2E-60FDEE204A43