CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2023-10-10
HTTP/2 Protocol Rapid Reset Distributed Denial of Service Vulnerability (CVE-2023-44487)
[Affected Scope] All web servers, reverse proxies, load balancers, and CDN architectures that have the HTTP/2 protocol enabled
[Impact] Attackers can cause a complete Denial of Service (DoS) by rapidly opening and immediately canceling (via RST_STREAM) a massive volume of HTTP/2 streams, exhausting server CPU and memory resources
[Mitigation] Immediately apply official security patches for your web servers (Nginx, Apache, IIS, etc.) and proxy devices, or restrict HTTP/2 concurrent streams and enforce strict rate limiting