cve-2023-44487
HIGH cisa_known_exploited
Description
HTTP/2 contains a rapid reset vulnerability that allows for a distributed denial-of-service attack (DDoS).
Timeline
- Published
- 2023-10-10
- Last Modified
- 2023-10-10
CVSS Details
CVSS details not available.
Affected Products
No product information available.
References
No references available.
Linked Vulnerabilities
{
"cvss": 0.0,
"datePublished": "2023-10-10",
"dateUpdated": "2023-10-10",
"description": "HTTP/2 contains a rapid reset vulnerability that allows for a distributed denial-of-service attack (DDoS).",
"dueDate": "2023-10-31",
"id": "CVE-2023-44487",
"kev_catalogs": [
"cisa"
],
"knownRansomwareCampaignUse": "Unknown",
"notes": "This vulnerability affects a common open-source component, third-party library, or protocol used by different products. For more information, please see: HTTP/2 Rapid Reset Vulnerability, CVE-2023-44487 | CISA: https://www.cisa.gov/news-events/alerts/2023/10/10/http2-rapid-reset-vulnerability-cve-2023-44487; https://blog.cloudflare.com/technical-breakdown-http2-rapid-reset-ddos-attack/; https://nvd.nist.gov/vuln/detail/CVE-2023-44487",
"product": "HTTP/2",
"requiredAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",
"severity": "HIGH",
"source": "cisa_known_exploited",
"title": "HTTP/2 Rapid Reset Attack Vulnerability",
"vendor": "IETF"
}
Enrichment data
Aggregated bundle (all enrichments)