CVE Feed

    Dashboard / CVE / CVE-2023-44487

    CVE-2023-44487

    The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

    Published:Oct 10, 2023
    Last Modified:Aug 11, 2026
    EPS:Oct 10, 2023
    EPSS Score:0.99999
    CVSS Score:7.5

    CISA Notification

    Description

    The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

    Required Action:

    Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

    Notes:

    No extra notes provided.

    Due Date
    Oct 31, 2023
    1046 days ago
    Alert Date
    Oct 10, 2023
    1067 days ago

    Affected Products

    Vendor
    Akka
    Product
    Http Server
    Vendor
    Amazon
    Product
    Opensearch Data Prepper
    Vendor
    Apache
    Product
    Apisix
    Vendor
    Apache
    Product
    Solr
    Vendor
    Apache
    Product
    Tomcat
    Vendor
    Apache
    Product
    Traffic Server
    Vendor
    Apple
    Product
    Swiftnio Http\/2
    Vendor
    Caddyserver
    Product
    Caddy
    Vendor
    Cisco
    Product
    Business Process Automation
    Vendor
    Cisco
    Product
    Connected Mobile Experiences
    Vendor
    Cisco
    Product
    Crosswork Data Gateway
    Vendor
    Cisco
    Product
    Crosswork Situation Manager
    Vendor
    Cisco
    Product
    Crosswork Zero Touch Provisioning
    Vendor
    Cisco
    Product
    Data Center Network Manager
    Vendor
    Cisco
    Product
    Enterprise Chat And Email
    Vendor
    Cisco
    Product
    Expressway
    Vendor
    Cisco
    Product
    Fog Director
    Vendor
    Cisco
    Product
    Ios Xe
    Vendor
    Cisco
    Product
    Ios Xr
    Vendor
    Cisco
    Product
    Iot Field Network Director
    Vendor
    Cisco
    Product
    Nexus 3016
    Vendor
    Cisco
    Product
    Nexus 3016q
    Vendor
    Cisco
    Product
    Nexus 3048
    Vendor
    Cisco
    Product
    Nexus 3064
    Vendor
    Cisco
    Product
    Nexus 3064-32t
    Vendor
    Cisco
    Product
    Nexus 3064-t
    Vendor
    Cisco
    Product
    Nexus 3064-x
    Vendor
    Cisco
    Product
    Nexus 3064t
    Vendor
    Cisco
    Product
    Nexus 3064x
    Vendor
    Cisco
    Product
    Nexus 3100
    Vendor
    Cisco
    Product
    Nexus 3100-v
    Vendor
    Cisco
    Product
    Nexus 3100-z
    Vendor
    Cisco
    Product
    Nexus 3100v
    Vendor
    Cisco
    Product
    Nexus 31108pc-v
    Vendor
    Cisco
    Product
    Nexus 31108pv-v
    Vendor
    Cisco
    Product
    Nexus 31108tc-v
    Vendor
    Cisco
    Product
    Nexus 31128pq
    Vendor
    Cisco
    Product
    Nexus 3132c-z
    Vendor
    Cisco
    Product
    Nexus 3132q
    Vendor
    Cisco
    Product
    Nexus 3132q-v
    Vendor
    Cisco
    Product
    Nexus 3132q-x
    Vendor
    Cisco
    Product
    Nexus 3132q-x\/3132q-xl
    Vendor
    Cisco
    Product
    Nexus 3132q-xl
    Vendor
    Cisco
    Product
    Nexus 3164q
    Vendor
    Cisco
    Product
    Nexus 3172
    Vendor
    Cisco
    Product
    Nexus 3172pq
    Vendor
    Cisco
    Product
    Nexus 3172pq-xl
    Vendor
    Cisco
    Product
    Nexus 3172pq\/pq-xl
    Vendor
    Cisco
    Product
    Nexus 3172tq
    Vendor
    Cisco
    Product
    Nexus 3172tq-32t
    Vendor
    Cisco
    Product
    Nexus 3172tq-xl
    Vendor
    Cisco
    Product
    Nexus 3200
    Vendor
    Cisco
    Product
    Nexus 3232
    Vendor
    Cisco
    Product
    Nexus 3232c
    Vendor
    Cisco
    Product
    Nexus 3232c
    Vendor
    Cisco
    Product
    Nexus 3264c-e
    Vendor
    Cisco
    Product
    Nexus 3264q
    Vendor
    Cisco
    Product
    Nexus 3400
    Vendor
    Cisco
    Product
    Nexus 3408-s
    Vendor
    Cisco
    Product
    Nexus 34180yc
    Vendor
    Cisco
    Product
    Nexus 34200yc-sm
    Vendor
    Cisco
    Product
    Nexus 3432d-s
    Vendor
    Cisco
    Product
    Nexus 3464c
    Vendor
    Cisco
    Product
    Nexus 3500
    Vendor
    Cisco
    Product
    Nexus 3524
    Vendor
    Cisco
    Product
    Nexus 3524-x
    Vendor
    Cisco
    Product
    Nexus 3524-x\/xl
    Vendor
    Cisco
    Product
    Nexus 3524-xl
    Vendor
    Cisco
    Product
    Nexus 3548
    Vendor
    Cisco
    Product
    Nexus 3548-x
    Vendor
    Cisco
    Product
    Nexus 3548-x\/xl
    Vendor
    Cisco
    Product
    Nexus 3548-xl
    Vendor
    Cisco
    Product
    Nexus 3600
    Vendor
    Cisco
    Product
    Nexus 36180yc-r
    Vendor
    Cisco
    Product
    Nexus 3636c-r
    Vendor
    Cisco
    Product
    Nexus 9000v
    Vendor
    Cisco
    Product
    Nexus 9200
    Vendor
    Cisco
    Product
    Nexus 9200yc
    Vendor
    Cisco
    Product
    Nexus 92160yc-x
    Vendor
    Cisco
    Product
    Nexus 92160yc Switch
    Vendor
    Cisco
    Product
    Nexus 9221c
    Vendor
    Cisco
    Product
    Nexus 92300yc
    Vendor
    Cisco
    Product
    Nexus 92300yc Switch
    Vendor
    Cisco
    Product
    Nexus 92304qc
    Vendor
    Cisco
    Product
    Nexus 92304qc Switch
    Vendor
    Cisco
    Product
    Nexus 9232e
    Vendor
    Cisco
    Product
    Nexus 92348gc-x
    Vendor
    Cisco
    Product
    Nexus 9236c
    Vendor
    Cisco
    Product
    Nexus 9236c Switch
    Vendor
    Cisco
    Product
    Nexus 9272q
    Vendor
    Cisco
    Product
    Nexus 9272q Switch
    Vendor
    Cisco
    Product
    Nexus 9300
    Vendor
    Cisco
    Product
    Nexus 93108tc-ex
    Vendor
    Cisco
    Product
    Nexus 93108tc-ex-24
    Vendor
    Cisco
    Product
    Nexus 93108tc-ex Switch
    Vendor
    Cisco
    Product
    Nexus 93108tc-fx
    Vendor
    Cisco
    Product
    Nexus 93108tc-fx-24
    Vendor
    Cisco
    Product
    Nexus 93108tc-fx3h
    Vendor
    Cisco
    Product
    Nexus 93108tc-fx3p
    Vendor
    Cisco
    Product
    Nexus 93120tx
    Vendor
    Cisco
    Product
    Nexus 93120tx Switch
    Vendor
    Cisco
    Product
    Nexus 93128
    Vendor
    Cisco
    Product
    Nexus 93128tx
    Vendor
    Cisco
    Product
    Nexus 93128tx Switch
    Vendor
    Cisco
    Product
    Nexus 9316d-gx
    Vendor
    Cisco
    Product
    Nexus 93180lc-ex
    Vendor
    Cisco
    Product
    Nexus 93180lc-ex Switch
    Vendor
    Cisco
    Product
    Nexus 93180tc-ex
    Vendor
    Cisco
    Product
    Nexus 93180yc-ex
    Vendor
    Cisco
    Product
    Nexus 93180yc-ex-24
    Vendor
    Cisco
    Product
    Nexus 93180yc-ex Switch
    Vendor
    Cisco
    Product
    Nexus 93180yc-fx
    Vendor
    Cisco
    Product
    Nexus 93180yc-fx-24
    Vendor
    Cisco
    Product
    Nexus 93180yc-fx3
    Vendor
    Cisco
    Product
    Nexus 93180yc-fx3h
    Vendor
    Cisco
    Product
    Nexus 93180yc-fx3s
    Vendor
    Cisco
    Product
    Nexus 93216tc-fx2
    Vendor
    Cisco
    Product
    Nexus 93240tc-fx2
    Vendor
    Cisco
    Product
    Nexus 93240yc-fx2
    Vendor
    Cisco
    Product
    Nexus 9332c
    Vendor
    Cisco
    Product
    Nexus 9332d-gx2b
    Vendor
    Cisco
    Product
    Nexus 9332d-h2r
    Vendor
    Cisco
    Product
    Nexus 9332pq
    Vendor
    Cisco
    Product
    Nexus 9332pq Switch
    Vendor
    Cisco
    Product
    Nexus 93360yc-fx2
    Vendor
    Cisco
    Product
    Nexus 9336c-fx2
    Vendor
    Cisco
    Product
    Nexus 9336c-fx2-e
    Vendor
    Cisco
    Product
    Nexus 9336pq
    Vendor
    Cisco
    Product
    Nexus 9336pq Aci
    Vendor
    Cisco
    Product
    Nexus 9336pq Aci Spine
    Vendor
    Cisco
    Product
    Nexus 9336pq Aci Spine Switch
    Vendor
    Cisco
    Product
    Nexus 9348d-gx2a
    Vendor
    Cisco
    Product
    Nexus 9348gc-fx3
    Vendor
    Cisco
    Product
    Nexus 9348gc-fxp
    Vendor
    Cisco
    Product
    Nexus 93600cd-gx
    Vendor
    Cisco
    Product
    Nexus 9364c
    Vendor
    Cisco
    Product
    Nexus 9364c-gx
    Vendor
    Cisco
    Product
    Nexus 9364d-gx2a
    Vendor
    Cisco
    Product
    Nexus 9372px
    Vendor
    Cisco
    Product
    Nexus 9372px-e
    Vendor
    Cisco
    Product
    Nexus 9372px-e Switch
    Vendor
    Cisco
    Product
    Nexus 9372px Switch
    Vendor
    Cisco
    Product
    Nexus 9372tx
    Vendor
    Cisco
    Product
    Nexus 9372tx-e
    Vendor
    Cisco
    Product
    Nexus 9372tx-e Switch
    Vendor
    Cisco
    Product
    Nexus 9372tx Switch
    Vendor
    Cisco
    Product
    Nexus 9396px
    Vendor
    Cisco
    Product
    Nexus 9396px Switch
    Vendor
    Cisco
    Product
    Nexus 9396tx
    Vendor
    Cisco
    Product
    Nexus 9396tx Switch
    Vendor
    Cisco
    Product
    Nexus 9408
    Vendor
    Cisco
    Product
    Nexus 9432pq
    Vendor
    Cisco
    Product
    Nexus 9500
    Vendor
    Cisco
    Product
    Nexus 9500 16-slot
    Vendor
    Cisco
    Product
    Nexus 9500 4-slot
    Vendor
    Cisco
    Product
    Nexus 9500 8-slot
    Vendor
    Cisco
    Product
    Nexus 9500 Supervisor A
    Vendor
    Cisco
    Product
    Nexus 9500 Supervisor A\+
    Vendor
    Cisco
    Product
    Nexus 9500 Supervisor B
    Vendor
    Cisco
    Product
    Nexus 9500 Supervisor B\+
    Vendor
    Cisco
    Product
    Nexus 9500r
    Vendor
    Cisco
    Product
    Nexus 9504
    Vendor
    Cisco
    Product
    Nexus 9504 Switch
    Vendor
    Cisco
    Product
    Nexus 9508
    Vendor
    Cisco
    Product
    Nexus 9508 Switch
    Vendor
    Cisco
    Product
    Nexus 9516
    Vendor
    Cisco
    Product
    Nexus 9516 Switch
    Vendor
    Cisco
    Product
    Nexus 9536pq
    Vendor
    Cisco
    Product
    Nexus 9636pq
    Vendor
    Cisco
    Product
    Nexus 9716d-gx
    Vendor
    Cisco
    Product
    Nexus 9736pq
    Vendor
    Cisco
    Product
    Nexus 9800
    Vendor
    Cisco
    Product
    Nexus 9804
    Vendor
    Cisco
    Product
    Nexus 9808
    Vendor
    Cisco
    Product
    Nx-os
    Vendor
    Cisco
    Product
    Prime Access Registrar
    Vendor
    Cisco
    Product
    Prime Cable Provisioning
    Vendor
    Cisco
    Product
    Prime Infrastructure
    Vendor
    Cisco
    Product
    Prime Network Registrar
    Vendor
    Cisco
    Product
    Secure Dynamic Attributes Connector
    Vendor
    Cisco
    Product
    Secure Firewall Threat Defense
    Vendor
    Cisco
    Product
    Secure Malware Analytics
    Vendor
    Cisco
    Product
    Secure Web Appliance
    Vendor
    Cisco
    Product
    Secure Web Appliance Firmware
    Vendor
    Cisco
    Product
    Telepresence Video Communication Server
    Vendor
    Cisco
    Product
    Ultra Cloud Core - Policy Control Function
    Vendor
    Cisco
    Product
    Ultra Cloud Core - Serving Gateway Function
    Vendor
    Cisco
    Product
    Ultra Cloud Core - Session Management Function
    Vendor
    Cisco
    Product
    Unified Attendant Console Advanced
    Vendor
    Cisco
    Product
    Unified Contact Center Domain Manager
    Vendor
    Cisco
    Product
    Unified Contact Center Enterprise
    Vendor
    Cisco
    Product
    Unified Contact Center Enterprise - Live Data Server
    Vendor
    Cisco
    Product
    Unified Contact Center Management Portal
    Vendor
    Debian
    Product
    Debian Linux
    Vendor
    Dena
    Product
    H2o
    Vendor
    Eclipse
    Product
    Jetty
    Vendor
    Envoyproxy
    Product
    Envoy
    Vendor
    F5
    Product
    Big-ip Access Policy Manager
    Vendor
    F5
    Product
    Big-ip Advanced Firewall Manager
    Vendor
    F5
    Product
    Big-ip Advanced Web Application Firewall
    Vendor
    F5
    Product
    Big-ip Analytics
    Vendor
    F5
    Product
    Big-ip Application Acceleration Manager
    Vendor
    F5
    Product
    Big-ip Application Security Manager
    Vendor
    F5
    Product
    Big-ip Application Visibility And Reporting
    Vendor
    F5
    Product
    Big-ip Carrier-grade Nat
    Vendor
    F5
    Product
    Big-ip Ddos Hybrid Defender
    Vendor
    F5
    Product
    Big-ip Domain Name System
    Vendor
    F5
    Product
    Big-ip Fraud Protection Service
    Vendor
    F5
    Product
    Big-ip Global Traffic Manager
    Vendor
    F5
    Product
    Big-ip Link Controller
    Vendor
    F5
    Product
    Big-ip Local Traffic Manager
    Vendor
    F5
    Product
    Big-ip Next
    Vendor
    F5
    Product
    Big-ip Next Service Proxy For Kubernetes
    Vendor
    F5
    Product
    Big-ip Policy Enforcement Manager
    Vendor
    F5
    Product
    Big-ip Ssl Orchestrator
    Vendor
    F5
    Product
    Big-ip Webaccelerator
    Vendor
    F5
    Product
    Big-ip Websafe
    Vendor
    F5
    Product
    Nginx
    Vendor
    F5
    Product
    Nginx Ingress Controller
    Vendor
    F5
    Product
    Nginx Plus
    Vendor
    Facebook
    Product
    Proxygen
    Vendor
    Fedoraproject
    Product
    Fedora
    Vendor
    Golang
    Product
    Go
    Vendor
    Golang
    Product
    Http2
    Vendor
    Golang
    Product
    Networking
    Vendor
    Grpc
    Product
    Grpc
    Vendor
    Ietf
    Product
    Http
    Vendor
    Istio
    Product
    Istio
    Vendor
    Jenkins
    Product
    Jenkins
    Vendor
    Kazu-yamamoto
    Product
    Http2
    Vendor
    Konghq
    Product
    Kong Gateway
    Vendor
    Linecorp
    Product
    Armeria
    Vendor
    Linkerd
    Product
    Linkerd
    Vendor
    Microsoft
    Product
    .net
    Vendor
    Microsoft
    Product
    Asp.net Core
    Vendor
    Microsoft
    Product
    Azure Kubernetes Service
    Vendor
    Microsoft
    Product
    Cbl-mariner
    Vendor
    Microsoft
    Product
    Visual Studio 2022
    Vendor
    Microsoft
    Product
    Windows 10 1607
    Vendor
    Microsoft
    Product
    Windows 10 1809
    Vendor
    Microsoft
    Product
    Windows 10 21h2
    Vendor
    Microsoft
    Product
    Windows 10 22h2
    Vendor
    Microsoft
    Product
    Windows 11 21h2
    Vendor
    Microsoft
    Product
    Windows 11 22h2
    Vendor
    Microsoft
    Product
    Windows Server 2016
    Vendor
    Microsoft
    Product
    Windows Server 2019
    Vendor
    Microsoft
    Product
    Windows Server 2022
    Vendor
    Netapp
    Product
    Astra Control Center
    Vendor
    Netapp
    Product
    Oncommand Insight
    Vendor
    Netty
    Product
    Netty
    Vendor
    Nghttp2
    Product
    Nghttp2
    Vendor
    Nodejs
    Product
    Node.js
    Vendor
    Openresty
    Product
    Openresty
    Vendor
    Projectcontour
    Product
    Contour
    Vendor
    Redhat
    Product
    3scale
    Vendor
    Redhat
    Product
    3scale Api Management Platform
    Vendor
    Redhat
    Product
    Acm
    Vendor
    Redhat
    Product
    Advanced Cluster Management For Kubernetes
    Vendor
    Redhat
    Product
    Advanced Cluster Security
    Vendor
    Redhat
    Product
    Amq Broker
    Vendor
    Redhat
    Product
    Amq Streams
    Vendor
    Redhat
    Product
    Ansible Automation Platform
    Vendor
    Redhat
    Product
    Ansible Automation Platform Cloud Billing
    Vendor
    Redhat
    Product
    Assisted Installer
    Vendor
    Redhat
    Product
    Aws Lb Optr
    Vendor
    Redhat
    Product
    Build Of Optaplanner
    Vendor
    Redhat
    Product
    Build Of Quarkus
    Vendor
    Redhat
    Product
    Camel K
    Vendor
    Redhat
    Product
    Camel Quarkus
    Vendor
    Redhat
    Product
    Camel Spring Boot
    Vendor
    Redhat
    Product
    Ceph Storage
    Vendor
    Redhat
    Product
    Cert-manager Operator For Red Hat Openshift
    Vendor
    Redhat
    Product
    Cert Manager
    Vendor
    Redhat
    Product
    Certification For Red Hat Enterprise Linux
    Vendor
    Redhat
    Product
    Container Native Virtualization
    Vendor
    Redhat
    Product
    Cost Management
    Vendor
    Redhat
    Product
    Cryostat
    Vendor
    Redhat
    Product
    Decision Manager
    Vendor
    Redhat
    Product
    Devtools
    Vendor
    Redhat
    Product
    Enterprise Linux
    Vendor
    Redhat
    Product
    Ext Dns Optr
    Vendor
    Redhat
    Product
    Fence Agents Remediation Operator
    Vendor
    Redhat
    Product
    Integration Camel For Spring Boot
    Vendor
    Redhat
    Product
    Integration Camel K
    Vendor
    Redhat
    Product
    Integration Service Registry
    Vendor
    Redhat
    Product
    Jboss A-mq
    Vendor
    Redhat
    Product
    Jboss A-mq Streams
    Vendor
    Redhat
    Product
    Jboss Core Services
    Vendor
    Redhat
    Product
    Jboss Data Grid
    Vendor
    Redhat
    Product
    Jboss Enterprise Application Platform
    Vendor
    Redhat
    Product
    Jboss Enterprise Web Server
    Vendor
    Redhat
    Product
    Jboss Fuse
    Vendor
    Redhat
    Product
    Jbosseapxp
    Vendor
    Redhat
    Product
    Kernel Module Management
    Vendor
    Redhat
    Product
    Kube Descheduler Operator
    Vendor
    Redhat
    Product
    Logging
    Vendor
    Redhat
    Product
    Logging Subsystem For Red Hat Openshift
    Vendor
    Redhat
    Product
    Lvms
    Vendor
    Redhat
    Product
    Machine Deletion Remediation Operator
    Vendor
    Redhat
    Product
    Migration Toolkit Applications
    Vendor
    Redhat
    Product
    Migration Toolkit For Applications
    Vendor
    Redhat
    Product
    Migration Toolkit For Containers
    Vendor
    Redhat
    Product
    Migration Toolkit For Virtualization
    Vendor
    Redhat
    Product
    Migration Toolkit Runtimes
    Vendor
    Redhat
    Product
    Migration Toolkit Virtualization
    Vendor
    Redhat
    Product
    Multicluster Engine
    Vendor
    Redhat
    Product
    Network Observ Optr
    Vendor
    Redhat
    Product
    Network Observability Operator
    Vendor
    Redhat
    Product
    Node Healthcheck Operator
    Vendor
    Redhat
    Product
    Node Maintenance Operator
    Vendor
    Redhat
    Product
    Ocp Tools
    Vendor
    Redhat
    Product
    Openshift
    Vendor
    Redhat
    Product
    Openshift Api Data Protection
    Vendor
    Redhat
    Product
    Openshift Api For Data Protection
    Vendor
    Redhat
    Product
    Openshift Application Runtimes
    Vendor
    Redhat
    Product
    Openshift Container Platform
    Vendor
    Redhat
    Product
    Openshift Container Platform Assisted Installer
    Vendor
    Redhat
    Product
    Openshift Custom Metrics Autoscaler
    Vendor
    Redhat
    Product
    Openshift Data Foundation
    Vendor
    Redhat
    Product
    Openshift Data Science
    Vendor
    Redhat
    Product
    Openshift Dev Spaces
    Vendor
    Redhat
    Product
    Openshift Developer Tools And Services
    Vendor
    Redhat
    Product
    Openshift Devspaces
    Vendor
    Redhat
    Product
    Openshift Distributed Tracing
    Vendor
    Redhat
    Product
    Openshift Gitops
    Vendor
    Redhat
    Product
    Openshift Pipelines
    Vendor
    Redhat
    Product
    Openshift Sandboxed Containers
    Vendor
    Redhat
    Product
    Openshift Secondary Scheduler
    Vendor
    Redhat
    Product
    Openshift Secondary Scheduler Operator
    Vendor
    Redhat
    Product
    Openshift Serverless
    Vendor
    Redhat
    Product
    Openshift Service Mesh
    Vendor
    Redhat
    Product
    Openshift Virtualization
    Vendor
    Redhat
    Product
    Openstack
    Vendor
    Redhat
    Product
    Openstack Platform
    Vendor
    Redhat
    Product
    Optaplanner
    Vendor
    Redhat
    Product
    Process Automation
    Vendor
    Redhat
    Product
    Quarkus
    Vendor
    Redhat
    Product
    Quay
    Vendor
    Redhat
    Product
    Red Hat Single Sign On
    Vendor
    Redhat
    Product
    Rhel Aus
    Vendor
    Redhat
    Product
    Rhel Dotnet
    Vendor
    Redhat
    Product
    Rhel E4s
    Vendor
    Redhat
    Product
    Rhel Eus
    Vendor
    Redhat
    Product
    Rhel Satellite Client
    Vendor
    Redhat
    Product
    Rhel Software Collections
    Vendor
    Redhat
    Product
    Rhel Tus
    Vendor
    Redhat
    Product
    Rhmt
    Vendor
    Redhat
    Product
    Rhosemc
    Vendor
    Redhat
    Product
    Run Once Duration Override Operator
    Vendor
    Redhat
    Product
    Satellite
    Vendor
    Redhat
    Product
    Self Node Remediation Operator
    Vendor
    Redhat
    Product
    Serverless
    Vendor
    Redhat
    Product
    Service Interconnect
    Vendor
    Redhat
    Product
    Service Mesh
    Vendor
    Redhat
    Product
    Service Registry
    Vendor
    Redhat
    Product
    Service Telemetry Framework
    Vendor
    Redhat
    Product
    Single Sign-on
    Vendor
    Redhat
    Product
    Stf
    Vendor
    Redhat
    Product
    Support For Spring Boot
    Vendor
    Redhat
    Product
    Web Terminal
    Vendor
    Redhat
    Product
    Workload Availability Fence Agents Remediation
    Vendor
    Redhat
    Product
    Workload Availability Machine Deletion Remediation
    Vendor
    Redhat
    Product
    Workload Availability Nmo
    Vendor
    Redhat
    Product
    Workload Availability Node Healthcheck
    Vendor
    Redhat
    Product
    Workload Availability Snr
    Vendor
    Siemens
    Product
    Ruggedcom Ape1808
    Vendor
    Siemens
    Product
    Ruggedcom Ape1808 Firmware
    Vendor
    Siemens
    Product
    Simatic S7-1500 Cpu 1518-4 Pn\/dp
    Vendor
    Siemens
    Product
    Simatic S7-1500 Cpu 1518-4 Pn\/dp Mfp Firmware
    Vendor
    Siemens
    Product
    Simatic S7-1500 Cpu 1518f-4 Pn\/dp Mfp
    Vendor
    Siemens
    Product
    Simatic S7-1500 Cpu 1518f-4 Pn\/dp Mfp Firmware
    Vendor
    Siemens
    Product
    Sinec Ins
    Vendor
    Siemens
    Product
    Sinec Nms
    Vendor
    Siemens
    Product
    Siplus S7-1500 Cpu 1518-4 Pn\/dp Mfp
    Vendor
    Siemens
    Product
    Siplus S7-1500 Cpu 1518-4 Pn\/dp Mfp Firmware
    Vendor
    Siemens
    Product
    St7 Scadaconnect
    Vendor
    Traefik
    Product
    Traefik
    Vendor
    Varnish Cache Project
    Product
    Varnish Cache

    Exploits

    https://github.com/micrictor/http2-rst-streamhttps://security.netapp.com/advisory/ntap-20240621-0006/https://github.com/micrictor/http2-rst-streamhttps://security.netapp.com/advisory/ntap-20240621-0006/https://www.exploit-db.com/exploits/52426https://github.com/Appsynergy-io/CVE-2023-44487https://github.com/aulauniversal/CVE-2023-44487https://github.com/bcdannyboy/CVE-2023-44487https://github.com/BMG-Black-Magic/CVE-2023-44487https://github.com/ByteHackr/CVE-2023-44487https://github.com/CerberusMrXi/CVE-2023-44487-HTTP2-DoS-Rapid-Reset-Exploithttps://github.com/dryfryce/phoenix-h2https://github.com/dryfryce/phoenix-http2https://github.com/Hirokiii/CVE-2023-44487https://github.com/imabee101/CVE-2023-44487https://github.com/madhantr0/http2-security-labhttps://github.com/madhusudhan-in/CVE_2023_44487-Rapid_Resethttps://github.com/moften/CVE-2023-44487-HTTP-2-Rapid-Reset-Attackhttps://github.com/ndrscodes/http2-rst-stream-attackerhttps://github.com/nxenon/cve-2023-44487https://github.com/pabloec20/rapidresethttps://github.com/ramonzx6/rapid-reset-checkhttps://github.com/ReGeLePuMa/HTTP-2-Rapid-Reset-DDoshttps://github.com/ReToCode/golang-CVE-2023-44487https://github.com/sastraadiwiguna-purpleeliteteaming/DDoS-Purple-Teaming-Offensive-Multi-Vector-7-Tier-Defensive-Holistic-Blueprint-https://github.com/secengjeff/rapidresetclienthttps://github.com/sigridou/CVE-2023-44487-https://github.com/sn130hk/CVE-2023-44487https://github.com/studiogangster/CVE-2023-44487https://github.com/tahaXafous/CVE-2023-44487-doshttps://github.com/threatlabindonesia/CVE-2023-44487-HTTP-2-Rapid-Reset-Exploit-PoChttps://github.com/TLevente20/HTTP-2-RapidReset-CVE-2023-44487-Testlabhttps://github.com/tpirate/cve-2023-44487-POChttps://github.com/TYuan0816/cve-2023-44487https://github.com/zanks08/cve-2023-44487-demo

    References

    http://www.openwall.com/lists/oss-security/2023/10/10/6
    http://www.openwall.com/lists/oss-security/2023/10/10/7
    http://www.openwall.com/lists/oss-security/2023/10/13/4
    http://www.openwall.com/lists/oss-security/2023/10/13/9
    http://www.openwall.com/lists/oss-security/2023/10/18/4
    http://www.openwall.com/lists/oss-security/2023/10/18/8
    http://www.openwall.com/lists/oss-security/2023/10/19/6
    http://www.openwall.com/lists/oss-security/2023/10/20/8
    https://access.redhat.com/security/cve/cve-2023-44487
    https://arstechnica.com/security/2023/10/how-ddosers-used-the-http-2-protocol-to-deliver-attacks-of-unprecedented-size/
    https://aws.amazon.com/security/security-bulletins/AWS-2023-011/
    https://blog.cloudflare.com/technical-breakdown-http2-rapid-reset-ddos-attack/
    https://blog.cloudflare.com/zero-day-rapid-reset-http2-record-breaking-ddos-attack/
    https://blog.litespeedtech.com/2023/10/11/rapid-reset-http-2-vulnerablilty/
    https://blog.qualys.com/vulnerabilities-threat-research/2023/10/10/cve-2023-44487-http-2-rapid-reset-attack
    https://blog.vespa.ai/cve-2023-44487/
    https://bugzilla.proxmox.com/show_bug.cgi?id=4988
    https://bugzilla.redhat.com/show_bug.cgi?id=2242803
    https://bugzilla.suse.com/show_bug.cgi?id=1216123
    https://cgit.freebsd.org/ports/commit/?id=c64c329c2c1752f46b73e3e6ce9f4329be6629f9
    https://cloud.google.com/blog/products/identity-security/google-cloud-mitigated-largest-ddos-attack-peaking-above-398-million-rps/
    https://cloud.google.com/blog/products/identity-security/how-it-works-the-novel-http2-rapid-reset-ddos-attack
    https://community.traefik.io/t/is-traefik-vulnerable-to-cve-2023-44487/20125
    https://discuss.hashicorp.com/t/hcsec-2023-32-vault-consul-and-boundary-affected-by-http-2-rapid-reset-denial-of-service-vulnerability-cve-2023-44487/59715
    https://edg.io/lp/blog/resets-leaks-ddos-and-the-tale-of-a-hidden-cve
    https://forums.swift.org/t/swift-nio-http2-security-update-cve-2023-44487-http-2-dos/67764
    https://gist.github.com/adulau/7c2bfb8e9cdbe4b35a5e131c66a0c088
    https://github.com/Azure/AKS/issues/3947
    https://github.com/Kong/kong/discussions/11741
    https://github.com/advisories/GHSA-qppj-fm5r-hxr3
    https://github.com/advisories/GHSA-vx74-f528-fxqg
    https://github.com/advisories/GHSA-xpw8-rcwv-8f8p
    https://github.com/akka/akka-http/issues/4323
    https://github.com/alibaba/tengine/issues/1872
    https://github.com/apache/apisix/issues/10320
    https://github.com/apache/httpd-site/pull/10
    https://github.com/apache/httpd/blob/afcdbeebbff4b0c50ea26cdd16e178c0d1f24152/modules/http2/h2_mplx.c#L1101-L1113
    https://github.com/apache/tomcat/tree/main/java/org/apache/coyote/http2
    https://github.com/apache/trafficserver/pull/10564
    https://github.com/arkrwn/PoC/tree/main/CVE-2023-44487
    https://github.com/bcdannyboy/CVE-2023-44487
    https://github.com/caddyserver/caddy/issues/5877
    https://github.com/caddyserver/caddy/releases/tag/v2.7.5
    https://github.com/dotnet/announcements/issues/277
    https://github.com/dotnet/core/blob/e4613450ea0da7fd2fc6b61dfb2c1c1dec1ce9ec/release-notes/6.0/6.0.23/6.0.23.md?plain=1#L73
    https://github.com/eclipse/jetty.project/issues/10679
    https://github.com/envoyproxy/envoy/pull/30055
    https://github.com/etcd-io/etcd/issues/16740
    https://github.com/facebook/proxygen/pull/466
    https://github.com/golang/go/issues/63417
    https://github.com/grpc/grpc-go/pull/6703
    https://github.com/grpc/grpc/releases/tag/v1.59.2
    https://github.com/h2o/h2o/pull/3291
    https://github.com/h2o/h2o/security/advisories/GHSA-2m7v-gc89-fjqf
    https://github.com/haproxy/haproxy/issues/2312
    https://github.com/icing/mod_h2/blob/0a864782af0a942aa2ad4ed960a6b32cd35bcf0a/mod_http2/README.md?plain=1#L239-L244
    https://github.com/junkurihara/rust-rpxy/issues/97
    https://github.com/kazu-yamamoto/http2/commit/f61d41a502bd0f60eb24e1ce14edc7b6df6722a1
    https://github.com/kazu-yamamoto/http2/issues/93
    https://github.com/kubernetes/kubernetes/pull/121120
    https://github.com/line/armeria/pull/5232
    https://github.com/linkerd/website/pull/1695/commits/4b9c6836471bc8270ab48aae6fd2181bc73fd632
    https://github.com/micrictor/http2-rst-stream
    https://github.com/microsoft/CBL-Mariner/pull/6381
    https://github.com/netty/netty/commit/58f75f665aa81a8cbcf6ffa74820042a285c5e61
    https://github.com/nghttp2/nghttp2/pull/1961
    https://github.com/nghttp2/nghttp2/releases/tag/v1.57.0
    https://github.com/ninenines/cowboy/issues/1615
    https://github.com/nodejs/node/pull/50121
    https://github.com/openresty/openresty/issues/930
    https://github.com/opensearch-project/data-prepper/issues/3474
    https://github.com/oqtane/oqtane.framework/discussions/3367
    https://github.com/projectcontour/contour/pull/5826
    https://github.com/tempesta-tech/tempesta/issues/1986
    https://github.com/varnishcache/varnish-cache/issues/3996
    https://groups.google.com/g/golang-announce/c/iNNxDTCjZvo
    https://istio.io/latest/news/security/istio-security-2023-004/
    https://linkerd.io/2023/10/12/linkerd-cve-2023-44487/
    https://lists.apache.org/thread/5py8h42mxfsn8l1wy6o41xwhsjlsd87q
    https://lists.debian.org/debian-lts-announce/2023/10/msg00020.html
    https://lists.debian.org/debian-lts-announce/2023/10/msg00023.html
    https://lists.debian.org/debian-lts-announce/2023/10/msg00024.html
    https://lists.debian.org/debian-lts-announce/2023/10/msg00045.html
    https://lists.debian.org/debian-lts-announce/2023/10/msg00047.html
    https://lists.debian.org/debian-lts-announce/2023/11/msg00001.html
    https://lists.debian.org/debian-lts-announce/2023/11/msg00012.html
    https://lists.fedoraproject.org/archives/list/[email protected]/message/2MBEPPC36UBVOZZNAXFHKLFGSLCMN5LI/
    https://lists.fedoraproject.org/archives/list/[email protected]/message/3N4NJ7FR4X4FPZUGNTQAPSTVB2HB2Y4A/
    https://lists.fedoraproject.org/archives/list/[email protected]/message/BFQD3KUEMFBHPAPBGLWQC34L4OWL5HAZ/
    https://lists.fedoraproject.org/archives/list/[email protected]/message/CLB4TW7KALB3EEQWNWCN7OUIWWVWWCG2/
    https://lists.fedoraproject.org/archives/list/[email protected]/message/E72T67UPDRXHIDLO3OROR25YAMN4GGW5/
    https://lists.fedoraproject.org/archives/list/[email protected]/message/FNA62Q767CFAFHBCDKYNPBMZWB7TWYVU/
    https://lists.fedoraproject.org/archives/list/[email protected]/message/HT7T2R4MQKLIF4ODV4BDLPARWFPCJ5CZ/
    https://lists.fedoraproject.org/archives/list/[email protected]/message/JIZSEFC3YKCGABA2BZW6ZJRMDZJMB7PJ/
    https://lists.fedoraproject.org/archives/list/[email protected]/message/JMEXY22BFG5Q64HQCM5CK2Q7KDKVV4TY/
    https://lists.fedoraproject.org/archives/list/[email protected]/message/KSEGD2IWKNUO3DWY4KQGUQM5BISRWHQE/
    https://lists.fedoraproject.org/archives/list/[email protected]/message/LKYHSZQFDNR7RSA7LHVLLIAQMVYCUGBG/
    https://lists.fedoraproject.org/archives/list/[email protected]/message/LNMZJCDHGLJJLXO4OXWJMTVQRNWOC7UL/
    https://lists.fedoraproject.org/archives/list/[email protected]/message/VHUHTSXLXGXS7JYKBXTA3VINUPHTNGVU/
    https://lists.fedoraproject.org/archives/list/[email protected]/message/VSRDIV77HNKUSM7SJC5BKE5JSHLHU2NK/
    https://lists.fedoraproject.org/archives/list/[email protected]/message/WE2I52RHNNU42PX6NZ2RBUHSFFJ2LVZX/
    https://lists.fedoraproject.org/archives/list/[email protected]/message/WLPRQ5TWUQQXYWBJM7ECYDAIL2YVKIUH/
    https://lists.fedoraproject.org/archives/list/[email protected]/message/X6QXN4ORIVF6XBW4WWFE7VNPVC74S45Y/
    https://lists.fedoraproject.org/archives/list/[email protected]/message/XFOIBB4YFICHDM7IBOP7PWXW3FX4HLL2/
    https://lists.fedoraproject.org/archives/list/[email protected]/message/ZB43REMKRQR62NJEI7I5NQ4FSXNLBKRT/
    https://lists.fedoraproject.org/archives/list/[email protected]/message/ZKQSIKIAT5TJ3WSLU3RDBQ35YX4GY4V3/
    https://lists.fedoraproject.org/archives/list/[email protected]/message/ZLU6U2R2IC2K64NDPNMV55AUAO65MAF4/
    https://lists.w3.org/Archives/Public/ietf-http-wg/2023OctDec/0025.html
    https://mailman.nginx.org/pipermail/nginx-devel/2023-October/S36Q5HBXR7CAIMPLLPRSSSYR4PCMWILK.html
    https://martinthomson.github.io/h2-stream-limits/draft-thomson-httpbis-h2-stream-limits.html
    https://msrc.microsoft.com/blog/2023/10/microsoft-response-to-distributed-denial-of-service-ddos-attacks-against-http/2/
    https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-44487
    https://my.f5.com/manage/s/article/K000137106
    https://netty.io/news/2023/10/10/4-1-100-Final.html
    https://news.ycombinator.com/item?id=37830987
    https://news.ycombinator.com/item?id=37830998
    https://news.ycombinator.com/item?id=37831062
    https://news.ycombinator.com/item?id=37837043
    https://openssf.org/blog/2023/10/10/http-2-rapid-reset-vulnerability-highlights-need-for-rapid-response/
    https://seanmonstar.com/post/730794151136935936/hyper-http2-rapid-reset-unaffected
    https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-http2-reset-d8Kf32vZ
    https://security.gentoo.org/glsa/202311-09
    https://security.netapp.com/advisory/ntap-20231016-0001/
    https://security.netapp.com/advisory/ntap-20240426-0007/
    https://security.netapp.com/advisory/ntap-20240621-0006/
    https://security.netapp.com/advisory/ntap-20240621-0007/
    https://security.paloaltonetworks.com/CVE-2023-44487
    https://tomcat.apache.org/security-10.html#Fixed_in_Apache_Tomcat_10.1.14
    https://ubuntu.com/security/CVE-2023-44487
    https://www.bleepingcomputer.com/news/security/new-http-2-rapid-reset-zero-day-attack-breaks-ddos-records/
    https://www.cisa.gov/news-events/alerts/2023/10/10/http2-rapid-reset-vulnerability-cve-2023-44487
    https://www.darkreading.com/cloud/internet-wide-zero-day-bug-fuels-largest-ever-ddos-event
    https://www.debian.org/security/2023/dsa-5521
    https://www.debian.org/security/2023/dsa-5522
    https://www.debian.org/security/2023/dsa-5540
    https://www.debian.org/security/2023/dsa-5549
    https://www.debian.org/security/2023/dsa-5558
    https://www.debian.org/security/2023/dsa-5570
    https://www.haproxy.com/blog/haproxy-is-not-affected-by-the-http-2-rapid-reset-attack-cve-2023-44487
    https://www.netlify.com/blog/netlify-successfully-mitigates-cve-2023-44487/
    https://www.nginx.com/blog/http-2-rapid-reset-attack-impacting-f5-nginx-products/
    https://www.openwall.com/lists/oss-security/2023/10/10/6
    https://www.phoronix.com/news/HTTP2-Rapid-Reset-Attack
    https://www.theregister.com/2023/10/10/http2_rapid_reset_zeroday/
    http://www.openwall.com/lists/oss-security/2023/10/13/4
    http://www.openwall.com/lists/oss-security/2023/10/13/9
    http://www.openwall.com/lists/oss-security/2023/10/18/4
    http://www.openwall.com/lists/oss-security/2023/10/18/8
    http://www.openwall.com/lists/oss-security/2023/10/19/6
    http://www.openwall.com/lists/oss-security/2023/10/20/8
    http://www.openwall.com/lists/oss-security/2025/08/13/6
    https://access.redhat.com/security/cve/cve-2023-44487
    https://arstechnica.com/security/2023/10/how-ddosers-used-the-http-2-protocol-to-deliver-attacks-of-unprecedented-size/
    https://aws.amazon.com/security/security-bulletins/AWS-2023-011/
    https://blog.cloudflare.com/technical-breakdown-http2-rapid-reset-ddos-attack/
    https://blog.cloudflare.com/zero-day-rapid-reset-http2-record-breaking-ddos-attack/
    https://blog.litespeedtech.com/2023/10/11/rapid-reset-http-2-vulnerablilty/
    https://blog.qualys.com/vulnerabilities-threat-research/2023/10/10/cve-2023-44487-http-2-rapid-reset-attack
    https://blog.vespa.ai/cve-2023-44487/
    https://bugzilla.proxmox.com/show_bug.cgi?id=4988
    https://bugzilla.redhat.com/show_bug.cgi?id=2242803
    https://bugzilla.suse.com/show_bug.cgi?id=1216123
    https://cgit.freebsd.org/ports/commit/?id=c64c329c2c1752f46b73e3e6ce9f4329be6629f9
    https://cloud.google.com/blog/products/identity-security/google-cloud-mitigated-largest-ddos-attack-peaking-above-398-million-rps/
    https://cloud.google.com/blog/products/identity-security/how-it-works-the-novel-http2-rapid-reset-ddos-attack
    https://community.traefik.io/t/is-traefik-vulnerable-to-cve-2023-44487/20125
    https://discuss.hashicorp.com/t/hcsec-2023-32-vault-consul-and-boundary-affected-by-http-2-rapid-reset-denial-of-service-vulnerability-cve-2023-44487/59715
    https://edg.io/lp/blog/resets-leaks-ddos-and-the-tale-of-a-hidden-cve
    https://forums.swift.org/t/swift-nio-http2-security-update-cve-2023-44487-http-2-dos/67764
    https://gist.github.com/adulau/7c2bfb8e9cdbe4b35a5e131c66a0c088
    https://github.com/Azure/AKS/issues/3947
    https://github.com/Kong/kong/discussions/11741
    https://github.com/advisories/GHSA-qppj-fm5r-hxr3
    https://github.com/advisories/GHSA-vx74-f528-fxqg
    https://github.com/advisories/GHSA-xpw8-rcwv-8f8p
    https://github.com/akka/akka-http/issues/4323
    https://github.com/alibaba/tengine/issues/1872
    https://github.com/apache/apisix/issues/10320
    https://github.com/apache/httpd-site/pull/10
    https://github.com/apache/httpd/blob/afcdbeebbff4b0c50ea26cdd16e178c0d1f24152/modules/http2/h2_mplx.c#L1101-L1113
    https://github.com/apache/tomcat/tree/main/java/org/apache/coyote/http2
    https://github.com/apache/trafficserver/pull/10564
    https://github.com/arkrwn/PoC/tree/main/CVE-2023-44487
    https://github.com/bcdannyboy/CVE-2023-44487
    https://github.com/caddyserver/caddy/issues/5877
    https://github.com/caddyserver/caddy/releases/tag/v2.7.5
    https://github.com/dotnet/announcements/issues/277
    https://github.com/dotnet/core/blob/e4613450ea0da7fd2fc6b61dfb2c1c1dec1ce9ec/release-notes/6.0/6.0.23/6.0.23.md?plain=1#L73
    https://github.com/eclipse/jetty.project/issues/10679
    https://github.com/envoyproxy/envoy/pull/30055
    https://github.com/etcd-io/etcd/issues/16740
    https://github.com/facebook/proxygen/pull/466
    https://github.com/golang/go/issues/63417
    https://github.com/grpc/grpc-go/pull/6703
    https://github.com/h2o/h2o/pull/3291
    https://github.com/h2o/h2o/security/advisories/GHSA-2m7v-gc89-fjqf
    https://github.com/haproxy/haproxy/issues/2312
    https://github.com/icing/mod_h2/blob/0a864782af0a942aa2ad4ed960a6b32cd35bcf0a/mod_http2/README.md?plain=1#L239-L244
    https://github.com/junkurihara/rust-rpxy/issues/97
    https://github.com/kazu-yamamoto/http2/commit/f61d41a502bd0f60eb24e1ce14edc7b6df6722a1
    https://github.com/kazu-yamamoto/http2/issues/93
    https://github.com/kubernetes/kubernetes/pull/121120
    https://github.com/line/armeria/pull/5232
    https://github.com/linkerd/website/pull/1695/commits/4b9c6836471bc8270ab48aae6fd2181bc73fd632
    https://github.com/micrictor/http2-rst-stream
    https://github.com/microsoft/CBL-Mariner/pull/6381
    https://github.com/netty/netty/commit/58f75f665aa81a8cbcf6ffa74820042a285c5e61
    https://github.com/nghttp2/nghttp2/pull/1961
    https://github.com/nghttp2/nghttp2/releases/tag/v1.57.0
    https://github.com/ninenines/cowboy/issues/1615
    https://github.com/nodejs/node/pull/50121
    https://github.com/openresty/openresty/issues/930
    https://github.com/opensearch-project/data-prepper/issues/3474
    https://github.com/oqtane/oqtane.framework/discussions/3367
    https://github.com/projectcontour/contour/pull/5826
    https://github.com/tempesta-tech/tempesta/issues/1986
    https://github.com/varnishcache/varnish-cache/issues/3996
    https://groups.google.com/g/golang-announce/c/iNNxDTCjZvo
    https://istio.io/latest/news/security/istio-security-2023-004/
    https://linkerd.io/2023/10/12/linkerd-cve-2023-44487/
    https://lists.apache.org/thread/5py8h42mxfsn8l1wy6o41xwhsjlsd87q
    https://lists.debian.org/debian-lts-announce/2023/10/msg00020.html
    https://lists.debian.org/debian-lts-announce/2023/10/msg00023.html
    https://lists.debian.org/debian-lts-announce/2023/10/msg00024.html
    https://lists.debian.org/debian-lts-announce/2023/10/msg00045.html
    https://lists.debian.org/debian-lts-announce/2023/10/msg00047.html
    https://lists.debian.org/debian-lts-announce/2023/11/msg00001.html
    https://lists.debian.org/debian-lts-announce/2023/11/msg00012.html
    https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2MBEPPC36UBVOZZNAXFHKLFGSLCMN5LI/
    https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3N4NJ7FR4X4FPZUGNTQAPSTVB2HB2Y4A/
    https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BFQD3KUEMFBHPAPBGLWQC34L4OWL5HAZ/
    https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CLB4TW7KALB3EEQWNWCN7OUIWWVWWCG2/
    https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E72T67UPDRXHIDLO3OROR25YAMN4GGW5/
    https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FNA62Q767CFAFHBCDKYNPBMZWB7TWYVU/
    https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HT7T2R4MQKLIF4ODV4BDLPARWFPCJ5CZ/
    https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JIZSEFC3YKCGABA2BZW6ZJRMDZJMB7PJ/
    https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JMEXY22BFG5Q64HQCM5CK2Q7KDKVV4TY/
    https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KSEGD2IWKNUO3DWY4KQGUQM5BISRWHQE/
    https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LKYHSZQFDNR7RSA7LHVLLIAQMVYCUGBG/
    https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LNMZJCDHGLJJLXO4OXWJMTVQRNWOC7UL/
    https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VHUHTSXLXGXS7JYKBXTA3VINUPHTNGVU/
    https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VSRDIV77HNKUSM7SJC5BKE5JSHLHU2NK/
    https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WE2I52RHNNU42PX6NZ2RBUHSFFJ2LVZX/
    https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WLPRQ5TWUQQXYWBJM7ECYDAIL2YVKIUH/
    https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X6QXN4ORIVF6XBW4WWFE7VNPVC74S45Y/
    https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XFOIBB4YFICHDM7IBOP7PWXW3FX4HLL2/
    https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZB43REMKRQR62NJEI7I5NQ4FSXNLBKRT/
    https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZKQSIKIAT5TJ3WSLU3RDBQ35YX4GY4V3/
    https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZLU6U2R2IC2K64NDPNMV55AUAO65MAF4/
    https://lists.w3.org/Archives/Public/ietf-http-wg/2023OctDec/0025.html
    https://mailman.nginx.org/pipermail/nginx-devel/2023-October/S36Q5HBXR7CAIMPLLPRSSSYR4PCMWILK.html
    https://martinthomson.github.io/h2-stream-limits/draft-thomson-httpbis-h2-stream-limits.html
    https://msrc.microsoft.com/blog/2023/10/microsoft-response-to-distributed-denial-of-service-ddos-attacks-against-http/2/
    https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-44487
    https://my.f5.com/manage/s/article/K000137106
    https://netty.io/news/2023/10/10/4-1-100-Final.html
    https://news.ycombinator.com/item?id=37830987
    https://news.ycombinator.com/item?id=37830998
    https://news.ycombinator.com/item?id=37831062
    https://news.ycombinator.com/item?id=37837043
    https://openssf.org/blog/2023/10/10/http-2-rapid-reset-vulnerability-highlights-need-for-rapid-response/
    https://seanmonstar.com/post/730794151136935936/hyper-http2-rapid-reset-unaffected
    https://security.gentoo.org/glsa/202311-09
    https://security.netapp.com/advisory/ntap-20231016-0001/
    https://security.netapp.com/advisory/ntap-20240426-0007/
    https://security.netapp.com/advisory/ntap-20240621-0006/
    https://security.netapp.com/advisory/ntap-20240621-0007/
    https://security.paloaltonetworks.com/CVE-2023-44487
    https://tomcat.apache.org/security-10.html#Fixed_in_Apache_Tomcat_10.1.14
    https://ubuntu.com/security/CVE-2023-44487
    https://www.bleepingcomputer.com/news/security/new-http-2-rapid-reset-zero-day-attack-breaks-ddos-records/
    https://www.cisa.gov/news-events/alerts/2023/10/10/http2-rapid-reset-vulnerability-cve-2023-44487
    https://www.darkreading.com/cloud/internet-wide-zero-day-bug-fuels-largest-ever-ddos-event
    https://www.debian.org/security/2023/dsa-5521
    https://www.debian.org/security/2023/dsa-5522
    https://www.debian.org/security/2023/dsa-5540
    https://www.debian.org/security/2023/dsa-5549
    https://www.debian.org/security/2023/dsa-5558
    https://www.debian.org/security/2023/dsa-5570
    https://www.haproxy.com/blog/haproxy-is-not-affected-by-the-http-2-rapid-reset-attack-cve-2023-44487
    https://www.netlify.com/blog/netlify-successfully-mitigates-cve-2023-44487/
    https://www.nginx.com/blog/http-2-rapid-reset-attack-impacting-f5-nginx-products/
    https://www.openwall.com/lists/oss-security/2023/10/10/6
    https://www.phoronix.com/news/HTTP2-Rapid-Reset-Attack
    https://www.theregister.com/2023/10/10/http2_rapid_reset_zeroday/
    https://www.vicarius.io/vsociety/posts/rapid-reset-cve-2023-44487-dos-in-http2-understanding-the-root-cause
    https://cert-portal.siemens.com/productcert/html/ssa-082556.html
    https://cert-portal.siemens.com/productcert/html/ssa-341067.html
    https://cert-portal.siemens.com/productcert/html/ssa-784301.html
    https://cert-portal.siemens.com/productcert/html/ssa-832273.html
    https://cert-portal.siemens.com/productcert/html/ssa-915275.html
    https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-44487

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High