HTTP2 Rapid Reset Vulnerability (CVE-2023-44487)

🗓️ 17 Oct 2023 00:00:00Reported by Broadcom Security ResponseType

broadcom🔗 support.broadcom.com👁 79 Views

HTTP/2 Rapid Reset Vulnerability in 202

Reporter	Title	Published	Views	Family All 2817
OSV	RHSA-2023:6298 Red Hat Security Advisory: Release of OpenShift Serverless Client kn 1.30.2 security update	2 Oct 202411:29	–	osv
OSV	RHSA-2023:6746 Red Hat Security Advisory: nghttp2 security update	30 Sep 202411:05	–	osv
OSV	RHSA-2023:6781 Red Hat Security Advisory: openshift-pipelines-client security update	2 Oct 202411:30	–	osv
OSV	RHSA-2023:6782 Red Hat Security Advisory: openshift-gitops-kam security update	1 Oct 202423:27	–	osv
OSV	RHSA-2023:6818 Red Hat Security Advisory: Satellite 6.14 security and bug fix update	2 Oct 202411:32	–	osv
OSV	RHSA-2023:6839 Red Hat Security Advisory: OpenShift Container Platform 4.14.2 security update	2 Oct 202411:32	–	osv
OSV	RHSA-2023:6840 Red Hat Security Advisory: OpenShift Container Platform 4.14.2 packages and security update	2 Oct 202411:32	–	osv
OSV	RHSA-2023:7205 Red Hat Security Advisory: nodejs:20 security update	22 Oct 202401:55	–	osv
OSV	RHSA-2023:7288 Red Hat Security Advisory: Red Hat Product OCP Tools 4.14 Openshift Jenkins security update	1 Oct 202423:31	–	osv
OSV	RHSA-2023:7325 Red Hat Security Advisory: OpenShift Container Platform 4.13.23 packages and security update	30 Sep 202411:08	–	osv

17 Oct 2023 20:24Current

8High risk

Vulners AI Score8

CVSS 3.17.5

EPSS0.99999

http/2 denial of service server resource consumption request cancellation cve-2023-44487 exploited in the wild