HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack)

🗓️ 05 Dec 2023 14:36:34Reported by RedHatType

HTTP version two servers face rapid reset attack causing denial of service via RST_STREAM frames CVE-2023-39325.

Reporter	Title	Published	Views	Family All 3213
RedhatCVE	CVE-2023-39325	11 Oct 202317:12	–	redhatcve
RedhatCVE	CVE-2023-44487	10 Oct 202321:13	–	redhatcve
RedhatCVE	CVE-2023-45802	19 Oct 202319:44	–	redhatcve
RedhatCVE	CVE-2023-6596	17 Jan 202419:30	–	redhatcve
RedhatCVE	CVE-2024-12698	16 Dec 202422:50	–	redhatcve
RedhatCVE	CVE-2024-4438	6 May 202417:55	–	redhatcve
RedHat Linux	Important: Red Hat Security Advisory: OpenShift API for Data Protection (OADP) 1.3.0 security update	28 Nov 202318:50	–	redhat
RedHat Linux	Important: Red Hat Security Advisory: Updated IBM Business Automation Manager Open Editions 8.0.4 SP1 Images	29 Nov 202318:13	–	redhat
RedHat Linux	Important: Red Hat Security Advisory: OpenShift Container Platform 4.14.5 bug fix and security update	5 Dec 202309:57	–	redhat
RedHat Linux	Important: Red Hat Security Advisory: OpenShift Container Platform 4.13.25 security and extras update	6 Dec 202300:16	–	redhat

Vulners

Node

AND

Source	Link
access	www.access.redhat.com/security/cve/CVE-2023-44487
access	www.access.redhat.com/security/vulnerabilities/RHSB-2023-003
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
github	www.github.com/dotnet/announcements/issues/277
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-44487
pkg	www.pkg.go.dev/vuln/GO-2023-2102
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog
cisa	www.cisa.gov/news-events/alerts/2023/10/10/http2-rapid-reset-vulnerability-cve-2023-44487
cve	www.cve.org/CVERecord
nginx	www.nginx.com/blog/http-2-rapid-reset-attack-impacting-f5-nginx-products/

17 Jul 2026 16:38Current

6.7Medium risk

Vulners AI Score6.7

CVSS 3.17.5

EPSS0.99999

SSVC