879 matches found
AZL-31306 CVE-2023-44487 affecting package etcd for versions less than 3.5.6-11
The HTTP/2 protocol allows a denial of service server resource consumption because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023...
AZL-34623 CVE-2023-44487 affecting package containerized-data-importer for versions less than 1.55.0-15
The HTTP/2 protocol allows a denial of service server resource consumption because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023...
AZL-31519 CVE-2023-44487 affecting package golang for versions less than 1.20.10
The HTTP/2 protocol allows a denial of service server resource consumption because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023...
CVE-2023-44487 vulnerabilities
Vulnerabilities for packages: kubeflow, nfs-subdir-external-provisioner-fips, secrets-store-csi-driver-provider-gcp, prometheus-adapter, dgraph, minio, grype, volume-modifier-for-k8s-fips, prometheus-bind-exporter, mc, dynamic-localpv-provisioner-fips, flux-notification-controller,...
AZL-43465 CVE-2023-44487 affecting package nmi 1.8.17-6
The HTTP/2 protocol allows a denial of service server resource consumption because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023...
AZL-34890 CVE-2023-44487 affecting package kube-vip-cloud-provider for versions less than 0.0.2-12
The HTTP/2 protocol allows a denial of service server resource consumption because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023...
AZL-31301 CVE-2023-44487 affecting package coredns for versions less than 1.11.1-1
The HTTP/2 protocol allows a denial of service server resource consumption because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023...
AZL-31343 CVE-2023-44487 affecting package rook for versions less than 1.6.2-14
The HTTP/2 protocol allows a denial of service server resource consumption because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023...
AZL-31347 CVE-2023-44487 affecting package terraform for versions less than 1.3.2-11
The HTTP/2 protocol allows a denial of service server resource consumption because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023...
AZL-31296 CVE-2023-44487 affecting package cert-manager for versions less than 1.11.2-5
The HTTP/2 protocol allows a denial of service server resource consumption because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023...
AZL-34805 CVE-2023-44487 affecting package influxdb for versions less than 2.6.1-11
The HTTP/2 protocol allows a denial of service server resource consumption because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023...
AZL-31333 CVE-2023-44487 affecting package nginx for versions less than 1.22.1-11
The HTTP/2 protocol allows a denial of service server resource consumption because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023...
Protecting Against HTTP/2 Rapid Reset: CVE-2023-44487
Today, Google disclosed a zero-day vulnerability in the HTTP/2 protocol. Imperva collaborated proactively with Google to gain advanced insights into this vulnerability. After a comprehensive inspection of this vulnerability by Imperva’s Product Development and Threat Research teams, we can confir...
K000137106: HTTP/2 vulnerability CVE-2023-44487
Security Advisory Description The HTTP/2 protocol allows a denial of service server resource consumption because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023. CVE-2023-44487 also known as HTTP/2 Rapid Reset Attack Impact BIG-IP and...
HTTP/2 Rapid Reset Vulnerability, CVE-2023-44487
Researchers and vendors have disclosed a denial-of-service DoS vulnerability in HTTP/2 protocollink is external. The vulnerability CVE-2023-44487link is external, known as Rapid Reset, has been exploited in the wild in August 2023 through October 2023. CISA recommends organizations that provide...
Microsoft Response to Distributed Denial of Service (DDoS) Attacks against HTTP/2
Summary Beginning in September 2023, Microsoft was notified by industry partners about a newly identified Distributed Denial-of-Service DDoS attack technique being used in the wild targeting HTTP/2 protocol. This vulnerability CVE-2023-44487 impacts any internet exposed HTTP/2 endpoints. As an...
October 10, 2023—KB5031362 (OS Build 14393.6351) - EXPIRED
None None...
October 10, 2023—KB5031354 (OS Build 22621.2428)
None None...