6 matches found
POC-CVE-2026-49975
-red CVE-2026-49975 HTTP/2 Bomb — HPACK圧縮爆弾 + フロー制御ホールド PoC naheeju によるセキュリティ研究PoC ⚠️ これは動作するメモリ枯渇型DoSツールであり、おもちゃではありません。 標的に対してメモリを割り当てさせ、HTTP/2のフロー制御トリックでストリームを開いたまま保持します。プロセスが実行されている限り、保持を続け、サーバーが接続を切断した場合は自動的に再接続します — 自力では停止しません。影響は --threads、--streams、--headers...
CVE-2026-49975
CVE-2026-49975 HTTP/2 Bomb PoC HTTP/2 원격 서비스 거부 취약점 재현 도구 취약점 개요 CVE-2026-49975 는 주요 웹 서버에 영향을 미치는 HTTP/2 서비스 거부 취약점입니다. 이 취약점은 보안 회사 CalifOpenAI Codex 사용에 의해 2026년 6월 초에 발견되었습니다. 공격 원리 1. HPACK 압축 폭탄 : 매우 작은 헤더예: "x: a"를 서버 HPACK 동적 테이블에 삽입한 후, 수천 개의 1바이트 인덱스 참조를 전송합니다. 각 참조는 서버가 많은 양의 부기 메모리를...
httpd: httpd: HTTP/2 Remote Denial of Service via compression bomb and Slowloris-style attack
A flaw was found in HTTP/2, affecting various web servers. A remote attacker can exploit this vulnerability by combining an HPACK compression bomb with a zero-byte flow-control window. This technique allows a small amount of data to expand into large memory allocations on the server, which are th...
httpd: httpd: HTTP/2 Remote Denial of Service via compression bomb and Slowloris-style attack
A flaw was found in HTTP/2, affecting various web servers. A remote attacker can exploit this vulnerability by combining an HPACK compression bomb with a zero-byte flow-control window. This technique allows a small amount of data to expand into large memory allocations on the server, which are th...
httpd: httpd: HTTP/2 Remote Denial of Service via compression bomb and Slowloris-style attack
A flaw was found in HTTP/2, affecting various web servers. A remote attacker can exploit this vulnerability by combining an HPACK compression bomb with a zero-byte flow-control window. This technique allows a small amount of data to expand into large memory allocations on the server, which are th...
CVE-2026-49975
A flaw was found in HTTP/2, affecting various web servers. A remote attacker can exploit this vulnerability by combining an HPACK compression bomb with a zero-byte flow-control window. This technique allows a small amount of data to expand into large memory allocations on the server, which are th...