CVE-2023-44487

CVE-2023-44487 – HTTP/2 Rapid Reset DoS Root cause: HTTP/2 stream resets can cause servers to continue processing, leading to unbounded resource consumption and potential DoS when clients rapidly cancel streams. What’s affected: Various HTTP/2 implementations and deployments, including servers, p...

CVE-2017-10868

CVE-2017-10868 affects H2O Web Server (2.2.2 and earlier). DoS can be triggered remotely by a specially crafted HTTP/1 header, impacting availability. Affected product: H2O; root cause: flaw in HTTP/1 header processing. Remediation: update to the latest version (e.g., 2.2.3 or later) as advised b...

CVE-2024-45397

Technical details (affected versions, fixes, and exploit info) are not provided in the supplied documents. Monitor for updates from vendors and security advisories.

CVE-2021-43848

CVE-2021-43848 concerns h2o, an open source HTTP server. Affects HTTP/3 support where, from commits 93af138 to d1f0f65, h2o may access uninitialized memory when processing QUIC frames, potentially treating such memory as HTTP/3 frames. In reverse proxy scenarios, an attacker could cause h2o to le...