Lucene search
Veracode Vulnerability DatabaseVERACODE:43928HistoryOct 21, 2023 - 7:38 a.m.
Denial Of Service (DoS)
2023-10-2107:38:44
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
22
gitlab
vulnerability
denial of service
http/2
connection exhaustion
software
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
0.001 Low
EPSS
Percentile
27.5%
gitlab is vulnerable to Denial of Service (DoS). This vulnerability allows an attacker to exhaust worker resources in the server by opening an HTTP/2 connection with an initial window size of 0.
Related
openvas
openvas
Apache HTTP Server 2.4.55 - 2.4.57 DoS Vulnerability - Windows
2023-10-19 00:00:00
Apache HTTP Server 2.4.55 - 2.4.57 DoS Vulnerability - Linux
2023-10-19 00:00:00
Ubuntu: Security Advisory (USN-6506-1)
2023-11-23 00:00:00
prion
prion
Code injection
2023-10-23 07:15:00
cvelist
cvelist
CVE-2023-43622 Apache HTTP Server: DoS in HTTP/2 with initial windows size 0
2023-10-23 06:50:51
osv
osv
CVE-2023-43622
2023-10-23 07:15:11
BIT-2023-43622
2023-11-02 07:16:32
BIT-apache-2023-43622
2024-03-06 10:50:43
redos
redos
ROS-20231030-05
2023-10-30 00:00:00
ROS-20240423-01
2024-04-23 00:00:00
nessus
nessus
FreeBSD : www/varnish7 -- Denial of Service (05b7180b-e571-11ee-a1c0-0050569f0b83)
2024-03-19 00:00:00
Tenable Security Center 5.23.1 / 6.0.0 / 6.1.0 / 6.1.1 / 6.2.0 Multiple Vulnerabilities (TNS-2023-42)
2023-11-22 00:00:00
Tenable SecurityCenter Multiple Vulnerabilities (TNS-2023-44)
2023-12-19 00:00:00
redhatcve
redhatcve
CVE-2023-43622
2023-10-20 10:56:55
nvd
nvd
CVE-2023-43622
2023-10-23 07:15:11
debiancve
debiancve
CVE-2023-43622
2023-10-23 07:15:11
freebsd
freebsd
www/varnish7 -- Denial of Service
2019-04-19 00:00:00
Apache httpd -- Multiple vulnerabilities
2023-10-19 00:00:00
alpinelinux
alpinelinux
CVE-2023-43622
2023-10-23 07:15:11
cve
cve
CVE-2023-43622
2023-10-23 07:15:11
ubuntucve
ubuntucve
CVE-2023-43622
2023-10-23 00:00:00
cbl_mariner
cbl_mariner
CVE-2023-43622 affecting package httpd for versions less than 2.4.58-1
2023-11-08 02:07:28
f5
f5
K000137325 : Apache httpd vulnerability CVE-2023-43622
2023-10-23 00:00:00
oraclelinux
oraclelinux
mod_http2 security update
2024-05-02 00:00:00
redhat
redhat
(RHSA-2024:2368) Moderate: mod_http2 security update
2024-04-30 06:15:30
almalinux
almalinux
Moderate: mod_http2 security update
2024-04-30 00:00:00
amazon
amazon
Important: httpd24
2023-10-30 23:31:00
Important: httpd
2023-10-30 23:59:00
ubuntu
ubuntu
Apache HTTP Server vulnerabilities
2023-11-22 00:00:00
kaspersky
kaspersky
KLA61504 Multiple vulnerabilities in Apache HTTP Server
2023-10-19 00:00:00
slackware
slackware
[slackware-security] httpd
2023-10-19 19:21:22
photon
photon
Important Photon OS Security Update - PHSA-2023-4.0-0502
2023-11-01 00:00:00
Important Photon OS Security Update - PHSA-2023-3.0-0680
2023-11-03 00:00:00
mageia
mageia
Updated apache packages fix security vulnerabilities
2023-10-28 00:49:40
debian
debian
[SECURITY] [DSA 5662-1] apache2 security update
2024-04-16 18:32:07
ibm
ibm
Security Bulletin: Multiple vulnerabilites in IBM Rational Build Forge.
2024-04-02 13:12:49
hp
hp
HP Device Manager Vulnerability Update (5.0.12)
2024-01-26 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - January 2024
2024-01-16 00:00:00
Oracle Critical Patch Update Advisory - April 2024
2024-04-16 00:00:00
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
0.001 Low
EPSS
Percentile
27.5%
Related for VERACODE:43928