The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar |
|---|---|---|
| CVE-2023-44487US | high | — |
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- http://www.openwall.com/lists/oss-security/2023/10/10/6ADVISORY
- http://www.openwall.com/lists/oss-security/2023/10/10/7ADVISORY
- http://www.openwall.com/lists/oss-security/2023/10/13/4ADVISORY
- http://www.openwall.com/lists/oss-security/2023/10/13/9ADVISORY
- http://www.openwall.com/lists/oss-security/2023/10/18/4ADVISORY
- http://www.openwall.com/lists/oss-security/2023/10/18/8ADVISORY
- http://www.openwall.com/lists/oss-security/2023/10/19/6ADVISORY
- http://www.openwall.com/lists/oss-security/2023/10/20/8ADVISORY
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan