Trending
CVE-2023-44487

CVE detail

CVE-2023-44487

The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

CVSS 7.5 · HighBuzz score 79.5KEV listed1 public exploit repository references

Buzz score

Why this CVE is surfacing

Buzz score total 79.5

This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.

Buzz score components · mention 30.0 · diversity 20.0 · KEV 25.0 · OTX 0.0 · PoC 4.5

Mention score

30.0

191 evidence mentions in the snapshot

Diversity score

20.0

56 sources across 10 categories

KEV score

25.0

Known exploited vulnerability present

OTX score

0.0

0 OTX pulses

PoC score

4.5

1 repos · best confidence 0.90

Best PoC traction

Maximum stars on a matched PoC repo

Why it matters now

Mention timeline

Total mentions: 0; within the 30d window
Peak daily: 0; highest bucket

Evidence

Source links by recency

Newest mentions first

191 source links · newest first

Microsoft Ships Urgent Patch for Exploited Windows CLFS Zero-DaySecurityWeek
Patch Tuesday: Redmond patches 71 security flaws and calls immediate attention to an exploited Windows zero-day reported by CrowdStrike.
newswww.securityweek.comDec 10, 2024, 8:28 PM
ICS Patch Tuesday: Advisories Released by Siemens, Schneider, Rockwell, AvevaSecurityWeek
ICS Patch Tuesday advisories have been published by Siemens, Schneider Electric, Rockwell Automation, Aveva and CISA.
newswww.securityweek.comAug 14, 2024, 7:15 AM
New HTTP/2 DoS Attack Potentially More Severe Than Record-Breaking Rapid ResetSecurityWeek
New HTTP/2 DoS method named Continuation Flood can pose a greater risk than Rapid Reset, which has been used for record-breaking attacks.
newswww.securityweek.comApr 4, 2024, 10:50 AM
Atlassian patches critical remote code execution vulnerabilities in multiple productsCSO Online
Atlassian has released urgent patches for several of its products to fix remote code execution and denial-of-service vulnerabilities. Flaws in Atlassian products have been exploited by hackers before, including shortly after a patch was released or even before a fix was available. In October, Atlassian released an emergency fix for a broken access control issue […]
newswww.csoonline.comDec 12, 2023, 8:25 PM
The largest Russian bank Sberbank hit by a massive DDoS attackSecurity Affairs
The largest and oldest bank in Russia Sberbank faced the record-breaking DDoS attack that reached 1 million RPS. Sberbank , the Russian banking and financial services giant, announced that it was recently hit by a record-breaking distributed denial of service (DDoS) attack that reached 1 million RPS. After the invasion of Ukraine, most Russian organizations […]
newssecurityaffairs.comNov 9, 2023, 10:54 AM
Cloudflare mitigated 89 hyper-volumetric HTTP distributed DDoS attacks exceeding 100 million rpsSecurity Affairs
Cloudflare mitigated thousands of hyper-volumetric HTTP distributed denial-of-service (DDoS) attacks exploiting the flaw HTTP/2 Rapid Reset. Cloudflare DDoS threat report of 2023 states that the company has mitigated thousands of hyper-volumetric HTTP distributed denial-of-service attacks. 89 of the attacks mitigated by the company exceeded 100 million requests per second (rps), the largest attack peaked at […]
newssecurityaffairs.comOct 26, 2023, 6:10 PM
Cisco patches IOS XE vulnerabilities actively being exploitedCSO Online
Cisco has released fixes to address two vulnerabilities – CVE-2023-20198 and CVE-2023-20273 – that hackers exploited to compromise tens of thousands of IOS XE devices. CVE-2023-20198 could allow a remote, unauthenticated attacker to create an account on an affected system with privilege level 15 access. The attacker can then use that account to gain control […]
newswww.csoonline.comOct 24, 2023, 3:28 PM
Over 40,000 Cisco devices exploited with the latest zero-day vulnerabilityCSO Online
Cisco’s recently disclosed Web UI-based critical zero-day has been confirmed to have more than 40,000 infected hosts, with over a fourth in the US alone. Closely tracking Cisco’s Web UI privilege escalation vulnerability (dubbed CVE-2023-20198), cybersecurity research firm Censys revealed that the number of compromised devices went down slightly on October 19 following hefty jumps […]
newswww.csoonline.comOct 20, 2023, 11:53 AM
16th October – Threat Intelligence ReportCheck Point Research
For the latest discoveries in cyber research for the week of 9th October, please download our Threat_Intelligence Bulletin. TOP ATTACKS AND BREACHES LockBit ransomware gang has claimed responsibility for an alleged attack on the multibillion-dollar IT products and services reseller CDW. The gang has demanded $80M ransom and threatened to release stolen data, said to […]
vendorresearch.checkpoint.comOct 16, 2023, 2:04 PM
Week in review: Patched curl and libcurl vulnerability, 15 free M365 security training modulesHelp Net Security
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Turning military veterans into cybersecurity experts In this Help Net Security interview, James Murphy, the Director of the TechVets Programme at the Forces Employment Charity and member of Fortinet’s Veterans Program Advisory Council, discusses the challenges that military veterans face when transitioning from military to civilian life. Unmasking the limitations of yearly penetration tests In this Help Net Security interview, … More →
newswww.helpnetsecurity.comOct 15, 2023, 8:00 AM
CISA adds Adobe Acrobat Reader flaw to its Known Exploited Vulnerabilities catalogSecurity Affairs
US CISA added the flaw CVE-2023-21608 in Adobe Acrobat Reader to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added five new flaws to its Known Exploited Vulnerabilities Catalog, including a high-severity flaw (CVE-2023-21608) (CVSS score: 7.8) in Adobe Acrobat Reader. The flaw is a use-after-free issue, an attacker can trigger the flaw to achieve […]
newssecurityaffairs.comOct 11, 2023, 6:12 PM
Organizations Respond to HTTP/2 Zero-Day Exploited for DDoS AttacksSecurityWeek
Organizations respond to HTTP/2 Rapid Reset zero-day vulnerability exploited to launch the largest DDoS attacks seen to date.
newswww.securityweek.comOct 11, 2023, 11:07 AM
Microsoft Patch Tuesday updates for October 2023 fixed three actively exploited zero-day flawsSecurity Affairs
Microsoft Patch Tuesday security updates for October 2023 fixed three actively exploited zero-day vulnerabilities. Microsoft Patch Tuesday security updates for October 2023 addressed a total of 103 vulnerabilities in Microsoft Windows and Windows Components; Exchange Server; Office and Office Components; ASP.NET Core and Visual Studio; Azure; Microsoft Dynamics; and Skype for Business. Three of the […]
newssecurityaffairs.comOct 11, 2023, 7:25 AM
New ‘HTTP/2 Rapid Reset’ technique behind record-breaking DDoS attacksSecurity Affairs
A new DDoS technique named ‘HTTP/2 Rapid Reset’ is actively employed in attacks since August enabling record-breaking attacks. Researchers disclosed a new zero-day DDoS attack technique, named ‘HTTP/2 Rapid Reset’, that was exploited since August in record-breaking attacks. Google announced to have observed a new series of massive DDoS attacks that reached a peak of […]
newssecurityaffairs.comOct 10, 2023, 9:19 PM
Built-in weakness in HTTP/2 protocol exploited for massive DDoS attacksCSO Online
Over the past two months attackers have been abusing a feature of the HTTP/2 web communication protocol that makes web application servers, load balancers, and web proxies vulnerable to distributed denial-of-service (DDoS) attacks of unprecedented scale. Google, AWS, Cloudflare, and other major cloud infrastructure providers, as well as web server vendors have been working on […]
newswww.csoonline.comOct 10, 2023, 8:42 PM
Microsoft fixes exploited WordPad, Skype for Business zero-days (CVE-2023-36563, CVE-2023-41763)Help Net Security
On this October 2023 Patch Tuesday, Microsoft has released 103 patches and has fixed three actively exploited vulnerabilities (CVE-2023-36563, CVE-2023-41763, CVE-2023-44487). The exploited zero-days (CVE-2023-36563, CVE-2023-41763, CVE-2023-44487) CVE-2023-36563, discovered by Microsoft Threat Intelligence, is a WordPad vulnerability that could allow attackers to grab NTLM hashes (i.e., encrypted user passwords on Windows systems). “To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted … More →
newswww.helpnetsecurity.comOct 10, 2023, 6:59 PM
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-44487www.cisa.gov
No excerpt available.
Mitigationwww.cisa.govOct 10, 2023, 2:15 PM
https://cert-portal.siemens.com/productcert/html/ssa-915275.htmlcert-portal.siemens.com
No excerpt available.
Vendor Advisorycert-portal.siemens.comOct 10, 2023, 2:15 PM
https://cert-portal.siemens.com/productcert/html/ssa-832273.htmlcert-portal.siemens.com
No excerpt available.
Vendor Advisorycert-portal.siemens.comOct 10, 2023, 2:15 PM
https://cert-portal.siemens.com/productcert/html/ssa-784301.htmlcert-portal.siemens.com
No excerpt available.
Vendor Advisorycert-portal.siemens.comOct 10, 2023, 2:15 PM
https://cert-portal.siemens.com/productcert/html/ssa-341067.htmlcert-portal.siemens.com
No excerpt available.
Vendor Advisorycert-portal.siemens.comOct 10, 2023, 2:15 PM
https://cert-portal.siemens.com/productcert/html/ssa-082556.htmlcert-portal.siemens.com
No excerpt available.
Vendor Advisorycert-portal.siemens.comOct 10, 2023, 2:15 PM
https://www.vicarius.io/vsociety/posts/rapid-reset-cve-2023-44487-dos-in-http2-understanding-the-root-causewww.vicarius.io
No excerpt available.
Exploitwww.vicarius.ioOct 10, 2023, 2:15 PM
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZLU6U2R2IC2K64NDPNMV55AUAO65MAF4/lists.fedoraproject.org
No excerpt available.
Third Party Advisorylists.fedoraproject.orgOct 10, 2023, 2:15 PM
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZKQSIKIAT5TJ3WSLU3RDBQ35YX4GY4V3/lists.fedoraproject.org
No excerpt available.
Third Party Advisorylists.fedoraproject.orgOct 10, 2023, 2:15 PM
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZB43REMKRQR62NJEI7I5NQ4FSXNLBKRT/lists.fedoraproject.org
No excerpt available.
Third Party Advisorylists.fedoraproject.orgOct 10, 2023, 2:15 PM
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XFOIBB4YFICHDM7IBOP7PWXW3FX4HLL2/lists.fedoraproject.org
No excerpt available.
Third Party Advisorylists.fedoraproject.orgOct 10, 2023, 2:15 PM
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X6QXN4ORIVF6XBW4WWFE7VNPVC74S45Y/lists.fedoraproject.org
No excerpt available.
Third Party Advisorylists.fedoraproject.orgOct 10, 2023, 2:15 PM
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WLPRQ5TWUQQXYWBJM7ECYDAIL2YVKIUH/lists.fedoraproject.org
No excerpt available.
Third Party Advisorylists.fedoraproject.orgOct 10, 2023, 2:15 PM
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WE2I52RHNNU42PX6NZ2RBUHSFFJ2LVZX/lists.fedoraproject.org
No excerpt available.
Third Party Advisorylists.fedoraproject.orgOct 10, 2023, 2:15 PM
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VSRDIV77HNKUSM7SJC5BKE5JSHLHU2NK/lists.fedoraproject.org
No excerpt available.
Third Party Advisorylists.fedoraproject.orgOct 10, 2023, 2:15 PM
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VHUHTSXLXGXS7JYKBXTA3VINUPHTNGVU/lists.fedoraproject.org
No excerpt available.
Third Party Advisorylists.fedoraproject.orgOct 10, 2023, 2:15 PM
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LNMZJCDHGLJJLXO4OXWJMTVQRNWOC7UL/lists.fedoraproject.org
No excerpt available.
Third Party Advisorylists.fedoraproject.orgOct 10, 2023, 2:15 PM
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LKYHSZQFDNR7RSA7LHVLLIAQMVYCUGBG/lists.fedoraproject.org
No excerpt available.
Third Party Advisorylists.fedoraproject.orgOct 10, 2023, 2:15 PM
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KSEGD2IWKNUO3DWY4KQGUQM5BISRWHQE/lists.fedoraproject.org
No excerpt available.
Third Party Advisorylists.fedoraproject.orgOct 10, 2023, 2:15 PM
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JMEXY22BFG5Q64HQCM5CK2Q7KDKVV4TY/lists.fedoraproject.org
No excerpt available.
Third Party Advisorylists.fedoraproject.orgOct 10, 2023, 2:15 PM
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JIZSEFC3YKCGABA2BZW6ZJRMDZJMB7PJ/lists.fedoraproject.org
No excerpt available.
Third Party Advisorylists.fedoraproject.orgOct 10, 2023, 2:15 PM
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HT7T2R4MQKLIF4ODV4BDLPARWFPCJ5CZ/lists.fedoraproject.org
No excerpt available.
Third Party Advisorylists.fedoraproject.orgOct 10, 2023, 2:15 PM
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FNA62Q767CFAFHBCDKYNPBMZWB7TWYVU/lists.fedoraproject.org
No excerpt available.
Third Party Advisorylists.fedoraproject.orgOct 10, 2023, 2:15 PM
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E72T67UPDRXHIDLO3OROR25YAMN4GGW5/lists.fedoraproject.org
No excerpt available.
Third Party Advisorylists.fedoraproject.orgOct 10, 2023, 2:15 PM
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CLB4TW7KALB3EEQWNWCN7OUIWWVWWCG2/lists.fedoraproject.org
No excerpt available.
Third Party Advisorylists.fedoraproject.orgOct 10, 2023, 2:15 PM
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BFQD3KUEMFBHPAPBGLWQC34L4OWL5HAZ/lists.fedoraproject.org
No excerpt available.
Third Party Advisorylists.fedoraproject.orgOct 10, 2023, 2:15 PM
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3N4NJ7FR4X4FPZUGNTQAPSTVB2HB2Y4A/lists.fedoraproject.org
No excerpt available.
Third Party Advisorylists.fedoraproject.orgOct 10, 2023, 2:15 PM
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2MBEPPC36UBVOZZNAXFHKLFGSLCMN5LI/lists.fedoraproject.org
No excerpt available.
Third Party Advisorylists.fedoraproject.orgOct 10, 2023, 2:15 PM
http://www.openwall.com/lists/oss-security/2025/08/13/6www.openwall.com
No excerpt available.
Exploitwww.openwall.comOct 10, 2023, 2:15 PM
https://www.theregister.com/2023/10/10/http2_rapid_reset_zeroday/www.theregister.com
No excerpt available.
Third Party Advisorywww.theregister.comOct 10, 2023, 2:15 PM
https://www.phoronix.com/news/HTTP2-Rapid-Reset-Attackwww.phoronix.com
No excerpt available.
Press/Media Coveragewww.phoronix.comOct 10, 2023, 2:15 PM
https://www.openwall.com/lists/oss-security/2023/10/10/6www.openwall.com
No excerpt available.
Exploitwww.openwall.comOct 10, 2023, 2:15 PM
https://www.nginx.com/blog/http-2-rapid-reset-attack-impacting-f5-nginx-products/www.nginx.com
No excerpt available.
Vendor Advisorywww.nginx.comOct 10, 2023, 2:15 PM
https://www.netlify.com/blog/netlify-successfully-mitigates-cve-2023-44487/www.netlify.com
No excerpt available.
Vendor Advisorywww.netlify.comOct 10, 2023, 2:15 PM
https://www.haproxy.com/blog/haproxy-is-not-affected-by-the-http-2-rapid-reset-attack-cve-2023-44487www.haproxy.com
No excerpt available.
Vendor Advisorywww.haproxy.comOct 10, 2023, 2:15 PM
https://www.debian.org/security/2023/dsa-5570www.debian.org
No excerpt available.
Vendor Advisorywww.debian.orgOct 10, 2023, 2:15 PM
https://www.debian.org/security/2023/dsa-5558www.debian.org
No excerpt available.
Vendor Advisorywww.debian.orgOct 10, 2023, 2:15 PM
https://www.debian.org/security/2023/dsa-5549www.debian.org
No excerpt available.
Vendor Advisorywww.debian.orgOct 10, 2023, 2:15 PM
https://www.debian.org/security/2023/dsa-5540www.debian.org
No excerpt available.
Vendor Advisorywww.debian.orgOct 10, 2023, 2:15 PM
https://www.debian.org/security/2023/dsa-5522www.debian.org
No excerpt available.
Vendor Advisorywww.debian.orgOct 10, 2023, 2:15 PM
https://www.debian.org/security/2023/dsa-5521www.debian.org
No excerpt available.
Vendor Advisorywww.debian.orgOct 10, 2023, 2:15 PM
https://www.darkreading.com/cloud/internet-wide-zero-day-bug-fuels-largest-ever-ddos-eventwww.darkreading.com
No excerpt available.
Third Party Advisorywww.darkreading.comOct 10, 2023, 2:15 PM
https://www.cisa.gov/news-events/alerts/2023/10/10/http2-rapid-reset-vulnerability-cve-2023-44487www.cisa.gov
No excerpt available.
Mitigationwww.cisa.govOct 10, 2023, 2:15 PM
https://www.bleepingcomputer.com/news/security/new-http-2-rapid-reset-zero-day-attack-breaks-ddos-records/www.bleepingcomputer.com
No excerpt available.
Exploitwww.bleepingcomputer.comOct 10, 2023, 2:15 PM
https://ubuntu.com/security/CVE-2023-44487ubuntu.com
No excerpt available.
Vendor Advisoryubuntu.comOct 10, 2023, 2:15 PM
https://tomcat.apache.org/security-10.html#Fixed_in_Apache_Tomcat_10.1.14tomcat.apache.org
No excerpt available.
Release Notestomcat.apache.orgOct 10, 2023, 2:15 PM
https://security.paloaltonetworks.com/CVE-2023-44487security.paloaltonetworks.com
No excerpt available.
Exploitsecurity.paloaltonetworks.comOct 10, 2023, 2:15 PM
https://security.netapp.com/advisory/ntap-20240621-0007/security.netapp.com
No excerpt available.
Exploitsecurity.netapp.comOct 10, 2023, 2:15 PM
https://security.netapp.com/advisory/ntap-20240621-0006/security.netapp.com
No excerpt available.
Exploitsecurity.netapp.comOct 10, 2023, 2:15 PM
https://security.netapp.com/advisory/ntap-20240426-0007/security.netapp.com
No excerpt available.
Exploitsecurity.netapp.comOct 10, 2023, 2:15 PM
https://security.netapp.com/advisory/ntap-20231016-0001/security.netapp.com
No excerpt available.
Exploitsecurity.netapp.comOct 10, 2023, 2:15 PM
https://security.gentoo.org/glsa/202311-09security.gentoo.org
No excerpt available.
Vendor Advisorysecurity.gentoo.orgOct 10, 2023, 2:15 PM
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-http2-reset-d8Kf32vZsec.cloudapps.cisco.com
No excerpt available.
Vendor Advisorysec.cloudapps.cisco.comOct 10, 2023, 2:15 PM
https://seanmonstar.com/post/730794151136935936/hyper-http2-rapid-reset-unaffectedseanmonstar.com
No excerpt available.
Third Party Advisoryseanmonstar.comOct 10, 2023, 2:15 PM
https://openssf.org/blog/2023/10/10/http-2-rapid-reset-vulnerability-highlights-need-for-rapid-response/openssf.org
No excerpt available.
Third Party Advisoryopenssf.orgOct 10, 2023, 2:15 PM
https://news.ycombinator.com/item?id=37837043news.ycombinator.com
No excerpt available.
Exploitnews.ycombinator.comOct 10, 2023, 2:15 PM
https://news.ycombinator.com/item?id=37831062news.ycombinator.com
No excerpt available.
Exploitnews.ycombinator.comOct 10, 2023, 2:15 PM
https://news.ycombinator.com/item?id=37830998news.ycombinator.com
No excerpt available.
Exploitnews.ycombinator.comOct 10, 2023, 2:15 PM
https://news.ycombinator.com/item?id=37830987news.ycombinator.com
No excerpt available.
Exploitnews.ycombinator.comOct 10, 2023, 2:15 PM
https://netty.io/news/2023/10/10/4-1-100-Final.htmlnetty.io
No excerpt available.
Vendor Advisorynetty.ioOct 10, 2023, 2:15 PM
https://my.f5.com/manage/s/article/K000137106my.f5.com
No excerpt available.
Vendor Advisorymy.f5.comOct 10, 2023, 2:15 PM
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-44487msrc.microsoft.com
No excerpt available.
Vendor Advisorymsrc.microsoft.comOct 10, 2023, 2:15 PM
https://msrc.microsoft.com/blog/2023/10/microsoft-response-to-distributed-denial-of-service-ddos-attacks-against-http/2/msrc.microsoft.com
No excerpt available.
Vendor Advisorymsrc.microsoft.comOct 10, 2023, 2:15 PM
https://martinthomson.github.io/h2-stream-limits/draft-thomson-httpbis-h2-stream-limits.htmlmartinthomson.github.io
No excerpt available.
Third Party Advisorymartinthomson.github.ioOct 10, 2023, 2:15 PM
https://mailman.nginx.org/pipermail/nginx-devel/2023-October/S36Q5HBXR7CAIMPLLPRSSSYR4PCMWILK.htmlmailman.nginx.org
No excerpt available.
Patchmailman.nginx.orgOct 10, 2023, 2:15 PM
https://lists.w3.org/Archives/Public/ietf-http-wg/2023OctDec/0025.htmllists.w3.org
No excerpt available.
Third Party Advisorylists.w3.orgOct 10, 2023, 2:15 PM
https://lists.fedoraproject.org/archives/list/[email protected]/message/ZLU6U2R2IC2K64NDPNMV55AUAO65MAF4/lists.fedoraproject.org
No excerpt available.
Third Party Advisorylists.fedoraproject.orgOct 10, 2023, 2:15 PM
https://lists.fedoraproject.org/archives/list/[email protected]/message/ZKQSIKIAT5TJ3WSLU3RDBQ35YX4GY4V3/lists.fedoraproject.org
No excerpt available.
Third Party Advisorylists.fedoraproject.orgOct 10, 2023, 2:15 PM
https://lists.fedoraproject.org/archives/list/[email protected]/message/ZB43REMKRQR62NJEI7I5NQ4FSXNLBKRT/lists.fedoraproject.org
No excerpt available.
Third Party Advisorylists.fedoraproject.orgOct 10, 2023, 2:15 PM
https://lists.fedoraproject.org/archives/list/[email protected]/message/XFOIBB4YFICHDM7IBOP7PWXW3FX4HLL2/lists.fedoraproject.org
No excerpt available.
Third Party Advisorylists.fedoraproject.orgOct 10, 2023, 2:15 PM
https://lists.fedoraproject.org/archives/list/[email protected]/message/X6QXN4ORIVF6XBW4WWFE7VNPVC74S45Y/lists.fedoraproject.org
No excerpt available.
Third Party Advisorylists.fedoraproject.orgOct 10, 2023, 2:15 PM
https://lists.fedoraproject.org/archives/list/[email protected]/message/WLPRQ5TWUQQXYWBJM7ECYDAIL2YVKIUH/lists.fedoraproject.org
No excerpt available.
Third Party Advisorylists.fedoraproject.orgOct 10, 2023, 2:15 PM
https://lists.fedoraproject.org/archives/list/[email protected]/message/WE2I52RHNNU42PX6NZ2RBUHSFFJ2LVZX/lists.fedoraproject.org
No excerpt available.
Third Party Advisorylists.fedoraproject.orgOct 10, 2023, 2:15 PM
https://lists.fedoraproject.org/archives/list/[email protected]/message/VSRDIV77HNKUSM7SJC5BKE5JSHLHU2NK/lists.fedoraproject.org
No excerpt available.
Third Party Advisorylists.fedoraproject.orgOct 10, 2023, 2:15 PM
https://lists.fedoraproject.org/archives/list/[email protected]/message/VHUHTSXLXGXS7JYKBXTA3VINUPHTNGVU/lists.fedoraproject.org
No excerpt available.
Third Party Advisorylists.fedoraproject.orgOct 10, 2023, 2:15 PM
https://lists.fedoraproject.org/archives/list/[email protected]/message/LNMZJCDHGLJJLXO4OXWJMTVQRNWOC7UL/lists.fedoraproject.org
No excerpt available.
Third Party Advisorylists.fedoraproject.orgOct 10, 2023, 2:15 PM
https://lists.fedoraproject.org/archives/list/[email protected]/message/LKYHSZQFDNR7RSA7LHVLLIAQMVYCUGBG/lists.fedoraproject.org
No excerpt available.
Third Party Advisorylists.fedoraproject.orgOct 10, 2023, 2:15 PM
https://lists.fedoraproject.org/archives/list/[email protected]/message/KSEGD2IWKNUO3DWY4KQGUQM5BISRWHQE/lists.fedoraproject.org
No excerpt available.
Third Party Advisorylists.fedoraproject.orgOct 10, 2023, 2:15 PM
https://lists.fedoraproject.org/archives/list/[email protected]/message/JMEXY22BFG5Q64HQCM5CK2Q7KDKVV4TY/lists.fedoraproject.org
No excerpt available.
Third Party Advisorylists.fedoraproject.orgOct 10, 2023, 2:15 PM
https://lists.fedoraproject.org/archives/list/[email protected]/message/JIZSEFC3YKCGABA2BZW6ZJRMDZJMB7PJ/lists.fedoraproject.org
No excerpt available.
Third Party Advisorylists.fedoraproject.orgOct 10, 2023, 2:15 PM
https://lists.fedoraproject.org/archives/list/[email protected]/message/HT7T2R4MQKLIF4ODV4BDLPARWFPCJ5CZ/lists.fedoraproject.org
No excerpt available.
Third Party Advisorylists.fedoraproject.orgOct 10, 2023, 2:15 PM
https://lists.fedoraproject.org/archives/list/[email protected]/message/FNA62Q767CFAFHBCDKYNPBMZWB7TWYVU/lists.fedoraproject.org
No excerpt available.
Third Party Advisorylists.fedoraproject.orgOct 10, 2023, 2:15 PM
https://lists.fedoraproject.org/archives/list/[email protected]/message/E72T67UPDRXHIDLO3OROR25YAMN4GGW5/lists.fedoraproject.org
No excerpt available.
Third Party Advisorylists.fedoraproject.orgOct 10, 2023, 2:15 PM
https://lists.fedoraproject.org/archives/list/[email protected]/message/CLB4TW7KALB3EEQWNWCN7OUIWWVWWCG2/lists.fedoraproject.org
No excerpt available.
Third Party Advisorylists.fedoraproject.orgOct 10, 2023, 2:15 PM
https://lists.fedoraproject.org/archives/list/[email protected]/message/BFQD3KUEMFBHPAPBGLWQC34L4OWL5HAZ/lists.fedoraproject.org
No excerpt available.
Third Party Advisorylists.fedoraproject.orgOct 10, 2023, 2:15 PM
https://lists.fedoraproject.org/archives/list/[email protected]/message/3N4NJ7FR4X4FPZUGNTQAPSTVB2HB2Y4A/lists.fedoraproject.org
No excerpt available.
Third Party Advisorylists.fedoraproject.orgOct 10, 2023, 2:15 PM
https://lists.fedoraproject.org/archives/list/[email protected]/message/2MBEPPC36UBVOZZNAXFHKLFGSLCMN5LI/lists.fedoraproject.org
No excerpt available.
Third Party Advisorylists.fedoraproject.orgOct 10, 2023, 2:15 PM
https://lists.debian.org/debian-lts-announce/2023/11/msg00012.htmllists.debian.org
No excerpt available.
Vendor Advisorylists.debian.orgOct 10, 2023, 2:15 PM
https://lists.debian.org/debian-lts-announce/2023/11/msg00001.htmllists.debian.org
No excerpt available.
Vendor Advisorylists.debian.orgOct 10, 2023, 2:15 PM
https://lists.debian.org/debian-lts-announce/2023/10/msg00047.htmllists.debian.org
No excerpt available.
Vendor Advisorylists.debian.orgOct 10, 2023, 2:15 PM
https://lists.debian.org/debian-lts-announce/2023/10/msg00045.htmllists.debian.org
No excerpt available.
Vendor Advisorylists.debian.orgOct 10, 2023, 2:15 PM
https://lists.debian.org/debian-lts-announce/2023/10/msg00024.htmllists.debian.org
No excerpt available.
Vendor Advisorylists.debian.orgOct 10, 2023, 2:15 PM
https://lists.debian.org/debian-lts-announce/2023/10/msg00023.htmllists.debian.org
No excerpt available.
Vendor Advisorylists.debian.orgOct 10, 2023, 2:15 PM
https://lists.debian.org/debian-lts-announce/2023/10/msg00020.htmllists.debian.org
No excerpt available.
Vendor Advisorylists.debian.orgOct 10, 2023, 2:15 PM
https://lists.apache.org/thread/5py8h42mxfsn8l1wy6o41xwhsjlsd87qlists.apache.org
No excerpt available.
Exploitlists.apache.orgOct 10, 2023, 2:15 PM
https://linkerd.io/2023/10/12/linkerd-cve-2023-44487/linkerd.io
No excerpt available.
Vendor Advisorylinkerd.ioOct 10, 2023, 2:15 PM
https://istio.io/latest/news/security/istio-security-2023-004/istio.io
No excerpt available.
Vendor Advisoryistio.ioOct 10, 2023, 2:15 PM
https://groups.google.com/g/golang-announce/c/iNNxDTCjZvogroups.google.com
No excerpt available.
Vendor Advisorygroups.google.comOct 10, 2023, 2:15 PM
https://github.com/varnishcache/varnish-cache/issues/3996github.com
No excerpt available.
Exploitgithub.comOct 10, 2023, 2:15 PM
https://github.com/tempesta-tech/tempesta/issues/1986github.com
No excerpt available.
Exploitgithub.comOct 10, 2023, 2:15 PM
https://github.com/projectcontour/contour/pull/5826github.com
No excerpt available.
Exploitgithub.comOct 10, 2023, 2:15 PM
https://github.com/oqtane/oqtane.framework/discussions/3367github.com
No excerpt available.
Exploitgithub.comOct 10, 2023, 2:15 PM
https://github.com/opensearch-project/data-prepper/issues/3474github.com
No excerpt available.
Exploitgithub.comOct 10, 2023, 2:15 PM
https://github.com/openresty/openresty/issues/930github.com
No excerpt available.
Exploitgithub.comOct 10, 2023, 2:15 PM
https://github.com/nodejs/node/pull/50121github.com
No excerpt available.
Exploitgithub.comOct 10, 2023, 2:15 PM
https://github.com/ninenines/cowboy/issues/1615github.com
No excerpt available.
Exploitgithub.comOct 10, 2023, 2:15 PM
https://github.com/nghttp2/nghttp2/releases/tag/v1.57.0github.com
No excerpt available.
Exploitgithub.comOct 10, 2023, 2:15 PM
https://github.com/nghttp2/nghttp2/pull/1961github.com
No excerpt available.
Exploitgithub.comOct 10, 2023, 2:15 PM
https://github.com/netty/netty/commit/58f75f665aa81a8cbcf6ffa74820042a285c5e61github.com
No excerpt available.
Exploitgithub.comOct 10, 2023, 2:15 PM
https://github.com/microsoft/CBL-Mariner/pull/6381github.com
No excerpt available.
Exploitgithub.comOct 10, 2023, 2:15 PM
https://github.com/micrictor/http2-rst-streamgithub.com
No excerpt available.
Exploitgithub.comOct 10, 2023, 2:15 PM
https://github.com/linkerd/website/pull/1695/commits/4b9c6836471bc8270ab48aae6fd2181bc73fd632github.com
No excerpt available.
Exploitgithub.comOct 10, 2023, 2:15 PM
https://github.com/line/armeria/pull/5232github.com
No excerpt available.
Exploitgithub.comOct 10, 2023, 2:15 PM
https://github.com/kubernetes/kubernetes/pull/121120github.com
No excerpt available.
Exploitgithub.comOct 10, 2023, 2:15 PM
https://github.com/kazu-yamamoto/http2/issues/93github.com
No excerpt available.
Exploitgithub.comOct 10, 2023, 2:15 PM
https://github.com/kazu-yamamoto/http2/commit/f61d41a502bd0f60eb24e1ce14edc7b6df6722a1github.com
No excerpt available.
Exploitgithub.comOct 10, 2023, 2:15 PM
https://github.com/junkurihara/rust-rpxy/issues/97github.com
No excerpt available.
Exploitgithub.comOct 10, 2023, 2:15 PM
https://github.com/icing/mod_h2/blob/0a864782af0a942aa2ad4ed960a6b32cd35bcf0a/mod_http2/README.md?plain=1#L239-L244github.com
No excerpt available.
Exploitgithub.comOct 10, 2023, 2:15 PM
https://github.com/haproxy/haproxy/issues/2312github.com
No excerpt available.
Exploitgithub.comOct 10, 2023, 2:15 PM
https://github.com/h2o/h2o/security/advisories/GHSA-2m7v-gc89-fjqfgithub.com
No excerpt available.
Exploitgithub.comOct 10, 2023, 2:15 PM
https://github.com/h2o/h2o/pull/3291github.com
No excerpt available.
Exploitgithub.comOct 10, 2023, 2:15 PM
https://github.com/grpc/grpc/releases/tag/v1.59.2github.com
No excerpt available.
Exploitgithub.comOct 10, 2023, 2:15 PM
https://github.com/grpc/grpc-go/pull/6703github.com
No excerpt available.
Exploitgithub.comOct 10, 2023, 2:15 PM
https://github.com/golang/go/issues/63417github.com
No excerpt available.
Exploitgithub.comOct 10, 2023, 2:15 PM
https://github.com/facebook/proxygen/pull/466github.com
No excerpt available.
Exploitgithub.comOct 10, 2023, 2:15 PM
https://github.com/etcd-io/etcd/issues/16740github.com
No excerpt available.
Exploitgithub.comOct 10, 2023, 2:15 PM
https://github.com/envoyproxy/envoy/pull/30055github.com
No excerpt available.
Exploitgithub.comOct 10, 2023, 2:15 PM
https://github.com/eclipse/jetty.project/issues/10679github.com
No excerpt available.
Exploitgithub.comOct 10, 2023, 2:15 PM
https://github.com/dotnet/core/blob/e4613450ea0da7fd2fc6b61dfb2c1c1dec1ce9ec/release-notes/6.0/6.0.23/6.0.23.md?plain=1#L73github.com
No excerpt available.
Exploitgithub.comOct 10, 2023, 2:15 PM
https://github.com/dotnet/announcements/issues/277github.com
No excerpt available.
Exploitgithub.comOct 10, 2023, 2:15 PM
https://github.com/caddyserver/caddy/releases/tag/v2.7.5github.com
No excerpt available.
Exploitgithub.comOct 10, 2023, 2:15 PM
https://github.com/caddyserver/caddy/issues/5877github.com
No excerpt available.
Exploitgithub.comOct 10, 2023, 2:15 PM
https://github.com/bcdannyboy/CVE-2023-44487github.com
No excerpt available.
Exploitgithub.comOct 10, 2023, 2:15 PM
https://github.com/arkrwn/PoC/tree/main/CVE-2023-44487github.com
No excerpt available.
Exploitgithub.comOct 10, 2023, 2:15 PM
https://github.com/apache/trafficserver/pull/10564github.com
No excerpt available.
Exploitgithub.comOct 10, 2023, 2:15 PM
https://github.com/apache/tomcat/tree/main/java/org/apache/coyote/http2github.com
No excerpt available.
Exploitgithub.comOct 10, 2023, 2:15 PM
https://github.com/apache/httpd/blob/afcdbeebbff4b0c50ea26cdd16e178c0d1f24152/modules/http2/h2_mplx.c#L1101-L1113github.com
No excerpt available.
Exploitgithub.comOct 10, 2023, 2:15 PM
https://github.com/apache/httpd-site/pull/10github.com
No excerpt available.
Exploitgithub.comOct 10, 2023, 2:15 PM
https://github.com/apache/apisix/issues/10320github.com
No excerpt available.
Exploitgithub.comOct 10, 2023, 2:15 PM
https://github.com/alibaba/tengine/issues/1872github.com
No excerpt available.
Exploitgithub.comOct 10, 2023, 2:15 PM
https://github.com/akka/akka-http/issues/4323github.com
No excerpt available.
Exploitgithub.comOct 10, 2023, 2:15 PM
https://github.com/advisories/GHSA-xpw8-rcwv-8f8pgithub.com
No excerpt available.
Exploitgithub.comOct 10, 2023, 2:15 PM
https://github.com/advisories/GHSA-vx74-f528-fxqggithub.com
No excerpt available.
Exploitgithub.comOct 10, 2023, 2:15 PM
https://github.com/advisories/GHSA-qppj-fm5r-hxr3github.com
No excerpt available.
Exploitgithub.comOct 10, 2023, 2:15 PM
https://github.com/Kong/kong/discussions/11741github.com
No excerpt available.
Exploitgithub.comOct 10, 2023, 2:15 PM
https://github.com/Azure/AKS/issues/3947github.com
No excerpt available.
Exploitgithub.comOct 10, 2023, 2:15 PM
https://gist.github.com/adulau/7c2bfb8e9cdbe4b35a5e131c66a0c088gist.github.com
No excerpt available.
Exploitgist.github.comOct 10, 2023, 2:15 PM
https://forums.swift.org/t/swift-nio-http2-security-update-cve-2023-44487-http-2-dos/67764forums.swift.org
No excerpt available.
Vendor Advisoryforums.swift.orgOct 10, 2023, 2:15 PM
https://edg.io/lp/blog/resets-leaks-ddos-and-the-tale-of-a-hidden-cveedg.io
No excerpt available.
Broken Linkedg.ioOct 10, 2023, 2:15 PM
https://discuss.hashicorp.com/t/hcsec-2023-32-vault-consul-and-boundary-affected-by-http-2-rapid-reset-denial-of-service-vulnerability-cve-2023-44487/59715discuss.hashicorp.com
No excerpt available.
Vendor Advisorydiscuss.hashicorp.comOct 10, 2023, 2:15 PM
https://community.traefik.io/t/is-traefik-vulnerable-to-cve-2023-44487/20125community.traefik.io
No excerpt available.
Vendor Advisorycommunity.traefik.ioOct 10, 2023, 2:15 PM
https://cloud.google.com/blog/products/identity-security/how-it-works-the-novel-http2-rapid-reset-ddos-attackcloud.google.com
No excerpt available.
Exploitcloud.google.comOct 10, 2023, 2:15 PM
https://cloud.google.com/blog/products/identity-security/google-cloud-mitigated-largest-ddos-attack-peaking-above-398-million-rps/cloud.google.com
No excerpt available.
Exploitcloud.google.comOct 10, 2023, 2:15 PM
https://cgit.freebsd.org/ports/commit/?id=c64c329c2c1752f46b73e3e6ce9f4329be6629f9cgit.freebsd.org
No excerpt available.
Vendor Advisorycgit.freebsd.orgOct 10, 2023, 2:15 PM
https://bugzilla.suse.com/show_bug.cgi?id=1216123bugzilla.suse.com
No excerpt available.
Exploitbugzilla.suse.comOct 10, 2023, 2:15 PM
https://bugzilla.redhat.com/show_bug.cgi?id=2242803bugzilla.redhat.com
No excerpt available.
Exploitbugzilla.redhat.comOct 10, 2023, 2:15 PM
https://bugzilla.proxmox.com/show_bug.cgi?id=4988bugzilla.proxmox.com
No excerpt available.
Third Party Advisorybugzilla.proxmox.comOct 10, 2023, 2:15 PM
https://blog.vespa.ai/cve-2023-44487/blog.vespa.ai
No excerpt available.
Vendor Advisoryblog.vespa.aiOct 10, 2023, 2:15 PM
https://blog.qualys.com/vulnerabilities-threat-research/2023/10/10/cve-2023-44487-http-2-rapid-reset-attackblog.qualys.com
No excerpt available.
Mitigationblog.qualys.comOct 10, 2023, 2:15 PM
https://blog.litespeedtech.com/2023/10/11/rapid-reset-http-2-vulnerablilty/blog.litespeedtech.com
No excerpt available.
Vendor Advisoryblog.litespeedtech.comOct 10, 2023, 2:15 PM
https://blog.cloudflare.com/zero-day-rapid-reset-http2-record-breaking-ddos-attack/blog.cloudflare.com
No excerpt available.
Vendor Advisoryblog.cloudflare.comOct 10, 2023, 2:15 PM
https://blog.cloudflare.com/technical-breakdown-http2-rapid-reset-ddos-attack/blog.cloudflare.com
No excerpt available.
Vendor Advisoryblog.cloudflare.comOct 10, 2023, 2:15 PM
https://aws.amazon.com/security/security-bulletins/AWS-2023-011/aws.amazon.com
No excerpt available.
Vendor Advisoryaws.amazon.comOct 10, 2023, 2:15 PM
https://arstechnica.com/security/2023/10/how-ddosers-used-the-http-2-protocol-to-deliver-attacks-of-unprecedented-size/arstechnica.com
No excerpt available.
Exploitarstechnica.comOct 10, 2023, 2:15 PM
https://access.redhat.com/security/cve/cve-2023-44487access.redhat.com
No excerpt available.
Exploitaccess.redhat.comOct 10, 2023, 2:15 PM
http://www.openwall.com/lists/oss-security/2023/10/20/8www.openwall.com
No excerpt available.
Exploitwww.openwall.comOct 10, 2023, 2:15 PM
http://www.openwall.com/lists/oss-security/2023/10/19/6www.openwall.com
No excerpt available.
Exploitwww.openwall.comOct 10, 2023, 2:15 PM
http://www.openwall.com/lists/oss-security/2023/10/18/8www.openwall.com
No excerpt available.
Exploitwww.openwall.comOct 10, 2023, 2:15 PM
http://www.openwall.com/lists/oss-security/2023/10/18/4www.openwall.com
No excerpt available.
Exploitwww.openwall.comOct 10, 2023, 2:15 PM
http://www.openwall.com/lists/oss-security/2023/10/13/9www.openwall.com
No excerpt available.
Exploitwww.openwall.comOct 10, 2023, 2:15 PM
http://www.openwall.com/lists/oss-security/2023/10/13/4www.openwall.com
No excerpt available.
Exploitwww.openwall.comOct 10, 2023, 2:15 PM
http://www.openwall.com/lists/oss-security/2023/10/10/7www.openwall.com
No excerpt available.
Exploitwww.openwall.comOct 10, 2023, 2:15 PM
http://www.openwall.com/lists/oss-security/2023/10/10/6www.openwall.com
No excerpt available.
Exploitwww.openwall.comOct 10, 2023, 2:15 PM
‘HTTP/2 Rapid Reset’ Zero-Day Exploited to Launch Largest DDoS Attacks in HistorySecurityWeek
A zero-day vulnerability named HTTP/2 Rapid Reset has been exploited to launch some of the largest DDoS attacks in history.
newswww.securityweek.comOct 10, 2023, 1:21 PM
Dangerous vulnerability can be exploited to carry out massive DDoS attacks (CVE-2023-44487)Help Net Security
Cloudflare, Google, and Amazon AWS revealed that a zero-day vulnerability in the HTTP/2 protocol has been used to mount massive, high-volume DDoS attacks, which they dubbed HTTP/2 Rapid Reset. Decoding HTTP/2 Rapid Reset (CVE-2023-44487) In late August 2023, Cloudflare discovered a zero-day vulnerability developed by an unknown threat actor. The vulnerability exploits the standard HTTP/2 protocol—a fundamental piece to how the Internet and most websites operate. HTTP/2 is responsible for how browsers interact with a … More →
newswww.helpnetsecurity.comOct 10, 2023, 1:18 PM

Exploit code

Public exploit repository references

Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.

1 repository references · best confidence 0.90 · max 0 stars

micrictor/http2-rst-streamHigh confidence
githubNVD Exploit reference0 starsDiscovered Aug 11, 2026, 9:11 PM
NVD labels the source link as Exploit; this is not independent verification of the repository's code.

Related records

Similar CVEs

6 related CVEs with shared weakness or product evidence

CVE-2025-21087
When Client or Server SSL profiles are configured on a Virtual Server, or DNSSEC signing operations are in use, undisclosed traffic can cause an increase in memory and CPU resourc…
CVSS 8.9 · High
1 mention
CVE-2025-20058
When a BIG-IP message routing profile is configured on a virtual server, undisclosed traffic can cause an increase in memory resource utilization. Note: Software versions which ha…
CVSS 8.9 · High
1 mention
CVE-2024-41727
In BIG-IP tenants running on r2000 and r4000 series hardware, or BIG-IP Virtual Edition (VEs) using Intel E810 SR-IOV NIC, undisclosed traffic can cause an increase in memory reso…
CVSS 8.7 · High
1 mention
CVE-2023-24594
When an SSL profile is configured on a Virtual Server, undisclosed traffic can cause an increase in CPU or SSL accelerator resource utilization. Note: Software versions which h…
CVSS 5.3 · Medium
CVE-2022-23030
On version 16.1.x before 16.1.2, 15.1.x before 15.1.4.1, 14.1.x before 14.1.4.5, and all versions of 13.1.x, when the BIG-IP Virtual Edition (VE) uses the ixlv driver (which is us…
CVSS 5.3 · Medium
CVE-2022-23023
On BIG-IP version 16.1.x before 16.1.2.1, 15.1.x before 15.1.5, 14.1.x before 14.1.4.5, and all versions of 13.1.x and 12.1.x, and BIG-IQ all versions of 8.x and 7.x, undisclosed…
CVSS 6.5 · Medium
2 mentions

External lookup

Potential internet exposure

Potential exposure only — not proof of vulnerability.Shodan results indicate potentially internet-exposed products, not confirmed vulnerable systems. They do not confirm that any returned system is vulnerable to CVE-2023-44487.

Product-level CPE searches intentionally omit version fields and NVD version-range or configuration certainty. Verify the exact product version and configuration independently.

Sign-in required. Shodan requires you to sign in to run these filter searches.

Product CPE queries

Derived from this CVE's existing NVD CPE 2.3 records; the application, operating-system, or hardware part is retained.

cpe:2.3:a:caddyserver:caddySearch this product on Shodan
cpe:2.3:a:eclipse:jettySearch this product on Shodan
cpe:2.3:a:envoyproxy:envoySearch this product on Shodan
cpe:2.3:a:f5:big-ip_access_policy_managerSearch this product on Shodan
cpe:2.3:a:f5:big-ip_advanced_firewall_managerSearch this product on Shodan
cpe:2.3:a:f5:big-ip_advanced_web_application_firewallSearch this product on Shodan
cpe:2.3:a:f5:big-ip_analyticsSearch this product on Shodan
cpe:2.3:a:f5:big-ip_application_acceleration_managerSearch this product on Shodan
cpe:2.3:a:golang:goSearch this product on Shodan
cpe:2.3:a:golang:http2Search this product on Shodan
cpe:2.3:a:golang:networkingSearch this product on Shodan
cpe:2.3:a:ietf:httpSearch this product on Shodan
cpe:2.3:a:netty:nettySearch this product on Shodan
cpe:2.3:a:nghttp2:nghttp2Search this product on Shodan
cpe:2.3:h:siemens:ruggedcom_ape1808Search this product on Shodan
cpe:2.3:o:siemens:ruggedcom_ape1808_firmwareSearch this product on Shodan
cpe:2.3:h:siemens:simatic_s7-1500_cpu_1518-4_pn\/dpSearch this product on Shodan
cpe:2.3:o:siemens:simatic_s7-1500_cpu_1518-4_pn\/dp_mfp_firmwareSearch this product on Shodan
cpe:2.3:h:siemens:simatic_s7-1500_cpu_1518f-4_pn\/dp_mfpSearch this product on Shodan
cpe:2.3:o:siemens:simatic_s7-1500_cpu_1518f-4_pn\/dp_mfp_firmwareSearch this product on Shodan
cpe:2.3:a:siemens:sinec_insSearch this product on Shodan
cpe:2.3:a:siemens:sinec_nmsSearch this product on Shodan
cpe:2.3:h:siemens:siplus_s7-1500_cpu_1518-4_pn\/dp_mfpSearch this product on Shodan
cpe:2.3:o:siemens:siplus_s7-1500_cpu_1518-4_pn\/dp_mfp_firmwareSearch this product on Shodan
cpe:2.3:a:siemens:st7_scadaconnectSearch this product on Shodan

Exact CVE query

Eligible paid Shodan plan required

Shodan's exact vuln: filter is separate from the product searches above and requires an eligible paid Shodan plan.

vuln:CVE-2023-44487Search this CVE on Shodan

These are outbound search links only. cvebuzz makes no Shodan API call, uses no Shodan API key, and does not display live result counts.

Metadata

Canonical fields

NVD status

Analyzed

Published

Oct 10, 2023

Modified

Aug 11, 2026

Official record

Authoritative NVD record

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE IDs

Vendor classifications

How this vector reads

CVSS 3.1 base metrics decoded below. This explanation does not recalculate or change the NVD score.

Attack Vector (AV): Network. The vulnerable system can be reached across network boundaries.
Attack Complexity (AC): Low. No special conditions beyond the attacker-controlled steps are required.
Privileges Required (PR): None. The attacker needs no privileges on the vulnerable system.
User Interaction (UI): None. Exploitation does not require another user to act.
Scope (S): Unchanged. Impacts remain within the vulnerable security authority.
Confidentiality Impact (C): None. There is no direct impact to this security property.
Integrity Impact (I): None. There is no direct impact to this security property.
Availability Impact (A): High. There is a total or serious impact to this security property.

Signals

Exploitation indicators

1 stored signals · KEV present · 0 OTX pulses

KEVKEV
- cwes: CWE-400
- dueDate: 2023-10-31
- knownRansomwareCampaignUse: Unknown
- notes: This vulnerability affects a common open-source component, third-party library, or protocol used by different products. For more information, please see: HTTP/2 Rapid Reset Vulnerability, CVE-2023-44487 | CISA: https://www.cisa.gov/news-events/alerts/2023/10/10/http2-rapid-reset-vulnerability-cve-2023-44487; https://blog.cloudflare.com/technical-breakdown-http2-rapid-reset-ddos-attack/; https://nvd.nist.gov/vuln/detail/CVE-2023-44487
- product: HTTP/2
- requiredAction: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
- shortDescription: HTTP/2 contains a rapid reset vulnerability that allows for a distributed denial-of-service attack (DDoS).
- vendorProject: IETF
- vulnerabilityName: HTTP/2 Rapid Reset Attack Vulnerability
Observed Oct 10, 2023, 12:00 AM