http/2 Implementierungen: Schwachstelle ermöglicht Denial of Service

Summary

Product

Vulnerabilities 1

• High 7.5
  CVE-2023-44487 Exploited Public exploit EPSS 100%

  HTTP/2 Stream Cancellation Attack

  The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

  nodejs golang go kubescape Debian Ubuntu Azure Linux Alpine Wolfi Maven Go SwiftURL
  Oct 10, 2023

  KEV Oct 10, 2023

Revision history

1. 2026-09-13 #108

   Neue Updates von IBM aufgenommen

2. 2026-08-13 #107

   Neue Updates von Gentoo aufgenommen

3. 2026-08-09 #106

   Neue Updates von IBM aufgenommen

4. 2026-07-05 #105

   Neue Updates von IBM aufgenommen

5. 2026-06-17 #104

   Neue Updates von Oracle Linux aufgenommen

6. 2026-03-24 #103

   Neue Updates von Oracle Linux aufgenommen

7. 2026-01-15 #102

   Neue Updates von Red Hat aufgenommen

8. 2025-12-28 #101

   Neue Updates von Oracle Linux aufgenommen

9. 2025-12-04 #100

   Neue Updates von Rocky Enterprise Software Foundation aufgenommen

10. 2025-10-29 #99

    Neue Updates von Fedora aufgenommen

11. 2025-10-01 #98

    Neue Updates von Dell aufgenommen

12. 2025-09-24 #97

    Neue Updates von Red Hat aufgenommen

13. 2025-07-27 #96

    Neue Updates von openSUSE aufgenommen

14. 2025-07-15 #95

    Neue Updates von IBM aufgenommen

15. 2025-06-10 #94

    Neue Updates von Siemens aufgenommen

16. 2025-05-05 #93

    Neue Updates von Google aufgenommen

17. 2025-03-30 #92

    Neue Updates von IBM aufgenommen

18. 2025-03-27 #91

    Neue Updates von Oracle Linux aufgenommen

19. 2025-02-12 #90

    Neue Updates von Red Hat aufgenommen

20. 2025-01-08 #89

    Neue Updates von Red Hat aufgenommen

21. 2024-12-18 #88

    Neue Updates von IBM aufgenommen

22. 2024-12-11 #87

    Neue Updates von Red Hat aufgenommen

23. 2024-12-08 #86

    Neue Updates von Gentoo aufgenommen

24. 2024-12-04 #85

    Neue Updates von Red Hat aufgenommen

25. 2024-11-25 #84

    Neue Updates von Red Hat aufgenommen

References

• Red Hat Security Advisory RHSA-2023:7710 vom 2023-12-11
  https://access.redhat.com/errata/RHSA-2023:7710
• Oracle Linux Security Advisory ELSA-2023-13028 vom 2023-12-08
  https://linux.oracle.com/errata/ELSA-2023-13028.html
• Oracle Linux Security Advisory ELSA-2023-13029 vom 2023-12-08
  https://linux.oracle.com/errata/ELSA-2023-13029.html
• Red Hat Security Advisory RHSA-2024:0306 vom 2024-01-25
  https://access.redhat.com/errata/RHSA-2024:0306
• IBM Security Bulletin 7105533 vom 2024-01-06
  https://www.ibm.com/support/pages/node/7105533
• DELL Security Update
  https://www.dell.com/support/kbdoc/de-de/000221476/dsa-2024-058-security-update-for-dell-networker-vproxy-multiple-components-vulnerabilities
• Red Hat Security Advisory RHSA-2023:7682 vom 2023-12-12
  https://access.redhat.com/errata/RHSA-2023:7682
• Red Hat Security Advisory RHSA-2023:7741 vom 2023-12-12
  https://access.redhat.com/errata/RHSA-2023:7741
• Red Hat Security Advisory RHSA-2023:7687 vom 2023-12-13
  https://access.redhat.com/errata/RHSA-2023:7687
• Red Hat Security Advisory RHSA-2024:0741 vom 2024-02-14
  https://access.redhat.com/errata/RHSA-2024:0741
• IBM Security Bulletin 7118289 vom 2024-02-15
  https://www.ibm.com/support/pages/node/7118289
• Red Hat Security Advisory RHSA-2024:0941 vom 2024-02-28
  https://access.redhat.com/errata/RHSA-2024:0941
• SUSE Security Update SUSE-SU-2023:4624-1 vom 2024-02-27
  https://lists.suse.com/pipermail/sle-security-updates/2024-February/018051.html
• Red Hat Security Advisory RHSA-2024:0954 vom 2024-02-28
  https://access.redhat.com/errata/RHSA-2024:0954
• Red Hat Security Advisory RHSA-2024:0269 vom 2024-02-28
  https://access.redhat.com/errata/RHSA-2024:0269
• Red Hat Security Advisory RHSA-2023:7201 vom 2024-02-28
  https://access.redhat.com/errata/RHSA-2023:7201
• Red Hat Security Advisory RHSA-2023:7200 vom 2024-02-28
  https://access.redhat.com/errata/RHSA-2023:7200
• Red Hat Security Advisory RHSA-2023:7198 vom 2024-02-28
  https://access.redhat.com/errata/RHSA-2023:7198
• Ubuntu Security Notice USN-6574-1 vom 2024-01-11
  https://ubuntu.com/security/notices/USN-6574-1
• PDFreactor 11.6.10 Release History vom 2024-01-11
  https://www.pdfreactor.com/product/changelog.htm
• Red Hat Security Advisory RHSA-2024:0485 vom 2024-01-31
  https://access.redhat.com/errata/RHSA-2024:0485
• IBM Security Bulletin 7099297 vom 2023-12-18
  https://www.ibm.com/support/pages/node/7099297
• Red Hat Security Advisory RHSA-2024:0302 vom 2024-03-06
  https://access.redhat.com/errata/RHSA-2024:0302
• Red Hat Security Advisory RHSA-2024:1037 vom 2024-03-06
  https://access.redhat.com/errata/RHSA-2024:1037
• Cisco Security Advisory
  https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-http2-reset-d8Kf32vZ
• Oracle Linux Security Advisory ELSA-2023-13053 vom 2023-12-22
  https://linux.oracle.com/errata/ELSA-2023-13053.html
• Oracle Linux Security Advisory ELSA-2023-13054 vom 2023-12-22
  https://linux.oracle.com/errata/ELSA-2023-13054.html
• Red Hat Security Advisory RHSA-2024:0837 vom 2024-02-20
  https://access.redhat.com/errata/RHSA-2024:0837
• Red Hat Security Advisory RHSA-2024:0304 vom 2024-01-19
  https://access.redhat.com/errata/RHSA-2024:0304
• Red Hat Security Advisory RHSA-2024:0660 vom 2024-02-07
  https://access.redhat.com/errata/RHSA-2024:0660
• Red Hat Security Advisory RHSA-2024:0642 vom 2024-02-07
  https://access.redhat.com/errata/RHSA-2024:0642
• Google Blog vom 2023-10-10
  https://cloud.google.com/blog/products/identity-security/how-it-works-the-novel-http2-rapid-reset-ddos-attack
• F5 NGINX Security Advisory K000137106 vom 2023-10-10
  https://my.f5.com/manage/s/article/K000137106
• National Vulnerability Database CVE-2023-44487
  https://nvd.nist.gov/vuln/detail/CVE-2023-44487
• Red Hat Security Advisory RHSA-2024:0193 vom 2024-01-20
  https://access.redhat.com/errata/RHSA-2024:0193
• Red Hat Security Advisory RHSA-2024:0273 vom 2024-01-20
  https://access.redhat.com/errata/RHSA-2024:0273
• Red Hat Security Advisory RHSA-2024:0198 vom 2024-01-20
  https://access.redhat.com/errata/RHSA-2024:0198
• FortiGuard Labs PSIRT Advisory FG-IR-23-397 vom 2024-02-08
  https://fortiguard.fortinet.com/psirt/FG-IR-23-397
• Fedora Security Advisory FEDORA-EPEL-2023-D499E96867 vom 2023-10-12
  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-d499e96867
• Fedora Security Advisory FEDORA-2023-1CAFFB88AF vom 2023-10-12
  https://bodhi.fedoraproject.org/updates/FEDORA-2023-1caffb88af
• Go Vulnerability Database GO-2023-2102 vom 2023-10-11
  https://pkg.go.dev/vuln/GO-2023-2102
• Fedora Security Advisory FEDORA-EPEL-2023-E2DD7FFA65 vom 2023-10-12
  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-e2dd7ffa65
• Fedora Security Advisory FEDORA-EPEL-2023-834EF33019 vom 2023-10-12
  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-834ef33019
• Fedora Security Advisory FEDORA-2023-5FF7BF1DD8 vom 2023-10-12
  https://bodhi.fedoraproject.org/updates/FEDORA-2023-5ff7bf1dd8
• Fedora Security Advisory FEDORA-2023-54FADADA12 vom 2023-10-12
  https://bodhi.fedoraproject.org/updates/FEDORA-2023-54fadada12
• Fedora Security Advisory FEDORA-2023-B2C50535CB vom 2023-10-12
  https://bodhi.fedoraproject.org/updates/FEDORA-2023-b2c50535cb
• Fedora Security Advisory FEDORA-EPEL-2023-C21E7D6BD5 vom 2023-10-12
  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-c21e7d6bd5
• Fedora Security Advisory FEDORA-2023-ED2642FD58 vom 2023-10-12
  https://bodhi.fedoraproject.org/updates/FEDORA-2023-ed2642fd58
• Fedora Security Advisory FEDORA-2023-3F70B8D406 vom 2023-10-12
  https://bodhi.fedoraproject.org/updates/FEDORA-2023-3f70b8d406
• SUSE Security Update SUSE-SU-2023:4069-1 vom 2023-10-13
  https://lists.suse.com/pipermail/sle-security-updates/2023-October/016680.html
• SUSE Security Update SUSE-SU-2023:4068-1 vom 2023-10-13
  https://lists.suse.com/pipermail/sle-security-updates/2023-October/016681.html
• Red Hat Security Advisory RHSA-2023:5749 vom 2023-10-16
  https://access.redhat.com/errata/RHSA-2023:5749
• Red Hat Security Advisory RHSA-2023:5738 vom 2023-10-16
  https://access.redhat.com/errata/RHSA-2023:5738
• Red Hat Security Advisory RHSA-2023:5724 vom 2023-10-16
  https://access.redhat.com/errata/RHSA-2023:5724
• Red Hat Security Advisory RHSA-2023:5721 vom 2023-10-16
  https://access.redhat.com/errata/RHSA-2023:5721.html
• Red Hat Security Advisory RHSA-2023:5721 vom 2023-10-16
  https://access.redhat.com/errata/RHSA-2023:5721
• Red Hat Security Advisory RHSA-2023:5720 vom 2023-10-16
  https://access.redhat.com/errata/RHSA-2023:5720.html
• Red Hat Security Advisory RHSA-2023:5720 vom 2023-10-16
  https://access.redhat.com/errata/RHSA-2023:5720
• Red Hat Security Advisory RHSA-2023:5719 vom 2023-10-16
  https://access.redhat.com/errata/RHSA-2023:5719.html
• Red Hat Security Advisory RHSA-2023:5719 vom 2023-10-16
  https://access.redhat.com/errata/RHSA-2023:5719
• Red Hat Security Advisory RHSA-2023:5716 vom 2023-10-16
  https://access.redhat.com/errata/RHSA-2023:5716.html
• Red Hat Security Advisory RHSA-2023:5716 vom 2023-10-16
  https://access.redhat.com/errata/RHSA-2023:5716
• Red Hat Security Advisory RHSA-2023:5715 vom 2023-10-16
  https://access.redhat.com/errata/RHSA-2023:5715.html
• Red Hat Security Advisory RHSA-2023:5714 vom 2023-10-16
  https://access.redhat.com/errata/RHSA-2023:5714.html
• Red Hat Security Advisory RHSA-2023:5714 vom 2023-10-16
  https://access.redhat.com/errata/RHSA-2023:5714
• Red Hat Security Advisory RHSA-2023:5713 vom 2023-10-16
  https://access.redhat.com/errata/RHSA-2023:5713.html
• Red Hat Security Advisory RHSA-2023:5713 vom 2023-10-16
  https://access.redhat.com/errata/RHSA-2023:5713
• Red Hat Security Advisory RHSA-2023:5712 vom 2023-10-16
  https://access.redhat.com/errata/RHSA-2023:5712.html
• Red Hat Security Advisory RHSA-2023:5711 vom 2023-10-16
  https://access.redhat.com/errata/RHSA-2023:5711.html
• Red Hat Security Advisory RHSA-2023:5711 vom 2023-10-16
  https://access.redhat.com/errata/RHSA-2023:5711
• Red Hat Security Advisory RHSA-2023:5710 vom 2023-10-16
  https://access.redhat.com/errata/RHSA-2023:5710.html
• Red Hat Security Advisory RHSA-2023:5709 vom 2023-10-16
  https://access.redhat.com/errata/RHSA-2023:5709.html
• Red Hat Security Advisory RHSA-2023:5709 vom 2023-10-16
  https://access.redhat.com/errata/RHSA-2023:5709
• Red Hat Security Advisory RHSA-2023:5708 vom 2023-10-16
  https://access.redhat.com/errata/RHSA-2023:5708.html
• Red Hat Security Advisory RHSA-2023:5708 vom 2023-10-16
  https://access.redhat.com/errata/RHSA-2023:5708
• Red Hat Security Advisory RHSA-2023:5707 vom 2023-10-16
  https://access.redhat.com/errata/RHSA-2023:5707.html
• Red Hat Security Advisory RHSA-2023:5706 vom 2023-10-16
  https://access.redhat.com/errata/RHSA-2023:5706.html
• Red Hat Security Advisory RHSA-2023:5705 vom 2023-10-16
  https://access.redhat.com/errata/RHSA-2023:5705.html
• Citrix Security Advisory CTX582159 vom 2023-10-16
  https://support.citrix.com/article/CTX582159/cve202344487-http2-rapid-reset-attack-just-discovered
• Debian Security Advisory DLA-3621 vom 2023-10-16
  https://lists.debian.org/debian-lts-announce/2023/10/msg00023.html