Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2023-44487

The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.944
EPSS Ranking 100.0%
CVSS Severity
CVSS v3 Score 7.5
Proposed Action
HTTP/2 contains a rapid reset vulnerability that allows for a distributed denial-of-service attack (DDoS).
Ransomware Campaign
Unknown
References
Products affected by CVE-2023-44487


Contact Us

Shodan ® - All rights reserved