CVE-2023-44487
CISA KEV
ACT NOW
Priority: 0.00
BB Relevance:
10/100
Published: N/A
Modified: N/A
First seen: 2026-10-29
Status: pending_score
Description
HTTP/2 contains a rapid reset vulnerability that allows for a distributed denial-of-service attack (DDoS).
CISA Known Exploited Vulnerability
Vendor / Product
IETF — HTTP/2
Date Added
2023-10-10
Remediation Due
2023-10-31
This vulnerability affects a common open-source component, third-party library, or protocol used by different products. For more information, please see: HTTP/2 Rapid Reset Vulnerability, CVE-2023-44487 | CISA: https://www.cisa.gov/news-events/alerts/2023/10/10/http2-rapid-reset-vulnerability-cve-2023-44487; https://blog.cloudflare.com/technical-breakdown-http2-rapid-reset-ddos-attack/; https://nvd.nist.gov/vuln/detail/CVE-2023-44487
Weakness Classification (1)
Affected Software (304)
| Vendor | Product | Version |
|---|---|---|
| akka | http_server | < 10.5.3 |
| amazon | opensearch_data_prepper | < 2.5.0 |
| apache | apisix | < 3.6.1 |
| apache | solr | < 9.4.0 |
| apache | tomcat | 8.5.0 – 8.5.93 |
| apache | tomcat | 9.0.0 – 9.0.80 |
| apache | tomcat | 10.1.0 – 10.1.13 |
| apache | tomcat | 11.0.0 |
| apache | tomcat | 11.0.0 |
| apache | tomcat | 11.0.0 |
| apache | tomcat | 11.0.0 |
| apache | tomcat | 11.0.0 |
| apache | tomcat | 11.0.0 |
| apache | tomcat | 11.0.0 |
| apache | tomcat | 11.0.0 |
| apache | tomcat | 11.0.0 |
| apache | tomcat | 11.0.0 |
| apache | tomcat | 11.0.0 |
| apache | traffic_server | 8.0.0 – 8.1.9 |
| apache | traffic_server | 9.0.0 – 9.2.3 |
| apple | swiftnio_http\/2 | < 1.28.0 |
| caddyserver | caddy | < 2.7.5 |
| cisco | business_process_automation | < 3.2.003.009 |
| cisco | connected_mobile_experiences | < 11.1 |
| cisco | crosswork_data_gateway | < 4.1.3 |
| cisco | crosswork_data_gateway | 5.0.0 – 5.0.2 |
| cisco | crosswork_situation_manager | - |
| cisco | crosswork_zero_touch_provisioning | < 6.0.0 |
| cisco | data_center_network_manager | - |
| cisco | enterprise_chat_and_email | - |
Showing 30 of 304 entries
References & Advisories (173)
Vendor Advisory
Vendor Advisory
Vendor Advisory
Vendor Advisory
Vendor Advisory
Vendor Advisory
Vendor Advisory
Vendor Advisory
Vendor Advisory
Vendor Advisory
Vendor Advisory
Vendor Advisory
Vendor Advisory
Vendor Advisory
Vendor Advisory
US Government Resource
Third Party Advisory
Vendor Advisory
Third Party Advisory
Vendor Advisory
Third Party Advisory
US Government Resource
Third Party Advisory
Third Party Advisory
Third Party Advisory
Third Party Advisory
Third Party Advisory
Third Party Advisory
Showing 25 of 173 references