← ExploitWatch
HomeExploited Vulnerabilities

CVE-2023-44487 — Actively Exploited: HTTP/2 (IETF)

HTTP/2 contains a rapid reset vulnerability that allows for a distributed denial-of-service attack (DDoS).

CVE IDCVE-2023-44487
VendorIETF
ProductHTTP/2
Vulnerability nameHTTP/2 Rapid Reset Attack Vulnerability
Date added2023-10-10
Remediation due2023-10-31
Known ransomware useUnknown
Required actionApply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
DescriptionHTTP/2 contains a rapid reset vulnerability that allows for a distributed denial-of-service attack (DDoS).
SourceCISA Known Exploited Vulnerabilities

🔍 Search all exploited vulnerabilities →