Red Hat: CVE-2023-44487: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (Multiple Advisories)
4
(AV:L/AC:M/Au:N/C:P/I:P/A:P)
10/10/2023
11/01/2023
11/01/2023
06/28/2024
Description
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
Solution(s)
- redhat-upgrade-aspnetcore-runtime-6-0
- redhat-upgrade-aspnetcore-runtime-7-0
- redhat-upgrade-aspnetcore-targeting-pack-6-0
- redhat-upgrade-aspnetcore-targeting-pack-7-0
- redhat-upgrade-delve
- redhat-upgrade-delve-debuginfo
- redhat-upgrade-delve-debugsource
- redhat-upgrade-dotnet
- redhat-upgrade-dotnet-apphost-pack-6-0
- redhat-upgrade-dotnet-apphost-pack-6-0-debuginfo
- redhat-upgrade-dotnet-apphost-pack-7-0
- redhat-upgrade-dotnet-apphost-pack-7-0-debuginfo
- redhat-upgrade-dotnet-host
- redhat-upgrade-dotnet-host-debuginfo
- redhat-upgrade-dotnet-hostfxr-6-0
- redhat-upgrade-dotnet-hostfxr-6-0-debuginfo
- redhat-upgrade-dotnet-hostfxr-7-0
- redhat-upgrade-dotnet-hostfxr-7-0-debuginfo
- redhat-upgrade-dotnet-runtime-6-0
- redhat-upgrade-dotnet-runtime-6-0-debuginfo
- redhat-upgrade-dotnet-runtime-7-0
- redhat-upgrade-dotnet-runtime-7-0-debuginfo
- redhat-upgrade-dotnet-sdk-6-0
- redhat-upgrade-dotnet-sdk-6-0-debuginfo
- redhat-upgrade-dotnet-sdk-6-0-source-built-artifacts
- redhat-upgrade-dotnet-sdk-7-0
- redhat-upgrade-dotnet-sdk-7-0-debuginfo
- redhat-upgrade-dotnet-sdk-7-0-source-built-artifacts
- redhat-upgrade-dotnet-targeting-pack-6-0
- redhat-upgrade-dotnet-targeting-pack-7-0
- redhat-upgrade-dotnet-templates-6-0
- redhat-upgrade-dotnet-templates-7-0
- redhat-upgrade-dotnet6-0-debuginfo
- redhat-upgrade-dotnet6-0-debugsource
- redhat-upgrade-dotnet7-0-debuginfo
- redhat-upgrade-dotnet7-0-debugsource
- redhat-upgrade-go-toolset
- redhat-upgrade-golang
- redhat-upgrade-golang-bin
- redhat-upgrade-golang-docs
- redhat-upgrade-golang-misc
- redhat-upgrade-golang-race
- redhat-upgrade-golang-src
- redhat-upgrade-golang-tests
- redhat-upgrade-grafana
- redhat-upgrade-grafana-debuginfo
- redhat-upgrade-grafana-debugsource
- redhat-upgrade-libnghttp2
- redhat-upgrade-libnghttp2-debuginfo
- redhat-upgrade-libnghttp2-devel
- redhat-upgrade-netstandard-targeting-pack-2-1
- redhat-upgrade-nghttp2
- redhat-upgrade-nghttp2-debuginfo
- redhat-upgrade-nghttp2-debugsource
- redhat-upgrade-nginx
- redhat-upgrade-nginx-all-modules
- redhat-upgrade-nginx-core
- redhat-upgrade-nginx-core-debuginfo
- redhat-upgrade-nginx-debuginfo
- redhat-upgrade-nginx-debugsource
- redhat-upgrade-nginx-filesystem
- redhat-upgrade-nginx-mod-devel
- redhat-upgrade-nginx-mod-http-image-filter
- redhat-upgrade-nginx-mod-http-image-filter-debuginfo
- redhat-upgrade-nginx-mod-http-perl
- redhat-upgrade-nginx-mod-http-perl-debuginfo
- redhat-upgrade-nginx-mod-http-xslt-filter
- redhat-upgrade-nginx-mod-http-xslt-filter-debuginfo
- redhat-upgrade-nginx-mod-mail
- redhat-upgrade-nginx-mod-mail-debuginfo
- redhat-upgrade-nginx-mod-stream
- redhat-upgrade-nginx-mod-stream-debuginfo
- redhat-upgrade-nodejs
- redhat-upgrade-nodejs-debuginfo
- redhat-upgrade-nodejs-debugsource
- redhat-upgrade-nodejs-devel
- redhat-upgrade-nodejs-docs
- redhat-upgrade-nodejs-full-i18n
- redhat-upgrade-nodejs-libs
- redhat-upgrade-nodejs-libs-debuginfo
- redhat-upgrade-nodejs-nodemon
- redhat-upgrade-nodejs-packaging
- redhat-upgrade-nodejs-packaging-bundler
- redhat-upgrade-npm
- redhat-upgrade-rhc-worker-script
- redhat-upgrade-tomcat
- redhat-upgrade-tomcat-admin-webapps
- redhat-upgrade-tomcat-docs-webapp
- redhat-upgrade-tomcat-el-3-0-api
- redhat-upgrade-tomcat-jsp-2-3-api
- redhat-upgrade-tomcat-lib
- redhat-upgrade-tomcat-servlet-4-0-api
- redhat-upgrade-tomcat-webapps
- redhat-upgrade-toolbox
- redhat-upgrade-toolbox-debuginfo
- redhat-upgrade-toolbox-debugsource
- redhat-upgrade-toolbox-tests
- redhat-upgrade-varnish
- redhat-upgrade-varnish-devel
- redhat-upgrade-varnish-docs
- redhat-upgrade-varnish-modules
- redhat-upgrade-varnish-modules-debuginfo
- redhat-upgrade-varnish-modules-debugsource
Advanced vulnerability management analytics and reporting.
Key Features
- Lightweight Endpoint Agent
- Live Dashboards
- Real Risk Prioritization
- IT-Integrated Remediation Projects
- Cloud, Virtual, and Container Assessment
- Integrated Threat Feeds
- Easy-to-Use RESTful API
- Automation-Assisted Patching
- Automated Containment
With Rapid7 live dashboards, I have a clear view of all the assets on my network, which ones can be exploited, and what I need to do in order to reduce the risk in my environment in real-time. No other tool gives us that kind of value and insight.
– Scott Cheney, Manager of Information Security, Sierra View Medical Center