SUSE: CVE-2023-44487: SUSE Linux Security Advisory
4
(AV:L/AC:M/Au:N/C:P/I:P/A:P)
10/10/2023
10/16/2023
10/16/2023
02/23/2024
Description
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
Solution(s)
- suse-upgrade-abseil-cpp-devel
- suse-upgrade-corepack14
- suse-upgrade-corepack16
- suse-upgrade-corepack18
- suse-upgrade-go1-20
- suse-upgrade-go1-20-doc
- suse-upgrade-go1-20-openssl
- suse-upgrade-go1-20-openssl-doc
- suse-upgrade-go1-20-openssl-race
- suse-upgrade-go1-20-race
- suse-upgrade-go1-21
- suse-upgrade-go1-21-doc
- suse-upgrade-go1-21-openssl
- suse-upgrade-go1-21-openssl-doc
- suse-upgrade-go1-21-openssl-race
- suse-upgrade-go1-21-race
- suse-upgrade-grpc-devel
- suse-upgrade-grpc-source
- suse-upgrade-jetty-annotations
- suse-upgrade-jetty-ant
- suse-upgrade-jetty-cdi
- suse-upgrade-jetty-client
- suse-upgrade-jetty-continuation
- suse-upgrade-jetty-deploy
- suse-upgrade-jetty-fcgi
- suse-upgrade-jetty-http
- suse-upgrade-jetty-http-spi
- suse-upgrade-jetty-io
- suse-upgrade-jetty-jaas
- suse-upgrade-jetty-jmx
- suse-upgrade-jetty-jndi
- suse-upgrade-jetty-jsp
- suse-upgrade-jetty-minimal-javadoc
- suse-upgrade-jetty-openid
- suse-upgrade-jetty-plus
- suse-upgrade-jetty-proxy
- suse-upgrade-jetty-quickstart
- suse-upgrade-jetty-rewrite
- suse-upgrade-jetty-security
- suse-upgrade-jetty-server
- suse-upgrade-jetty-servlet
- suse-upgrade-jetty-servlets
- suse-upgrade-jetty-start
- suse-upgrade-jetty-util
- suse-upgrade-jetty-util-ajax
- suse-upgrade-jetty-webapp
- suse-upgrade-jetty-xml
- suse-upgrade-kubevirt-container-disk
- suse-upgrade-kubevirt-manifests
- suse-upgrade-kubevirt-tests
- suse-upgrade-kubevirt-virt-api
- suse-upgrade-kubevirt-virt-controller
- suse-upgrade-kubevirt-virt-exportproxy
- suse-upgrade-kubevirt-virt-exportserver
- suse-upgrade-kubevirt-virt-handler
- suse-upgrade-kubevirt-virt-launcher
- suse-upgrade-kubevirt-virt-operator
- suse-upgrade-kubevirt-virtctl
- suse-upgrade-libabsl2308_0_0
- suse-upgrade-libabsl2308_0_0-32bit
- suse-upgrade-libgrpc-1_60
- suse-upgrade-libgrpc1_60
- suse-upgrade-libgrpc37
- suse-upgrade-libnghttp2-14
- suse-upgrade-libnghttp2-14-32bit
- suse-upgrade-libnghttp2-devel
- suse-upgrade-libnghttp2_asio-devel
- suse-upgrade-libnghttp2_asio1
- suse-upgrade-libnghttp2_asio1-32bit
- suse-upgrade-libprotobuf-lite25_1_0
- suse-upgrade-libprotobuf-lite25_1_0-32bit
- suse-upgrade-libprotobuf25_1_0
- suse-upgrade-libprotobuf25_1_0-32bit
- suse-upgrade-libprotoc25_1_0
- suse-upgrade-libprotoc25_1_0-32bit
- suse-upgrade-libre2-11
- suse-upgrade-libre2-11-32bit
- suse-upgrade-libupb37
- suse-upgrade-netty
- suse-upgrade-netty-javadoc
- suse-upgrade-netty-poms
- suse-upgrade-netty-tcnative
- suse-upgrade-netty-tcnative-javadoc
- suse-upgrade-nghttp2
- suse-upgrade-nodejs10
- suse-upgrade-nodejs10-devel
- suse-upgrade-nodejs10-docs
- suse-upgrade-nodejs12
- suse-upgrade-nodejs12-devel
- suse-upgrade-nodejs12-docs
- suse-upgrade-nodejs14
- suse-upgrade-nodejs14-devel
- suse-upgrade-nodejs14-docs
- suse-upgrade-nodejs16
- suse-upgrade-nodejs16-devel
- suse-upgrade-nodejs16-docs
- suse-upgrade-nodejs18
- suse-upgrade-nodejs18-devel
- suse-upgrade-nodejs18-docs
- suse-upgrade-npm10
- suse-upgrade-npm12
- suse-upgrade-npm14
- suse-upgrade-npm16
- suse-upgrade-npm18
- suse-upgrade-obs-service-kubevirt_containers_meta
- suse-upgrade-opencensus-proto-source
- suse-upgrade-protobuf-devel
- suse-upgrade-protobuf-java
- suse-upgrade-python3-nghttp2
- suse-upgrade-python311-abseil
- suse-upgrade-python311-grpcio
- suse-upgrade-python311-protobuf
- suse-upgrade-re2-devel
- suse-upgrade-tomcat
- suse-upgrade-tomcat-admin-webapps
- suse-upgrade-tomcat-docs-webapp
- suse-upgrade-tomcat-el-3_0-api
- suse-upgrade-tomcat-embed
- suse-upgrade-tomcat-javadoc
- suse-upgrade-tomcat-jsp-2_3-api
- suse-upgrade-tomcat-jsvc
- suse-upgrade-tomcat-lib
- suse-upgrade-tomcat-servlet-4_0-api
- suse-upgrade-tomcat-webapps
- suse-upgrade-upb-devel
Advanced vulnerability management analytics and reporting.
Key Features
- Lightweight Endpoint Agent
- Live Dashboards
- Real Risk Prioritization
- IT-Integrated Remediation Projects
- Cloud, Virtual, and Container Assessment
- Integrated Threat Feeds
- Easy-to-Use RESTful API
- Automation-Assisted Patching
- Automated Containment
With Rapid7 live dashboards, I have a clear view of all the assets on my network, which ones can be exploited, and what I need to do in order to reduce the risk in my environment in real-time. No other tool gives us that kind of value and insight.
– Scott Cheney, Manager of Information Security, Sierra View Medical Center