{"item": {"cve_id": "CVE-2023-44487", "ghsa_id": "", "osv_id": "", "title": "CVE-2023-44487", "description": "The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.", "published_at": "2023-10-10T14:15:10.883", "modified_at": "2026-08-11T19:37:30.880", "vendor": "Siemens", "product": "Simatic s7-1500 Cpu 1518f-4 Pn/dp Mfp Firmware", "affected_versions": ["n/a"], "fixed_versions": [], "cvss_score": 7.5, "cvss_version": "3.1", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "severity": "HIGH", "epss_score": 0.99999, "epss_percentile": 0.99998, "epss_date": "2026-10-06", "is_kev": true, "kev_date": "2023-10-10", "kev_due_date": "2023-10-31", "kev_action": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "cwe_ids": ["CWE-400"], "attack_vector": "NETWORK", "attack_complexity": "LOW", "privileges_required": "NONE", "user_interaction": "NONE", "references": ["http://www.openwall.com/lists/oss-security/2023/10/10/6", "http://www.openwall.com/lists/oss-security/2023/10/10/7", "http://www.openwall.com/lists/oss-security/2023/10/13/4", "http://www.openwall.com/lists/oss-security/2023/10/13/9", "http://www.openwall.com/lists/oss-security/2023/10/18/4", "http://www.openwall.com/lists/oss-security/2023/10/18/8", "http://www.openwall.com/lists/oss-security/2023/10/19/6", "http://www.openwall.com/lists/oss-security/2023/10/20/8", "https://access.redhat.com/security/cve/cve-2023-44487", "https://arstechnica.com/security/2023/10/how-ddosers-used-the-http-2-protocol-to-deliver-attacks-of-unprecedented-size/", "https://aws.amazon.com/security/security-bulletins/AWS-2023-011/", "https://blog.cloudflare.com/technical-breakdown-http2-rapid-reset-ddos-attack/", "https://github.com/dotnet/core/blob/e4613450ea0da7fd2fc6b61dfb2c1c1dec1ce9ec/release-notes/6.0/6.0.23/6.0.23.md?plain=1#L73", "https://cloud.google.com/blog/products/identity-security/how-it-works-the-novel-http2-rapid-reset-ddos-attack", "https://www.nginx.com/blog/http-2-rapid-reset-attack-impacting-f5-nginx-products/", "https://cloud.google.com/blog/products/identity-security/google-cloud-mitigated-largest-ddos-attack-peaking-above-398-million-rps/", "https://news.ycombinator.com/item?id=37831062", "https://blog.cloudflare.com/zero-day-rapid-reset-http2-record-breaking-ddos-attack/", "https://www.phoronix.com/news/HTTP2-Rapid-Reset-Attack", "https://github.com/envoyproxy/envoy/pull/30055", "https://github.com/haproxy/haproxy/issues/2312", "https://github.com/eclipse/jetty.project/issues/10679", "https://forums.swift.org/t/swift-nio-http2-security-update-cve-2023-44487-http-2-dos/67764", "https://github.com/nghttp2/nghttp2/pull/1961", "https://github.com/netty/netty/commit/58f75f665aa81a8cbcf6ffa74820042a285c5e61", "https://github.com/alibaba/tengine/issues/1872", "https://github.com/apache/tomcat/tree/main/java/org/apache/coyote/http2", "https://news.ycombinator.com/item?id=37830987", "https://news.ycombinator.com/item?id=37830998", "https://github.com/caddyserver/caddy/issues/5877", "https://www.bleepingcomputer.com/news/security/new-http-2-rapid-reset-zero-day-attack-breaks-ddos-records/", "https://github.com/bcdannyboy/CVE-2023-44487", "https://github.com/grpc/grpc-go/pull/6703", "https://github.com/icing/mod_h2/blob/0a864782af0a942aa2ad4ed960a6b32cd35bcf0a/mod_http2/README.md?plain=1#L239-L244", "https://github.com/nghttp2/nghttp2/releases/tag/v1.57.0", "https://mailman.nginx.org/pipermail/nginx-devel/2023-October/S36Q5HBXR7CAIMPLLPRSSSYR4PCMWILK.html", "https://my.f5.com/manage/s/article/K000137106", "https://msrc.microsoft.com/blog/2023/10/microsoft-response-to-distributed-denial-of-service-ddos-attacks-against-http/2/", "https://bugzilla.proxmox.com/show_bug.cgi?id=4988", "https://cgit.freebsd.org/ports/commit/?id=c64c329c2c1752f46b73e3e6ce9f4329be6629f9", "https://seanmonstar.com/post/730794151136935936/hyper-http2-rapid-reset-unaffected", "https://github.com/microsoft/CBL-Mariner/pull/6381", "https://groups.google.com/g/golang-announce/c/iNNxDTCjZvo", "https://github.com/facebook/proxygen/pull/466", "https://gist.github.com/adulau/7c2bfb8e9cdbe4b35a5e131c66a0c088", "https://github.com/micrictor/http2-rst-stream", "https://edg.io/lp/blog/resets-leaks-ddos-and-the-tale-of-a-hidden-cve", "https://openssf.org/blog/2023/10/10/http-2-rapid-reset-vulnerability-highlights-need-for-rapid-response/", "https://github.com/h2o/h2o/security/advisories/GHSA-2m7v-gc89-fjqf", "https://github.com/h2o/h2o/pull/3291", "https://github.com/nodejs/node/pull/50121", "https://github.com/dotnet/announcements/issues/277", "https://github.com/golang/go/issues/63417", "https://github.com/advisories/GHSA-vx74-f528-fxqg", "https://github.com/apache/trafficserver/pull/10564", "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-44487", "https://tomcat.apache.org/security-10.html#Fixed_in_Apache_Tomcat_10.1.14", "https://lists.apache.org/thread/5py8h42mxfsn8l1wy6o41xwhsjlsd87q", "https://www.openwall.com/lists/oss-security/2023/10/10/6", "https://www.haproxy.com/blog/haproxy-is-not-affected-by-the-http-2-rapid-reset-attack-cve-2023-44487", "https://github.com/opensearch-project/data-prepper/issues/3474", "https://github.com/kubernetes/kubernetes/pull/121120", "https://github.com/oqtane/oqtane.framework/discussions/3367", "https://github.com/advisories/GHSA-xpw8-rcwv-8f8p", "https://netty.io/news/2023/10/10/4-1-100-Final.html", "https://www.cisa.gov/news-events/alerts/2023/10/10/http2-rapid-reset-vulnerability-cve-2023-44487", "https://www.theregister.com/2023/10/10/http2_rapid_reset_zeroday/", "https://blog.qualys.com/vulnerabilities-threat-research/2023/10/10/cve-2023-44487-http-2-rapid-reset-attack", "https://news.ycombinator.com/item?id=37837043", "https://github.com/kazu-yamamoto/http2/issues/93", "https://martinthomson.github.io/h2-stream-limits/draft-thomson-httpbis-h2-stream-limits.html", "https://github.com/kazu-yamamoto/http2/commit/f61d41a502bd0f60eb24e1ce14edc7b6df6722a1", "https://github.com/apache/httpd/blob/afcdbeebbff4b0c50ea26cdd16e178c0d1f24152/modules/http2/h2_mplx.c#L1101-L1113", "https://www.debian.org/security/2023/dsa-5522", "https://www.debian.org/security/2023/dsa-5521", "https://github.com/ninenines/cowboy/issues/1615", "https://github.com/varnishcache/varnish-cache/issues/3996", "https://github.com/tempesta-tech/tempesta/issues/1986", "https://blog.vespa.ai/cve-2023-44487/", "https://github.com/etcd-io/etcd/issues/16740", "https://www.darkreading.com/cloud/internet-wide-zero-day-bug-fuels-largest-ever-ddos-event", "https://istio.io/latest/news/security/istio-security-2023-004/", "https://github.com/junkurihara/rust-rpxy/issues/97", "https://bugzilla.suse.com/show_bug.cgi?id=1216123", "https://bugzilla.redhat.com/show_bug.cgi?id=2242803", "https://ubuntu.com/security/CVE-2023-44487", "https://community.traefik.io/t/is-traefik-vulnerable-to-cve-2023-44487/20125", "https://github.com/advisories/GHSA-qppj-fm5r-hxr3", "https://github.com/apache/httpd-site/pull/10", "https://github.com/projectcontour/contour/pull/5826", "https://github.com/linkerd/website/pull/1695/commits/4b9c6836471bc8270ab48aae6fd2181bc73fd632", "https://github.com/line/armeria/pull/5232", "https://blog.litespeedtech.com/2023/10/11/rapid-reset-http-2-vulnerablilty/", "https://security.paloaltonetworks.com/CVE-2023-44487", "https://github.com/akka/akka-http/issues/4323", "https://github.com/openresty/openresty/issues/930", "https://github.com/apache/apisix/issues/10320", "https://github.com/Azure/AKS/issues/3947", "https://github.com/Kong/kong/discussions/11741", "https://github.com/arkrwn/PoC/tree/main/CVE-2023-44487", "https://www.netlify.com/blog/netlify-successfully-mitigates-cve-2023-44487/", "https://github.com/caddyserver/caddy/releases/tag/v2.7.5", "https://lists.debian.org/debian-lts-announce/2023/10/msg00020.html", "https://lists.w3.org/Archives/Public/ietf-http-wg/2023OctDec/0025.html", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JMEXY22BFG5Q64HQCM5CK2Q7KDKVV4TY/", "https://linkerd.io/2023/10/12/linkerd-cve-2023-44487/", "https://lists.debian.org/debian-lts-announce/2023/10/msg00023.html", "https://security.netapp.com/advisory/ntap-20231016-0001/", "https://lists.debian.org/debian-lts-announce/2023/10/msg00024.html", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZKQSIKIAT5TJ3WSLU3RDBQ35YX4GY4V3/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JIZSEFC3YKCGABA2BZW6ZJRMDZJMB7PJ/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WLPRQ5TWUQQXYWBJM7ECYDAIL2YVKIUH/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/E72T67UPDRXHIDLO3OROR25YAMN4GGW5/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BFQD3KUEMFBHPAPBGLWQC34L4OWL5HAZ/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZLU6U2R2IC2K64NDPNMV55AUAO65MAF4/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/X6QXN4ORIVF6XBW4WWFE7VNPVC74S45Y/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LKYHSZQFDNR7RSA7LHVLLIAQMVYCUGBG/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FNA62Q767CFAFHBCDKYNPBMZWB7TWYVU/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LNMZJCDHGLJJLXO4OXWJMTVQRNWOC7UL/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KSEGD2IWKNUO3DWY4KQGUQM5BISRWHQE/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CLB4TW7KALB3EEQWNWCN7OUIWWVWWCG2/", "https://lists.debian.org/debian-lts-announce/2023/10/msg00045.html", "https://www.debian.org/security/2023/dsa-5540", "https://lists.debian.org/debian-lts-announce/2023/10/msg00047.html", "https://discuss.hashicorp.com/t/hcsec-2023-32-vault-consul-and-boundary-affected-by-http-2-rapid-reset-denial-of-service-vulnerability-cve-2023-44487/59715", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VHUHTSXLXGXS7JYKBXTA3VINUPHTNGVU/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VSRDIV77HNKUSM7SJC5BKE5JSHLHU2NK/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3N4NJ7FR4X4FPZUGNTQAPSTVB2HB2Y4A/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZB43REMKRQR62NJEI7I5NQ4FSXNLBKRT/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HT7T2R4MQKLIF4ODV4BDLPARWFPCJ5CZ/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XFOIBB4YFICHDM7IBOP7PWXW3FX4HLL2/", "https://lists.debian.org/debian-lts-announce/2023/11/msg00001.html", "https://www.debian.org/security/2023/dsa-5549", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2MBEPPC36UBVOZZNAXFHKLFGSLCMN5LI/", "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WE2I52RHNNU42PX6NZ2RBUHSFFJ2LVZX/", "https://www.debian.org/security/2023/dsa-5558", "https://lists.debian.org/debian-lts-announce/2023/11/msg00012.html", "https://security.gentoo.org/glsa/202311-09", "https://www.debian.org/security/2023/dsa-5570", "https://security.netapp.com/advisory/ntap-20240426-0007/", "https://security.netapp.com/advisory/ntap-20240621-0006/", "https://security.netapp.com/advisory/ntap-20240621-0007/", "https://github.com/grpc/grpc/releases/tag/v1.59.2", "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-http2-reset-d8Kf32vZ", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-44487", "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JMEXY22BFG5Q64HQCM5CK2Q7KDKVV4TY/", "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZKQSIKIAT5TJ3WSLU3RDBQ35YX4GY4V3/", "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JIZSEFC3YKCGABA2BZW6ZJRMDZJMB7PJ/", "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WLPRQ5TWUQQXYWBJM7ECYDAIL2YVKIUH/", "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E72T67UPDRXHIDLO3OROR25YAMN4GGW5/", "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BFQD3KUEMFBHPAPBGLWQC34L4OWL5HAZ/", "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZLU6U2R2IC2K64NDPNMV55AUAO65MAF4/", "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X6QXN4ORIVF6XBW4WWFE7VNPVC74S45Y/", "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LKYHSZQFDNR7RSA7LHVLLIAQMVYCUGBG/", "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FNA62Q767CFAFHBCDKYNPBMZWB7TWYVU/", "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LNMZJCDHGLJJLXO4OXWJMTVQRNWOC7UL/", "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KSEGD2IWKNUO3DWY4KQGUQM5BISRWHQE/", "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CLB4TW7KALB3EEQWNWCN7OUIWWVWWCG2/", "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VHUHTSXLXGXS7JYKBXTA3VINUPHTNGVU/", "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VSRDIV77HNKUSM7SJC5BKE5JSHLHU2NK/", "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3N4NJ7FR4X4FPZUGNTQAPSTVB2HB2Y4A/", "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZB43REMKRQR62NJEI7I5NQ4FSXNLBKRT/", "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HT7T2R4MQKLIF4ODV4BDLPARWFPCJ5CZ/", "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XFOIBB4YFICHDM7IBOP7PWXW3FX4HLL2/", "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2MBEPPC36UBVOZZNAXFHKLFGSLCMN5LI/", "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WE2I52RHNNU42PX6NZ2RBUHSFFJ2LVZX/", "https://www.vicarius.io/vsociety/posts/rapid-reset-cve-2023-44487-dos-in-http2-understanding-the-root-cause", "http://www.openwall.com/lists/oss-security/2025/08/13/6", "https://cert-portal.siemens.com/productcert/html/ssa-832273.html", "https://cert-portal.siemens.com/productcert/html/ssa-341067.html", "https://cert-portal.siemens.com/productcert/html/ssa-784301.html", "https://cert-portal.siemens.com/productcert/html/ssa-915275.html", "https://cert-portal.siemens.com/productcert/html/ssa-082556.html"], "source_urls": {"NVD": "https://nvd.nist.gov/vuln/detail/CVE-2023-44487", "CVE.org": "https://www.cve.org/CVERecord?id=CVE-2023-44487", "CISA": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-44487", "FIRST EPSS": "https://api.first.org/data/v1/epss?cve=CVE-2023-44487"}, "patch_available": null, "workaround_available": null, "sources": ["NVD", "CVE.org", "CISA", "FIRST EPSS"], "reference_items": [{"url": "http://www.openwall.com/lists/oss-security/2023/10/10/6", "tags": ["Mailing List", "Third Party Advisory", "mailing-list"], "source": "NVD", "name": ""}, {"url": "http://www.openwall.com/lists/oss-security/2023/10/10/7", "tags": ["Mailing List", "Third Party Advisory", "mailing-list"], "source": "NVD", "name": ""}, {"url": "http://www.openwall.com/lists/oss-security/2023/10/13/4", "tags": ["Mailing List", "Third Party Advisory", "mailing-list", "x_transferred"], "source": "NVD", "name": ""}, {"url": "http://www.openwall.com/lists/oss-security/2023/10/13/9", "tags": ["Mailing List", "Third Party Advisory", "mailing-list", "x_transferred"], "source": "NVD", "name": ""}, {"url": "http://www.openwall.com/lists/oss-security/2023/10/18/4", "tags": ["Mailing List", "Third Party Advisory", "mailing-list", "x_transferred"], "source": "NVD", "name": ""}, {"url": "http://www.openwall.com/lists/oss-security/2023/10/18/8", "tags": ["Mailing List", "Third Party Advisory", "mailing-list", "x_transferred"], "source": "NVD", "name": ""}, {"url": "http://www.openwall.com/lists/oss-security/2023/10/19/6", "tags": ["Mailing List", "Third Party Advisory", "mailing-list", "x_transferred"], "source": "NVD", "name": ""}, {"url": "http://www.openwall.com/lists/oss-security/2023/10/20/8", "tags": ["Mailing List", "Third Party Advisory", "mailing-list", "x_transferred"], "source": "NVD", "name": ""}, {"url": "https://access.redhat.com/security/cve/cve-2023-44487", "tags": ["Vendor Advisory", "x_transferred"], "source": "NVD", "name": ""}, {"url": "https://arstechnica.com/security/2023/10/how-ddosers-used-the-http-2-protocol-to-deliver-attacks-of-unprecedented-size/", "tags": ["Press/Media Coverage", "Third Party Advisory", "x_transferred"], "source": "NVD", "name": ""}, {"url": "https://aws.amazon.com/security/security-bulletins/AWS-2023-011/", "tags": ["Third Party Advisory", "x_transferred"], "source": "NVD", "name": ""}, {"url": "https://blog.cloudflare.com/technical-breakdown-http2-rapid-reset-ddos-attack/", "tags": ["Technical Description", "Vendor Advisory", "x_transferred"], "source": "NVD", "name": ""}, {"url": "https://blog.cloudflare.com/zero-day-rapid-reset-http2-record-breaking-ddos-attack/", "tags": ["Third Party Advisory", "Vendor Advisory", "x_transferred"], "source": "NVD", "name": ""}, {"url": "https://blog.litespeedtech.com/2023/10/11/rapid-reset-http-2-vulnerablilty/", "tags": ["Vendor Advisory", "x_transferred"], "source": "NVD", "name": ""}, {"url": "https://blog.qualys.com/vulnerabilities-threat-research/2023/10/10/cve-2023-44487-http-2-rapid-reset-attack", "tags": ["Press/Media Coverage", "Third Party Advisory", "x_transferred"], "source": "NVD", "name": ""}, {"url": "https://blog.vespa.ai/cve-2023-44487/", "tags": ["Vendor Advisory", "x_transferred"], "source": "NVD", "name": ""}, {"url": "https://bugzilla.proxmox.com/show_bug.cgi?id=4988", "tags": ["Issue Tracking", "Third Party Advisory", "x_transferred"], "source": "NVD", "name": ""}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2242803", "tags": ["Issue Tracking", "Vendor Advisory", "x_transferred"], "source": "NVD", "name": ""}, {"url": "https://bugzilla.suse.com/show_bug.cgi?id=1216123", "tags": ["Issue Tracking", "Vendor Advisory", "x_transferred"], "source": "NVD", "name": ""}, {"url": "https://cgit.freebsd.org/ports/commit/?id=c64c329c2c1752f46b73e3e6ce9f4329be6629f9", "tags": ["Mailing List", "Patch", "Vendor Advisory", "x_transferred"], "source": "NVD", "name": ""}, {"url": "https://cloud.google.com/blog/products/identity-security/google-cloud-mitigated-largest-ddos-attack-peaking-above-398-million-rps/", "tags": ["Technical Description", "Vendor Advisory", "x_transferred"], "source": "NVD", "name": ""}, {"url": "https://cloud.google.com/blog/products/identity-security/how-it-works-the-novel-http2-rapid-reset-ddos-attack", "tags": ["Technical Description", "Vendor Advisory", "x_transferred"], "source": "NVD", "name": ""}, {"url": "https://community.traefik.io/t/is-traefik-vulnerable-to-cve-2023-44487/20125", "tags": ["Vendor Advisory", "x_transferred"], "source": "NVD", "name": ""}, {"url": "https://discuss.hashicorp.com/t/hcsec-2023-32-vault-consul-and-boundary-affected-by-http-2-rapid-reset-denial-of-service-vulnerability-cve-2023-44487/59715", "tags": ["Third Party Advisory", "x_transferred"], "source": "NVD", "name": ""}, {"url": "https://edg.io/lp/blog/resets-leaks-ddos-and-the-tale-of-a-hidden-cve", "tags": ["Broken Link", "x_transferred"], "source": "NVD", "name": ""}, {"url": "https://forums.swift.org/t/swift-nio-http2-security-update-cve-2023-44487-http-2-dos/67764", "tags": ["Vendor Advisory", "x_transferred"], "source": "NVD", "name": ""}, {"url": "https://gist.github.com/adulau/7c2bfb8e9cdbe4b35a5e131c66a0c088", "tags": ["Issue Tracking", "Patch", "x_transferred"], "source": "NVD", "name": ""}, {"url": "https://github.com/Azure/AKS/issues/3947", "tags": ["Issue Tracking", "x_transferred"], "source": "NVD", "name": ""}, {"url": "https://github.com/Kong/kong/discussions/11741", "tags": ["Issue Tracking", "x_transferred"], "source": "NVD", "name": ""}, {"url": "https://github.com/advisories/GHSA-qppj-fm5r-hxr3", "tags": ["Vendor Advisory", "x_transferred"], "source": "NVD", "name": ""}, {"url": "https://github.com/advisories/GHSA-vx74-f528-fxqg", "tags": ["Mitigation", "Patch", "Vendor Advisory", "x_transferred"], "source": "NVD", "name": ""}, {"url": "https://github.com/advisories/GHSA-xpw8-rcwv-8f8p", "tags": ["Patch", "Vendor Advisory", "x_transferred"], "source": "NVD", "name": ""}, {"url": "https://github.com/akka/akka-http/issues/4323", "tags": ["Issue Tracking", "x_transferred"], "source": "NVD", "name": ""}, {"url": "https://github.com/alibaba/tengine/issues/1872", "tags": ["Issue Tracking", "x_transferred"], "source": "NVD", "name": ""}, {"url": "https://github.com/apache/apisix/issues/10320", "tags": ["Issue Tracking", "x_transferred"], "source": "NVD", "name": ""}, {"url": "https://github.com/apache/httpd-site/pull/10", "tags": ["Issue Tracking", "x_transferred"], "source": "NVD", "name": ""}, {"url": "https://github.com/apache/httpd/blob/afcdbeebbff4b0c50ea26cdd16e178c0d1f24152/modules/http2/h2_mplx.c#L1101-L1113", "tags": ["Product", "x_transferred"], "source": "NVD", "name": ""}, {"url": "https://github.com/apache/tomcat/tree/main/java/org/apache/coyote/http2", "tags": ["Product", "Third Party Advisory", "x_transferred"], "source": "NVD", "name": ""}, {"url": "https://github.com/apache/trafficserver/pull/10564", "tags": ["Issue Tracking", "Patch", "x_transferred"], "source": "NVD", "name": ""}, {"url": "https://github.com/arkrwn/PoC/tree/main/CVE-2023-44487", "tags": ["Vendor Advisory", "x_transferred"], "source": "NVD", "name": ""}, {"url": "https://github.com/bcdannyboy/CVE-2023-44487", "tags": ["Third Party Advisory", "x_transferred"], "source": "NVD", "name": ""}, {"url": "https://github.com/caddyserver/caddy/issues/5877", "tags": ["Issue Tracking", "Vendor Advisory", "x_transferred"], "source": "NVD", "name": ""}, {"url": "https://github.com/caddyserver/caddy/releases/tag/v2.7.5", "tags": ["Release Notes", "Third Party Advisory", "x_transferred"], "source": "NVD", "name": ""}, {"url": "https://github.com/dotnet/announcements/issues/277", "tags": ["Issue Tracking", "Mitigation", "Vendor Advisory", "x_transferred"], "source": "NVD", "name": ""}, {"url": "https://github.com/dotnet/core/blob/e4613450ea0da7fd2fc6b61dfb2c1c1dec1ce9ec/release-notes/6.0/6.0.23/6.0.23.md?plain=1#L73", "tags": ["Product", "Release Notes", "x_transferred"], "source": "NVD", "name": ""}, {"url": "https://github.com/eclipse/jetty.project/issues/10679", "tags": ["Issue Tracking", "x_transferred"], "source": "NVD", "name": ""}, {"url": "https://github.com/envoyproxy/envoy/pull/30055", "tags": ["Issue Tracking", "Patch", "x_transferred"], "source": "NVD", "name": ""}, {"url": "https://github.com/etcd-io/etcd/issues/16740", "tags": ["Issue Tracking", "Patch", "x_transferred"], "source": "NVD", "name": ""}, {"url": "https://github.com/facebook/proxygen/pull/466", "tags": ["Issue Tracking", "Patch", "x_transferred"], "source": "NVD", "name": ""}, {"url": "https://github.com/golang/go/issues/63417", "tags": ["Issue Tracking", "x_transferred"], "source": "NVD", "name": ""}, {"url": "https://github.com/grpc/grpc-go/pull/6703", "tags": ["Issue Tracking", "Patch", "x_transferred"], "source": "NVD", "name": ""}, {"url": "https://github.com/grpc/grpc/releases/tag/v1.59.2", "tags": ["Mailing List"], "source": "NVD", "name": ""}, {"url": "https://github.com/h2o/h2o/pull/3291", "tags": ["Issue Tracking", "Patch", "x_transferred"], "source": "NVD", "name": ""}, {"url": "https://github.com/h2o/h2o/security/advisories/GHSA-2m7v-gc89-fjqf", "tags": ["Vendor Advisory", "x_transferred"], "source": "NVD", "name": ""}, {"url": "https://github.com/haproxy/haproxy/issues/2312", "tags": ["Issue Tracking", "x_transferred"], "source": "NVD", "name": ""}, {"url": "https://github.com/icing/mod_h2/blob/0a864782af0a942aa2ad4ed960a6b32cd35bcf0a/mod_http2/README.md?plain=1#L239-L244", "tags": ["Product", "x_transferred"], "source": "NVD", "name": ""}, {"url": "https://github.com/junkurihara/rust-rpxy/issues/97", "tags": ["Issue Tracking", "x_transferred"], "source": "NVD", "name": ""}, {"url": "https://github.com/kazu-yamamoto/http2/commit/f61d41a502bd0f60eb24e1ce14edc7b6df6722a1", "tags": ["Patch", "x_transferred"], "source": "NVD", "name": ""}, {"url": "https://github.com/kazu-yamamoto/http2/issues/93", "tags": ["Issue Tracking", "x_transferred"], "source": "NVD", "name": ""}, {"url": "https://github.com/kubernetes/kubernetes/pull/121120", "tags": ["Issue Tracking", "Patch", "x_transferred"], "source": "NVD", "name": ""}, {"url": "https://www.nginx.com/blog/http-2-rapid-reset-attack-impacting-f5-nginx-products/", "tags": ["x_transferred"], "source": "CVE.org", "name": ""}, {"url": "https://news.ycombinator.com/item?id=37831062", "tags": ["x_transferred"], "source": "CVE.org", "name": ""}, {"url": "https://www.phoronix.com/news/HTTP2-Rapid-Reset-Attack", "tags": ["x_transferred"], "source": "CVE.org", "name": ""}, {"url": "https://github.com/nghttp2/nghttp2/pull/1961", "tags": ["x_transferred"], "source": "CVE.org", "name": ""}, {"url": "https://github.com/netty/netty/commit/58f75f665aa81a8cbcf6ffa74820042a285c5e61", "tags": ["x_transferred"], "source": "CVE.org", "name": ""}, {"url": "https://news.ycombinator.com/item?id=37830987", "tags": ["x_transferred"], "source": "CVE.org", "name": ""}, {"url": "https://news.ycombinator.com/item?id=37830998", "tags": ["x_transferred"], "source": "CVE.org", "name": ""}, {"url": "https://www.bleepingcomputer.com/news/security/new-http-2-rapid-reset-zero-day-attack-breaks-ddos-records/", "tags": ["x_transferred"], "source": "CVE.org", "name": ""}, {"url": "https://github.com/nghttp2/nghttp2/releases/tag/v1.57.0", "tags": ["x_transferred"], "source": "CVE.org", "name": ""}, {"url": "https://mailman.nginx.org/pipermail/nginx-devel/2023-October/S36Q5HBXR7CAIMPLLPRSSSYR4PCMWILK.html", "tags": ["x_transferred"], "source": "CVE.org", "name": ""}, {"url": "https://my.f5.com/manage/s/article/K000137106", "tags": ["x_transferred"], "source": "CVE.org", "name": ""}, {"url": "https://msrc.microsoft.com/blog/2023/10/microsoft-response-to-distributed-denial-of-service-ddos-attacks-against-http/2/", "tags": ["x_transferred"], "source": "CVE.org", "name": ""}, {"url": "https://seanmonstar.com/post/730794151136935936/hyper-http2-rapid-reset-unaffected", "tags": ["x_transferred"], "source": "CVE.org", "name": ""}, {"url": "https://github.com/microsoft/CBL-Mariner/pull/6381", "tags": ["x_transferred"], "source": "CVE.org", "name": ""}, {"url": "https://groups.google.com/g/golang-announce/c/iNNxDTCjZvo", "tags": ["x_transferred"], "source": "CVE.org", "name": ""}, {"url": "https://github.com/micrictor/http2-rst-stream", "tags": ["x_transferred"], "source": "CVE.org", "name": ""}, {"url": "https://openssf.org/blog/2023/10/10/http-2-rapid-reset-vulnerability-highlights-need-for-rapid-response/", "tags": ["x_transferred"], "source": "CVE.org", "name": ""}, {"url": "https://github.com/nodejs/node/pull/50121", "tags": ["x_transferred"], "source": "CVE.org", "name": ""}, {"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-44487", "tags": ["x_transferred"], "source": "CVE.org", "name": ""}, {"url": "https://tomcat.apache.org/security-10.html#Fixed_in_Apache_Tomcat_10.1.14", "tags": ["x_transferred"], "source": "CVE.org", "name": ""}, {"url": "https://lists.apache.org/thread/5py8h42mxfsn8l1wy6o41xwhsjlsd87q", "tags": ["x_transferred"], "source": "CVE.org", "name": ""}, {"url": "https://www.openwall.com/lists/oss-security/2023/10/10/6", "tags": ["x_transferred"], "source": "CVE.org", "name": ""}, {"url": "https://www.haproxy.com/blog/haproxy-is-not-affected-by-the-http-2-rapid-reset-attack-cve-2023-44487", "tags": ["x_transferred"], "source": "CVE.org", "name": ""}, {"url": "https://github.com/opensearch-project/data-prepper/issues/3474", "tags": ["x_transferred"], "source": "CVE.org", "name": ""}, {"url": "https://github.com/oqtane/oqtane.framework/discussions/3367", "tags": ["x_transferred"], "source": "CVE.org", "name": ""}, {"url": "https://netty.io/news/2023/10/10/4-1-100-Final.html", "tags": ["x_transferred"], "source": "CVE.org", "name": ""}, {"url": "https://www.cisa.gov/news-events/alerts/2023/10/10/http2-rapid-reset-vulnerability-cve-2023-44487", "tags": ["x_transferred"], "source": "CVE.org", "name": ""}, {"url": "https://www.theregister.com/2023/10/10/http2_rapid_reset_zeroday/", "tags": ["x_transferred"], "source": "CVE.org", "name": ""}, {"url": "https://news.ycombinator.com/item?id=37837043", "tags": ["x_transferred"], "source": "CVE.org", "name": ""}, {"url": "https://martinthomson.github.io/h2-stream-limits/draft-thomson-httpbis-h2-stream-limits.html", "tags": ["x_transferred"], "source": "CVE.org", "name": ""}, {"url": "https://www.debian.org/security/2023/dsa-5522", "tags": ["vendor-advisory", "x_transferred"], "source": "CVE.org", "name": "DSA-5522"}, {"url": "https://www.debian.org/security/2023/dsa-5521", "tags": ["vendor-advisory", "x_transferred"], "source": "CVE.org", "name": "DSA-5521"}, {"url": "https://github.com/ninenines/cowboy/issues/1615", "tags": ["x_transferred"], "source": "CVE.org", "name": ""}, {"url": "https://github.com/varnishcache/varnish-cache/issues/3996", "tags": ["x_transferred"], "source": "CVE.org", "name": ""}, {"url": "https://github.com/tempesta-tech/tempesta/issues/1986", "tags": ["x_transferred"], "source": "CVE.org", "name": ""}, {"url": "https://www.darkreading.com/cloud/internet-wide-zero-day-bug-fuels-largest-ever-ddos-event", "tags": ["x_transferred"], "source": "CVE.org", "name": ""}, {"url": "https://istio.io/latest/news/security/istio-security-2023-004/", "tags": ["x_transferred"], "source": "CVE.org", "name": ""}, {"url": "https://ubuntu.com/security/CVE-2023-44487", "tags": ["x_transferred"], "source": "CVE.org", "name": ""}, {"url": "https://github.com/projectcontour/contour/pull/5826", "tags": ["x_transferred"], "source": "CVE.org", "name": ""}, {"url": "https://github.com/linkerd/website/pull/1695/commits/4b9c6836471bc8270ab48aae6fd2181bc73fd632", "tags": ["x_transferred"], "source": "CVE.org", "name": ""}, {"url": "https://github.com/line/armeria/pull/5232", "tags": ["x_transferred"], "source": "CVE.org", "name": ""}, {"url": "https://security.paloaltonetworks.com/CVE-2023-44487", "tags": ["x_transferred"], "source": "CVE.org", "name": ""}, {"url": "https://github.com/openresty/openresty/issues/930", "tags": ["x_transferred"], "source": "CVE.org", "name": ""}, {"url": "https://www.netlify.com/blog/netlify-successfully-mitigates-cve-2023-44487/", "tags": ["x_transferred"], "source": "CVE.org", "name": ""}, {"url": "https://lists.debian.org/debian-lts-announce/2023/10/msg00020.html", "tags": ["mailing-list", "x_transferred"], "source": "CVE.org", "name": "[debian-lts-announce] 20231013 [SECURITY] [DLA 3617-1] tomcat9 security update"}, {"url": "https://lists.w3.org/Archives/Public/ietf-http-wg/2023OctDec/0025.html", "tags": ["x_transferred"], "source": "CVE.org", "name": ""}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JMEXY22BFG5Q64HQCM5CK2Q7KDKVV4TY/", "tags": ["vendor-advisory"], "source": "CVE.org", "name": "FEDORA-2023-ed2642fd58"}, {"url": "https://linkerd.io/2023/10/12/linkerd-cve-2023-44487/", "tags": ["x_transferred"], "source": "CVE.org", "name": ""}, {"url": "https://lists.debian.org/debian-lts-announce/2023/10/msg00023.html", "tags": ["mailing-list", "x_transferred"], "source": "CVE.org", "name": "[debian-lts-announce] 20231016 [SECURITY] [DLA 3621-1] nghttp2 security update"}, {"url": "https://security.netapp.com/advisory/ntap-20231016-0001/", "tags": ["x_transferred"], "source": "CVE.org", "name": ""}, {"url": "https://lists.debian.org/debian-lts-announce/2023/10/msg00024.html", "tags": ["mailing-list", "x_transferred"], "source": "CVE.org", "name": "[debian-lts-announce] 20231016 [SECURITY] [DLA 3617-2] tomcat9 regression update"}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZKQSIKIAT5TJ3WSLU3RDBQ35YX4GY4V3/", "tags": ["vendor-advisory"], "source": "CVE.org", "name": "FEDORA-2023-54fadada12"}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JIZSEFC3YKCGABA2BZW6ZJRMDZJMB7PJ/", "tags": ["vendor-advisory"], "source": "CVE.org", "name": "FEDORA-2023-5ff7bf1dd8"}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WLPRQ5TWUQQXYWBJM7ECYDAIL2YVKIUH/", "tags": ["vendor-advisory"], "source": "CVE.org", "name": "FEDORA-2023-17efd3f2cd"}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/E72T67UPDRXHIDLO3OROR25YAMN4GGW5/", "tags": ["vendor-advisory"], "source": "CVE.org", "name": "FEDORA-2023-d5030c983c"}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BFQD3KUEMFBHPAPBGLWQC34L4OWL5HAZ/", "tags": ["vendor-advisory"], "source": "CVE.org", "name": "FEDORA-2023-0259c3f26f"}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZLU6U2R2IC2K64NDPNMV55AUAO65MAF4/", "tags": ["vendor-advisory"], "source": "CVE.org", "name": "FEDORA-2023-2a9214af5f"}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/X6QXN4ORIVF6XBW4WWFE7VNPVC74S45Y/", "tags": ["vendor-advisory"], "source": "CVE.org", "name": "FEDORA-2023-e9c04d81c1"}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LKYHSZQFDNR7RSA7LHVLLIAQMVYCUGBG/", "tags": ["vendor-advisory"], "source": "CVE.org", "name": "FEDORA-2023-f66fc0f62a"}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FNA62Q767CFAFHBCDKYNPBMZWB7TWYVU/", "tags": ["vendor-advisory"], "source": "CVE.org", "name": "FEDORA-2023-4d2fd884ea"}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LNMZJCDHGLJJLXO4OXWJMTVQRNWOC7UL/", "tags": ["vendor-advisory"], "source": "CVE.org", "name": "FEDORA-2023-b2c50535cb"}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KSEGD2IWKNUO3DWY4KQGUQM5BISRWHQE/", "tags": ["vendor-advisory"], "source": "CVE.org", "name": "FEDORA-2023-fe53e13b5b"}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CLB4TW7KALB3EEQWNWCN7OUIWWVWWCG2/", "tags": ["vendor-advisory"], "source": "CVE.org", "name": "FEDORA-2023-4bf641255e"}, {"url": "https://lists.debian.org/debian-lts-announce/2023/10/msg00045.html", "tags": ["mailing-list", "x_transferred"], "source": "CVE.org", "name": "[debian-lts-announce] 20231030 [SECURITY] [DLA 3641-1] jetty9 security update"}, {"url": "https://www.debian.org/security/2023/dsa-5540", "tags": ["vendor-advisory", "x_transferred"], "source": "CVE.org", "name": "DSA-5540"}, {"url": "https://lists.debian.org/debian-lts-announce/2023/10/msg00047.html", "tags": ["mailing-list", "x_transferred"], "source": "CVE.org", "name": "[debian-lts-announce] 20231031 [SECURITY] [DLA 3638-1] h2o security update"}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VHUHTSXLXGXS7JYKBXTA3VINUPHTNGVU/", "tags": ["vendor-advisory"], "source": "CVE.org", "name": "FEDORA-2023-1caffb88af"}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VSRDIV77HNKUSM7SJC5BKE5JSHLHU2NK/", "tags": ["vendor-advisory"], "source": "CVE.org", "name": "FEDORA-2023-3f70b8d406"}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3N4NJ7FR4X4FPZUGNTQAPSTVB2HB2Y4A/", "tags": ["vendor-advisory"], "source": "CVE.org", "name": "FEDORA-2023-7b52921cae"}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZB43REMKRQR62NJEI7I5NQ4FSXNLBKRT/", "tags": ["vendor-advisory"], "source": "CVE.org", "name": "FEDORA-2023-7934802344"}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HT7T2R4MQKLIF4ODV4BDLPARWFPCJ5CZ/", "tags": ["vendor-advisory"], "source": "CVE.org", "name": "FEDORA-2023-dbe64661af"}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XFOIBB4YFICHDM7IBOP7PWXW3FX4HLL2/", "tags": ["vendor-advisory"], "source": "CVE.org", "name": "FEDORA-2023-822aab0a5a"}, {"url": "https://lists.debian.org/debian-lts-announce/2023/11/msg00001.html", "tags": ["mailing-list", "x_transferred"], "source": "CVE.org", "name": "[debian-lts-announce] 20231105 [SECURITY] [DLA 3645-1] trafficserver security update"}, {"url": "https://www.debian.org/security/2023/dsa-5549", "tags": ["vendor-advisory", "x_transferred"], "source": "CVE.org", "name": "DSA-5549"}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2MBEPPC36UBVOZZNAXFHKLFGSLCMN5LI/", "tags": ["vendor-advisory"], "source": "CVE.org", "name": "FEDORA-2023-c0c6a91330"}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WE2I52RHNNU42PX6NZ2RBUHSFFJ2LVZX/", "tags": ["vendor-advisory"], "source": "CVE.org", "name": "FEDORA-2023-492b7be466"}, {"url": "https://www.debian.org/security/2023/dsa-5558", "tags": ["vendor-advisory", "x_transferred"], "source": "CVE.org", "name": "DSA-5558"}, {"url": "https://lists.debian.org/debian-lts-announce/2023/11/msg00012.html", "tags": ["mailing-list", "x_transferred"], "source": "CVE.org", "name": "[debian-lts-announce] 20231119 [SECURITY] [DLA 3656-1] netty security update"}, {"url": "https://security.gentoo.org/glsa/202311-09", "tags": ["vendor-advisory", "x_transferred"], "source": "CVE.org", "name": "GLSA-202311-09"}, {"url": "https://www.debian.org/security/2023/dsa-5570", "tags": ["vendor-advisory", "x_transferred"], "source": "CVE.org", "name": "DSA-5570"}, {"url": "https://security.netapp.com/advisory/ntap-20240426-0007/", "tags": ["x_transferred"], "source": "CVE.org", "name": ""}, {"url": "https://security.netapp.com/advisory/ntap-20240621-0006/", "tags": ["x_transferred"], "source": "CVE.org", "name": ""}, {"url": "https://security.netapp.com/advisory/ntap-20240621-0007/", "tags": ["x_transferred"], "source": "CVE.org", "name": ""}, {"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-http2-reset-d8Kf32vZ", "tags": [], "source": "CVE.org", "name": ""}, {"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-44487", "tags": ["government-resource"], "source": "CVE.org", "name": ""}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JMEXY22BFG5Q64HQCM5CK2Q7KDKVV4TY/", "tags": ["vendor-advisory", "x_transferred"], "source": "CVE.org", "name": "FEDORA-2023-ed2642fd58"}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZKQSIKIAT5TJ3WSLU3RDBQ35YX4GY4V3/", "tags": ["vendor-advisory", "x_transferred"], "source": "CVE.org", "name": "FEDORA-2023-54fadada12"}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JIZSEFC3YKCGABA2BZW6ZJRMDZJMB7PJ/", "tags": ["vendor-advisory", "x_transferred"], "source": "CVE.org", "name": "FEDORA-2023-5ff7bf1dd8"}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WLPRQ5TWUQQXYWBJM7ECYDAIL2YVKIUH/", "tags": ["vendor-advisory", "x_transferred"], "source": "CVE.org", "name": "FEDORA-2023-17efd3f2cd"}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E72T67UPDRXHIDLO3OROR25YAMN4GGW5/", "tags": ["vendor-advisory", "x_transferred"], "source": "CVE.org", "name": "FEDORA-2023-d5030c983c"}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BFQD3KUEMFBHPAPBGLWQC34L4OWL5HAZ/", "tags": ["vendor-advisory", "x_transferred"], "source": "CVE.org", "name": "FEDORA-2023-0259c3f26f"}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZLU6U2R2IC2K64NDPNMV55AUAO65MAF4/", "tags": ["vendor-advisory", "x_transferred"], "source": "CVE.org", "name": "FEDORA-2023-2a9214af5f"}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X6QXN4ORIVF6XBW4WWFE7VNPVC74S45Y/", "tags": ["vendor-advisory", "x_transferred"], "source": "CVE.org", "name": "FEDORA-2023-e9c04d81c1"}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LKYHSZQFDNR7RSA7LHVLLIAQMVYCUGBG/", "tags": ["vendor-advisory", "x_transferred"], "source": "CVE.org", "name": "FEDORA-2023-f66fc0f62a"}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FNA62Q767CFAFHBCDKYNPBMZWB7TWYVU/", "tags": ["vendor-advisory", "x_transferred"], "source": "CVE.org", "name": "FEDORA-2023-4d2fd884ea"}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LNMZJCDHGLJJLXO4OXWJMTVQRNWOC7UL/", "tags": ["vendor-advisory", "x_transferred"], "source": "CVE.org", "name": "FEDORA-2023-b2c50535cb"}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KSEGD2IWKNUO3DWY4KQGUQM5BISRWHQE/", "tags": ["vendor-advisory", "x_transferred"], "source": "CVE.org", "name": "FEDORA-2023-fe53e13b5b"}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CLB4TW7KALB3EEQWNWCN7OUIWWVWWCG2/", "tags": ["vendor-advisory", "x_transferred"], "source": "CVE.org", "name": "FEDORA-2023-4bf641255e"}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VHUHTSXLXGXS7JYKBXTA3VINUPHTNGVU/", "tags": ["vendor-advisory", "x_transferred"], "source": "CVE.org", "name": "FEDORA-2023-1caffb88af"}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VSRDIV77HNKUSM7SJC5BKE5JSHLHU2NK/", "tags": ["vendor-advisory", "x_transferred"], "source": "CVE.org", "name": "FEDORA-2023-3f70b8d406"}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3N4NJ7FR4X4FPZUGNTQAPSTVB2HB2Y4A/", "tags": ["vendor-advisory", "x_transferred"], "source": "CVE.org", "name": "FEDORA-2023-7b52921cae"}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZB43REMKRQR62NJEI7I5NQ4FSXNLBKRT/", "tags": ["vendor-advisory", "x_transferred"], "source": "CVE.org", "name": "FEDORA-2023-7934802344"}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HT7T2R4MQKLIF4ODV4BDLPARWFPCJ5CZ/", "tags": ["vendor-advisory", "x_transferred"], "source": "CVE.org", "name": "FEDORA-2023-dbe64661af"}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XFOIBB4YFICHDM7IBOP7PWXW3FX4HLL2/", "tags": ["vendor-advisory", "x_transferred"], "source": "CVE.org", "name": "FEDORA-2023-822aab0a5a"}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2MBEPPC36UBVOZZNAXFHKLFGSLCMN5LI/", "tags": ["vendor-advisory", "x_transferred"], "source": "CVE.org", "name": "FEDORA-2023-c0c6a91330"}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WE2I52RHNNU42PX6NZ2RBUHSFFJ2LVZX/", "tags": ["vendor-advisory", "x_transferred"], "source": "CVE.org", "name": "FEDORA-2023-492b7be466"}, {"url": "https://www.vicarius.io/vsociety/posts/rapid-reset-cve-2023-44487-dos-in-http2-understanding-the-root-cause", "tags": [], "source": "CVE.org", "name": ""}, {"url": "http://www.openwall.com/lists/oss-security/2025/08/13/6", "tags": [], "source": "CVE.org", "name": ""}, {"url": "https://cert-portal.siemens.com/productcert/html/ssa-832273.html", "tags": [], "source": "CVE.org", "name": ""}, {"url": "https://cert-portal.siemens.com/productcert/html/ssa-341067.html", "tags": [], "source": "CVE.org", "name": ""}, {"url": "https://cert-portal.siemens.com/productcert/html/ssa-784301.html", "tags": [], "source": "CVE.org", "name": ""}, {"url": "https://cert-portal.siemens.com/productcert/html/ssa-915275.html", "tags": [], "source": "CVE.org", "name": ""}, {"url": "https://cert-portal.siemens.com/productcert/html/ssa-082556.html", "tags": [], "source": "CVE.org", "name": ""}], "cvss_v4_score": null, "cvss_v4_vector": "", "cvss_v4_severity": "", "nvd_status": "Analyzed", "cna": "mitre", "date_reserved": "2023-09-29T00:00:00.000Z", "ssvc": {"options": {"Exploitation": "active", "Automatable": "yes", "Technical Impact": "partial"}, "version": "2.0.3", "timestamp": "2024-07-23T20:34:21.334116Z", "role": "CISA Coordinator"}, "affected_products": [{"vendor": "Siemens", "product": "Simatic s7-1500 Cpu 1518f-4 Pn/dp Mfp Firmware", "ranges": ["à partir de 3.1.5"], "first_unaffected": [], "source": "NVD"}, {"vendor": "Siemens", "product": "Sinec Ins", "ranges": ["avant 1.0", "1.0"], "first_unaffected": ["1.0"], "source": "NVD"}, {"vendor": "Siemens", "product": "Sinec Nms", "ranges": ["avant 3.0"], "first_unaffected": ["3.0"], "source": "NVD"}, {"vendor": "Siemens", "product": "st7 Scadaconnect", "ranges": ["avant 1.1"], "first_unaffected": ["1.1"], "source": "NVD"}, {"vendor": "Siemens", "product": "Ruggedcom ape1808 Firmware", "ranges": ["toutes versions (selon NVD)"], "first_unaffected": [], "source": "NVD"}, {"vendor": "Siemens", "product": "Simatic s7-1500 Cpu 1518-4 Pn/dp Mfp Firmware", "ranges": ["à partir de 3.1.5"], "first_unaffected": [], "source": "NVD"}, {"vendor": "Siemens", "product": "Siplus s7-1500 Cpu 1518-4 Pn/dp Mfp Firmware", "ranges": ["à partir de 3.1.5"], "first_unaffected": [], "source": "NVD"}, {"vendor": "Ietf", "product": "Http", "ranges": ["2.0"], "first_unaffected": [], "source": "NVD"}, {"vendor": "nghttp2", "product": "nghttp2", "ranges": ["avant 1.57.0"], "first_unaffected": ["1.57.0"], "source": "NVD"}, {"vendor": "Netty", "product": "Netty", "ranges": ["avant 4.1.100"], "first_unaffected": ["4.1.100"], "source": "NVD"}, {"vendor": "Envoyproxy", "product": "Envoy", "ranges": ["1.24.10", "1.25.9", "1.26.4", "1.27.0"], "first_unaffected": [], "source": "NVD"}, {"vendor": "Eclipse", "product": "Jetty", "ranges": ["avant 9.4.53", "de 10.0.0 à 10.0.17 (exclue)", "de 11.0.0 à 11.0.17 (exclue)", "de 12.0.0 à 12.0.2 (exclue)"], "first_unaffected": ["9.4.53", "10.0.17", "11.0.17", "12.0.2"], "source": "NVD"}, {"vendor": "Caddyserver", "product": "Caddy", "ranges": ["avant 2.7.5"], "first_unaffected": ["2.7.5"], "source": "NVD"}, {"vendor": "Golang", "product": "Go", "ranges": ["avant 1.20.10", "de 1.21.0 à 1.21.3 (exclue)"], "first_unaffected": ["1.20.10", "1.21.3"], "source": "NVD"}, {"vendor": "Golang", "product": "http2", "ranges": ["avant 0.17.0"], "first_unaffected": ["0.17.0"], "source": "NVD"}, {"vendor": "f5", "product": "Big-ip Access Policy Manager", "ranges": ["de 13.1.0 à 13.1.5 (incluse)"], "first_unaffected": [], "source": "NVD"}, {"vendor": "Apache", "product": "Tomcat", "ranges": ["de 8.5.0 à 8.5.93 (incluse)"], "first_unaffected": [], "source": "NVD"}, {"vendor": "Apple", "product": "Swiftnio http/2", "ranges": ["avant 1.28.0"], "first_unaffected": ["1.28.0"], "source": "NVD"}, {"vendor": "Grpc", "product": "Grpc", "ranges": ["avant 1.56.3"], "first_unaffected": ["1.56.3"], "source": "NVD"}, {"vendor": "Microsoft", "product": ".net", "ranges": ["de 6.0.0 à 6.0.23 (exclue)"], "first_unaffected": ["6.0.23"], "source": "NVD"}, {"vendor": "Nodejs", "product": "Node.js", "ranges": ["de 18.0.0 à 18.18.2 (exclue)"], "first_unaffected": ["18.18.2"], "source": "NVD"}, {"vendor": "Microsoft", "product": "Cbl-mariner", "ranges": ["avant 2023-10-11"], "first_unaffected": ["2023-10-11"], "source": "NVD"}, {"vendor": "Dena", "product": "h2o", "ranges": ["avant 2023-10-10"], "first_unaffected": ["2023-10-10"], "source": "NVD"}, {"vendor": "Facebook", "product": "Proxygen", "ranges": ["avant 2023.10.16.00"], "first_unaffected": ["2023.10.16.00"], "source": "NVD"}, {"vendor": "Apache", "product": "Apisix", "ranges": ["avant 3.6.1"], "first_unaffected": ["3.6.1"], "source": "NVD"}, {"vendor": "Amazon", "product": "Opensearch Data Prepper", "ranges": ["avant 2.5.0"], "first_unaffected": ["2.5.0"], "source": "NVD"}, {"vendor": "Debian", "product": "Debian Linux", "ranges": ["10.0"], "first_unaffected": [], "source": "NVD"}, {"vendor": "Kazu-yamamoto", "product": "http2", "ranges": ["avant 4.2.2"], "first_unaffected": ["4.2.2"], "source": "NVD"}, {"vendor": "Istio", "product": "Istio", "ranges": ["avant 1.17.6"], "first_unaffected": ["1.17.6"], "source": "NVD"}, {"vendor": "Varnish Cache Project", "product": "Varnish Cache", "ranges": ["avant 2023-10-10"], "first_unaffected": ["2023-10-10"], "source": "NVD"}, {"vendor": "Traefik", "product": "Traefik", "ranges": ["avant 2.10.5"], "first_unaffected": ["2.10.5"], "source": "NVD"}, {"vendor": "Projectcontour", "product": "Contour", "ranges": ["avant 2023-10-11"], "first_unaffected": ["2023-10-11"], "source": "NVD"}, {"vendor": "Linkerd", "product": "Linkerd", "ranges": ["de 2.12.0 à 2.12.5 (incluse)"], "first_unaffected": [], "source": "NVD"}, {"vendor": "Linecorp", "product": "Armeria", "ranges": ["avant 1.26.0"], "first_unaffected": ["1.26.0"], "source": "NVD"}, {"vendor": "Redhat", "product": "3scale Api Management Platform", "ranges": ["2.0"], "first_unaffected": [], "source": "NVD"}, {"vendor": "Redhat", "product": "Service Telemetry Framework", "ranges": ["1.5"], "first_unaffected": [], "source": "NVD"}, {"vendor": "Fedoraproject", "product": "Fedora", "ranges": ["37"], "first_unaffected": [], "source": "NVD"}, {"vendor": "Netapp", "product": "Astra Control Center", "ranges": ["toutes versions (selon NVD)"], "first_unaffected": [], "source": "NVD"}, {"vendor": "Akka", "product": "Http Server", "ranges": ["avant 10.5.3"], "first_unaffected": ["10.5.3"], "source": "NVD"}, {"vendor": "Konghq", "product": "Kong Gateway", "ranges": ["avant 3.4.2"], "first_unaffected": ["3.4.2"], "source": "NVD"}, {"vendor": "Jenkins", "product": "Jenkins", "ranges": ["jusqu'à 2.414.2 (incluse)"], "first_unaffected": [], "source": "NVD"}, {"vendor": "Apache", "product": "Solr", "ranges": ["avant 9.4.0"], "first_unaffected": ["9.4.0"], "source": "NVD"}, {"vendor": "Openresty", "product": "Openresty", "ranges": ["avant 1.21.4.3"], "first_unaffected": ["1.21.4.3"], "source": "NVD"}, {"vendor": "Cisco", "product": "Business Process Automation", "ranges": ["avant 3.2.003.009"], "first_unaffected": ["3.2.003.009"], "source": "NVD"}, {"vendor": "Cisco", "product": "Secure Web Appliance Firmware", "ranges": ["avant 15.1.0"], "first_unaffected": ["15.1.0"], "source": "NVD"}, {"vendor": "Cisco", "product": "Nx-os", "ranges": ["avant 10.2\\(7\\)"], "first_unaffected": ["10.2\\(7\\)"], "source": "NVD"}, {"vendor": "n/a", "product": "n/a", "ranges": ["n/a"], "first_unaffected": [], "source": "CVE.org"}], "kev_name": "HTTP/2 Rapid Reset Attack Vulnerability", "kev_short_description": "HTTP/2 contains a rapid reset vulnerability that allows for a distributed denial-of-service attack (DDoS).", "kev_ransomware": "Unknown", "kev_notes": "This vulnerability affects a common open-source component, third-party library, or protocol used by different products. For more information, please see: HTTP/2 Rapid Reset Vulnerability, CVE-2023-44487 | CISA: https://www.cisa.gov/news-events/alerts/2023/10/10/http2-rapid-reset-vulnerability-cve-2023-44487; https://blog.cloudflare.com/technical-breakdown-http2-rapid-reset-ddos-attack/;  https://nvd.nist.gov/vuln/detail/CVE-2023-44487", "kev_cwes": ["CWE-400"], "wordfence_id": "", "mentions_sources": [], "version_match": "unknown", "risk_score": 75, "risk_class": "Critique", "impact": {"confidentialite": "aucun", "integrite": "aucun", "disponibilite": "élevé", "summary": "Un attaquant exploitant cette vulnérabilité pourrait, selon les conditions décrites par les sources, exploitable à distance (réseau), sans authentification préalable, affecter la disponibilité du service.", "basis": "CVSS 3.1"}, "mechanism": "Consommation de ressources non maîtrisée pouvant mener à un déni de service.", "mitigation": {"correction": {"available": true, "text": "Mettre à jour : selon les sources, ne sont plus concernées les versions à partir de Sinec Ins 1.0, Sinec Nms 3.0, st7 Scadaconnect 1.1, nghttp2 1.57.0, Netty 4.1.100."}, "mitigation": {"specific": "Aucune mesure de mitigation spécifique confirmée par les sources consultées. Consultez les références officielles pour d'éventuelles mesures détaillées.", "general": ["Maintenir le produit à jour et activer les mises à jour de sécurité.", "Restreindre l'exposition réseau du service au strict nécessaire.", "Appliquer le principe du moindre privilège.", "Surveiller les journaux et les alertes de sécurité."], "specific_links": []}, "containment": {"applicable": true, "actions": ["Action recommandée par la CISA : Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "Isoler ou restreindre l'accès au service concerné.", "Restreindre les flux réseau entrants/sortants liés au composant.", "Renforcer la surveillance des journaux et des accès.", "Désactiver temporairement le composant vulnérable si l'activité le permet."]}, "note": "Priorité aux consignes officielles de l'éditeur et des références. Vérifiez toujours l'avis de sécurité avant toute intervention en production.", "official_links": [{"url": "https://cgit.freebsd.org/ports/commit/?id=c64c329c2c1752f46b73e3e6ce9f4329be6629f9", "groupe": "correctif", "groupe_titre": "Correctifs et versions corrigées", "editeur": "", "domaine": "cgit.freebsd.org"}, {"url": "https://gist.github.com/adulau/7c2bfb8e9cdbe4b35a5e131c66a0c088", "groupe": "correctif", "groupe_titre": "Correctifs et versions corrigées", "editeur": "", "domaine": "gist.github.com"}, {"url": "https://github.com/advisories/GHSA-vx74-f528-fxqg", "groupe": "correctif", "groupe_titre": "Correctifs et versions corrigées", "editeur": "GitHub Security Advisory", "domaine": "github.com"}, {"url": "https://github.com/advisories/GHSA-xpw8-rcwv-8f8p", "groupe": "correctif", "groupe_titre": "Correctifs et versions corrigées", "editeur": "GitHub Security Advisory", "domaine": "github.com"}, {"url": "https://github.com/apache/trafficserver/pull/10564", "groupe": "correctif", "groupe_titre": "Correctifs et versions corrigées", "editeur": "GitHub", "domaine": "github.com"}, {"url": "https://github.com/caddyserver/caddy/releases/tag/v2.7.5", "groupe": "correctif", "groupe_titre": "Correctifs et versions corrigées", "editeur": "GitHub", "domaine": "github.com"}, {"url": "https://github.com/dotnet/core/blob/e4613450ea0da7fd2fc6b61dfb2c1c1dec1ce9ec/release-notes/6.0/6.0.23/6.0.23.md?plain=1#L73", "groupe": "correctif", "groupe_titre": "Correctifs et versions corrigées", "editeur": "GitHub", "domaine": "github.com"}, {"url": "https://github.com/envoyproxy/envoy/pull/30055", "groupe": "correctif", "groupe_titre": "Correctifs et versions corrigées", "editeur": "GitHub", "domaine": "github.com"}, {"url": "https://github.com/etcd-io/etcd/issues/16740", "groupe": "correctif", "groupe_titre": "Correctifs et versions corrigées", "editeur": "GitHub", "domaine": "github.com"}, {"url": "https://github.com/facebook/proxygen/pull/466", "groupe": "correctif", "groupe_titre": "Correctifs et versions corrigées", "editeur": "GitHub", "domaine": "github.com"}, {"url": "https://github.com/grpc/grpc-go/pull/6703", "groupe": "correctif", "groupe_titre": "Correctifs et versions corrigées", "editeur": "GitHub", "domaine": "github.com"}, {"url": "https://github.com/h2o/h2o/pull/3291", "groupe": "correctif", "groupe_titre": "Correctifs et versions corrigées", "editeur": "GitHub", "domaine": "github.com"}]}, "plain": {"verdict": "now", "verdict_label": "Exploité par des attaquants · à traiter aujourd'hui", "verdict_css": "now", "verdict_rank": 0, "headline": "Le service peut être saturé et rendu indisponible, à distance et sans compte", "headline_is_derived": true, "action": "Mettre à jour vers Sinec Ins 1.0, Sinec Nms 3.0 ou plus récent, version publiée comme non concernée.", "action_kind": "update", "concerned": [{"version": "Sinec Ins 1.0, Sinec Nms 3.0 ou plus récent", "state": "safe", "state_label": "Non concerné", "todo": "Rien à faire. Gardez les mises à jour automatiques activées."}, {"version": "n/a", "state": "hit", "state_label": "Concerné", "todo": "Mettre à jour vers Sinec Ins 1.0, Sinec Nms 3.0 ou plus récent, version publiée comme non concernée."}, {"version": "Je ne connais pas ma version", "state": "unknown", "state_label": "À vérifier", "todo": "La version s'affiche généralement dans le menu « À propos » ou « Aide » du logiciel."}], "steps": [{"title": "Sauvegarder avant d'intervenir", "detail": "Une copie récente des données et de la configuration. Si votre hébergeur propose une sauvegarde en un clic, c'est le moment.", "duration": "10 min", "priority": false}, {"title": "Mettre à jour vers Sinec Ins 1.0, Sinec Nms 3.0 ou plus récent, version publiée comme non concernée", "detail": "C'est la correction officielle. Tant qu'elle n'est pas appliquée, les autres mesures ne sont que temporaires.", "duration": "15 à 45 min", "priority": true}, {"title": "En attendant : réduire l'exposition sur Internet", "detail": "La faille est exploitable à distance. Limiter l'accès au service depuis l'extérieur (pare-feu, filtrage d'adresses, VPN) réduit fortement le risque.", "duration": "30 min", "priority": false}, {"title": "Vérifier que vous n'avez pas déjà été touché", "detail": "Cette faille est activement exploitée. Contrôler les comptes créés récemment, les connexions inhabituelles et les fichiers modifiés depuis la date de publication.", "duration": "30 min", "priority": true}, {"title": "Confirmer que tout fonctionne encore", "detail": "Après correction : page d'accueil, connexion, et les deux ou trois fonctions dont vous vous servez tous les jours.", "duration": "10 min", "priority": false}], "exploited": true, "exploited_label": "Oui, des attaques réelles sont constatées", "fixed_label": "Sinec Ins 1.0, Sinec Nms 3.0 (non concernée selon les sources)", "affected_label": "n/a"}, "severity_display": "Élevée", "cvss_is_legacy": false, "risk_score_computable": true, "identifier": "CVE-2023-44487", "severity_fr": "Élevée", "epss_pct": 100.0, "source_records": [{"source": "NVD", "label": "NVD, NIST", "date_label": "Publié dans la base", "date": "2023-10-10", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-44487"}, {"source": "CVE.org", "label": "CVE.org, programme CVE", "date_label": "Publié par l'organisme CNA", "date": "2023-10-10", "url": "https://www.cve.org/CVERecord?id=CVE-2023-44487"}, {"source": "CISA", "label": "CISA KEV", "date_label": "Ajout au catalogue", "date": "2023-10-10", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-44487"}, {"source": "FIRST EPSS", "label": "FIRST EPSS", "date_label": "Score daté du", "date": "2026-10-06", "url": "https://api.first.org/data/v1/epss?cve=CVE-2023-44487"}], "exploit_public": false, "reseau_sans_auth": true, "exposition": "À distance, sans compte et sans action d'un utilisateur", "owasp": []}, "presentation": {"en_bref": [{"question": "Est-elle attaquée ?", "ton": "alerte", "reponse": "Oui, attaques constatées", "source": "Catalogue CISA KEV"}, {"question": "Existe-t-il un correctif ?", "ton": "bon", "reponse": "Oui : 1.0, 3.0, 1.1, 1.57.0…", "source": "Versions publiées comme non concernées"}, {"question": "Comment l'attaquer ?", "ton": "alerte", "reponse": "À distance, sans compte et sans action d'un utilisateur", "source": "Vecteur CVSS publié"}, {"question": "Risque d'exploitation", "ton": "alerte", "reponse": "100,0 % sur 30 jours", "source": "Plus probable que 100 % des failles connues"}], "references": [{"cle": "correctif", "titre": "Correctifs et versions corrigées", "explication": "Les pages que les sources désignent comme correctif ou notes de version.", "items": [{"url": "https://cgit.freebsd.org/ports/commit/?id=c64c329c2c1752f46b73e3e6ce9f4329be6629f9", "domaine": "cgit.freebsd.org", "editeur": "", "etiquettes": ["Liste de diffusion", "Correctif", "Avis de l'éditeur"], "nom": "", "lien": true, "casse": false}, {"url": "https://gist.github.com/adulau/7c2bfb8e9cdbe4b35a5e131c66a0c088", "domaine": "gist.github.com", "editeur": "", "etiquettes": ["Suivi de ticket", "Correctif"], "nom": "", "lien": true, "casse": false}, {"url": "https://github.com/advisories/GHSA-vx74-f528-fxqg", "domaine": "github.com", "editeur": "GitHub Security Advisory", "etiquettes": ["Mesure de contournement", "Correctif", "Avis de l'éditeur"], "nom": "", "lien": true, "casse": false}, {"url": "https://github.com/advisories/GHSA-xpw8-rcwv-8f8p", "domaine": "github.com", "editeur": "GitHub Security Advisory", "etiquettes": ["Correctif", "Avis de l'éditeur"], "nom": "", "lien": true, "casse": false}, {"url": "https://github.com/apache/trafficserver/pull/10564", "domaine": "github.com", "editeur": "GitHub", "etiquettes": ["Suivi de ticket", "Correctif"], "nom": "", "lien": true, "casse": false}, {"url": "https://github.com/caddyserver/caddy/releases/tag/v2.7.5", "domaine": "github.com", "editeur": "GitHub", "etiquettes": ["Notes de version", "Avis d'un tiers"], "nom": "", "lien": true, "casse": false}, {"url": "https://github.com/dotnet/core/blob/e4613450ea0da7fd2fc6b61dfb2c1c1dec1ce9ec/release-notes/6.0/6.0.23/6.0.23.md?plain=1#L73", "domaine": "github.com", "editeur": "GitHub", "etiquettes": ["Page produit", "Notes de version"], "nom": "", "lien": true, "casse": false}, {"url": "https://github.com/envoyproxy/envoy/pull/30055", "domaine": "github.com", "editeur": "GitHub", "etiquettes": ["Suivi de ticket", "Correctif"], "nom": "", "lien": true, "casse": false}, {"url": "https://github.com/etcd-io/etcd/issues/16740", "domaine": "github.com", "editeur": "GitHub", "etiquettes": ["Suivi de ticket", "Correctif"], "nom": "", "lien": true, "casse": false}, {"url": "https://github.com/facebook/proxygen/pull/466", "domaine": "github.com", "editeur": "GitHub", "etiquettes": ["Suivi de ticket", "Correctif"], "nom": "", "lien": true, "casse": false}, {"url": "https://github.com/grpc/grpc-go/pull/6703", "domaine": "github.com", "editeur": "GitHub", "etiquettes": ["Suivi de ticket", "Correctif"], "nom": "", "lien": true, "casse": false}, {"url": "https://github.com/h2o/h2o/pull/3291", "domaine": "github.com", "editeur": "GitHub", "etiquettes": ["Suivi de ticket", "Correctif"], "nom": "", "lien": true, "casse": false}, {"url": "https://github.com/kazu-yamamoto/http2/commit/f61d41a502bd0f60eb24e1ce14edc7b6df6722a1", "domaine": "github.com", "editeur": "GitHub", "etiquettes": ["Correctif"], "nom": "", "lien": true, "casse": false}, {"url": "https://github.com/kubernetes/kubernetes/pull/121120", "domaine": "github.com", "editeur": "GitHub", "etiquettes": ["Suivi de ticket", "Correctif"], "nom": "", "lien": true, "casse": false}]}, {"cle": "avis_editeur", "titre": "Avis de sécurité de l'éditeur", "explication": "La parole de l'éditeur du produit : elle fait foi pour savoir quoi installer.", "items": [{"url": "https://access.redhat.com/security/cve/cve-2023-44487", "domaine": "access.redhat.com", "editeur": "Red Hat", "etiquettes": ["Avis de l'éditeur"], "nom": "", "lien": true, "casse": false}, {"url": "https://blog.cloudflare.com/technical-breakdown-http2-rapid-reset-ddos-attack/", "domaine": "blog.cloudflare.com", "editeur": "", "etiquettes": ["Description technique", "Avis de l'éditeur"], "nom": "", "lien": true, "casse": false}, {"url": "https://blog.cloudflare.com/zero-day-rapid-reset-http2-record-breaking-ddos-attack/", "domaine": "blog.cloudflare.com", "editeur": "", "etiquettes": ["Avis d'un tiers", "Avis de l'éditeur"], "nom": "", "lien": true, "casse": false}, {"url": "https://blog.litespeedtech.com/2023/10/11/rapid-reset-http-2-vulnerablilty/", "domaine": "blog.litespeedtech.com", "editeur": "", "etiquettes": ["Avis de l'éditeur"], "nom": "", "lien": true, "casse": false}, {"url": "https://blog.vespa.ai/cve-2023-44487/", "domaine": "blog.vespa.ai", "editeur": "", "etiquettes": ["Avis de l'éditeur"], "nom": "", "lien": true, "casse": false}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2242803", "domaine": "bugzilla.redhat.com", "editeur": "Red Hat", "etiquettes": ["Suivi de ticket", "Avis de l'éditeur"], "nom": "", "lien": true, "casse": false}, {"url": "https://bugzilla.suse.com/show_bug.cgi?id=1216123", "domaine": "bugzilla.suse.com", "editeur": "", "etiquettes": ["Suivi de ticket", "Avis de l'éditeur"], "nom": "", "lien": true, "casse": false}, {"url": "https://cloud.google.com/blog/products/identity-security/google-cloud-mitigated-largest-ddos-attack-peaking-above-398-million-rps/", "domaine": "cloud.google.com", "editeur": "", "etiquettes": ["Description technique", "Avis de l'éditeur"], "nom": "", "lien": true, "casse": false}, {"url": "https://cloud.google.com/blog/products/identity-security/how-it-works-the-novel-http2-rapid-reset-ddos-attack", "domaine": "cloud.google.com", "editeur": "", "etiquettes": ["Description technique", "Avis de l'éditeur"], "nom": "", "lien": true, "casse": false}, {"url": "https://community.traefik.io/t/is-traefik-vulnerable-to-cve-2023-44487/20125", "domaine": "community.traefik.io", "editeur": "", "etiquettes": ["Avis de l'éditeur"], "nom": "", "lien": true, "casse": false}, {"url": "https://forums.swift.org/t/swift-nio-http2-security-update-cve-2023-44487-http-2-dos/67764", "domaine": "forums.swift.org", "editeur": "", "etiquettes": ["Avis de l'éditeur"], "nom": "", "lien": true, "casse": false}, {"url": "https://github.com/advisories/GHSA-qppj-fm5r-hxr3", "domaine": "github.com", "editeur": "GitHub Security Advisory", "etiquettes": ["Avis de l'éditeur"], "nom": "", "lien": true, "casse": false}, {"url": "https://github.com/arkrwn/PoC/tree/main/CVE-2023-44487", "domaine": "github.com", "editeur": "GitHub", "etiquettes": ["Avis de l'éditeur"], "nom": "", "lien": true, "casse": false}, {"url": "https://github.com/caddyserver/caddy/issues/5877", "domaine": "github.com", "editeur": "GitHub", "etiquettes": ["Suivi de ticket", "Avis de l'éditeur"], "nom": "", "lien": true, "casse": false}, {"url": "https://github.com/dotnet/announcements/issues/277", "domaine": "github.com", "editeur": "GitHub", "etiquettes": ["Suivi de ticket", "Mesure de contournement", "Avis de l'éditeur"], "nom": "", "lien": true, "casse": false}, {"url": "https://github.com/h2o/h2o/security/advisories/GHSA-2m7v-gc89-fjqf", "domaine": "github.com", "editeur": "GitHub Security Advisory", "etiquettes": ["Avis de l'éditeur"], "nom": "", "lien": true, "casse": false}, {"url": "https://www.debian.org/security/2023/dsa-5522", "domaine": "www.debian.org", "editeur": "Debian", "etiquettes": ["Avis de l'éditeur"], "nom": "DSA-5522", "lien": true, "casse": false}, {"url": "https://www.debian.org/security/2023/dsa-5521", "domaine": "www.debian.org", "editeur": "Debian", "etiquettes": ["Avis de l'éditeur"], "nom": "DSA-5521", "lien": true, "casse": false}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JMEXY22BFG5Q64HQCM5CK2Q7KDKVV4TY/", "domaine": "lists.fedoraproject.org", "editeur": "Fedora", "etiquettes": ["Avis de l'éditeur"], "nom": "FEDORA-2023-ed2642fd58", "lien": true, "casse": false}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZKQSIKIAT5TJ3WSLU3RDBQ35YX4GY4V3/", "domaine": "lists.fedoraproject.org", "editeur": "Fedora", "etiquettes": ["Avis de l'éditeur"], "nom": "FEDORA-2023-54fadada12", "lien": true, "casse": false}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JIZSEFC3YKCGABA2BZW6ZJRMDZJMB7PJ/", "domaine": "lists.fedoraproject.org", "editeur": "Fedora", "etiquettes": ["Avis de l'éditeur"], "nom": "FEDORA-2023-5ff7bf1dd8", "lien": true, "casse": false}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WLPRQ5TWUQQXYWBJM7ECYDAIL2YVKIUH/", "domaine": "lists.fedoraproject.org", "editeur": "Fedora", "etiquettes": ["Avis de l'éditeur"], "nom": "FEDORA-2023-17efd3f2cd", "lien": true, "casse": false}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/E72T67UPDRXHIDLO3OROR25YAMN4GGW5/", "domaine": "lists.fedoraproject.org", "editeur": "Fedora", "etiquettes": ["Avis de l'éditeur"], "nom": "FEDORA-2023-d5030c983c", "lien": true, "casse": false}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BFQD3KUEMFBHPAPBGLWQC34L4OWL5HAZ/", "domaine": "lists.fedoraproject.org", "editeur": "Fedora", "etiquettes": ["Avis de l'éditeur"], "nom": "FEDORA-2023-0259c3f26f", "lien": true, "casse": false}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZLU6U2R2IC2K64NDPNMV55AUAO65MAF4/", "domaine": "lists.fedoraproject.org", "editeur": "Fedora", "etiquettes": ["Avis de l'éditeur"], "nom": "FEDORA-2023-2a9214af5f", "lien": true, "casse": false}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/X6QXN4ORIVF6XBW4WWFE7VNPVC74S45Y/", "domaine": "lists.fedoraproject.org", "editeur": "Fedora", "etiquettes": ["Avis de l'éditeur"], "nom": "FEDORA-2023-e9c04d81c1", "lien": true, "casse": false}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LKYHSZQFDNR7RSA7LHVLLIAQMVYCUGBG/", "domaine": "lists.fedoraproject.org", "editeur": "Fedora", "etiquettes": ["Avis de l'éditeur"], "nom": "FEDORA-2023-f66fc0f62a", "lien": true, "casse": false}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FNA62Q767CFAFHBCDKYNPBMZWB7TWYVU/", "domaine": "lists.fedoraproject.org", "editeur": "Fedora", "etiquettes": ["Avis de l'éditeur"], "nom": "FEDORA-2023-4d2fd884ea", "lien": true, "casse": false}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LNMZJCDHGLJJLXO4OXWJMTVQRNWOC7UL/", "domaine": "lists.fedoraproject.org", "editeur": "Fedora", "etiquettes": ["Avis de l'éditeur"], "nom": "FEDORA-2023-b2c50535cb", "lien": true, "casse": false}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KSEGD2IWKNUO3DWY4KQGUQM5BISRWHQE/", "domaine": "lists.fedoraproject.org", "editeur": "Fedora", "etiquettes": ["Avis de l'éditeur"], "nom": "FEDORA-2023-fe53e13b5b", "lien": true, "casse": false}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CLB4TW7KALB3EEQWNWCN7OUIWWVWWCG2/", "domaine": "lists.fedoraproject.org", "editeur": "Fedora", "etiquettes": ["Avis de l'éditeur"], "nom": "FEDORA-2023-4bf641255e", "lien": true, "casse": false}, {"url": "https://www.debian.org/security/2023/dsa-5540", "domaine": "www.debian.org", "editeur": "Debian", "etiquettes": ["Avis de l'éditeur"], "nom": "DSA-5540", "lien": true, "casse": false}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VHUHTSXLXGXS7JYKBXTA3VINUPHTNGVU/", "domaine": "lists.fedoraproject.org", "editeur": "Fedora", "etiquettes": ["Avis de l'éditeur"], "nom": "FEDORA-2023-1caffb88af", "lien": true, "casse": false}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VSRDIV77HNKUSM7SJC5BKE5JSHLHU2NK/", "domaine": "lists.fedoraproject.org", "editeur": "Fedora", "etiquettes": ["Avis de l'éditeur"], "nom": "FEDORA-2023-3f70b8d406", "lien": true, "casse": false}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3N4NJ7FR4X4FPZUGNTQAPSTVB2HB2Y4A/", "domaine": "lists.fedoraproject.org", "editeur": "Fedora", "etiquettes": ["Avis de l'éditeur"], "nom": "FEDORA-2023-7b52921cae", "lien": true, "casse": false}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZB43REMKRQR62NJEI7I5NQ4FSXNLBKRT/", "domaine": "lists.fedoraproject.org", "editeur": "Fedora", "etiquettes": ["Avis de l'éditeur"], "nom": "FEDORA-2023-7934802344", "lien": true, "casse": false}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HT7T2R4MQKLIF4ODV4BDLPARWFPCJ5CZ/", "domaine": "lists.fedoraproject.org", "editeur": "Fedora", "etiquettes": ["Avis de l'éditeur"], "nom": "FEDORA-2023-dbe64661af", "lien": true, "casse": false}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XFOIBB4YFICHDM7IBOP7PWXW3FX4HLL2/", "domaine": "lists.fedoraproject.org", "editeur": "Fedora", "etiquettes": ["Avis de l'éditeur"], "nom": "FEDORA-2023-822aab0a5a", "lien": true, "casse": false}, {"url": "https://www.debian.org/security/2023/dsa-5549", "domaine": "www.debian.org", "editeur": "Debian", "etiquettes": ["Avis de l'éditeur"], "nom": "DSA-5549", "lien": true, "casse": false}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2MBEPPC36UBVOZZNAXFHKLFGSLCMN5LI/", "domaine": "lists.fedoraproject.org", "editeur": "Fedora", "etiquettes": ["Avis de l'éditeur"], "nom": "FEDORA-2023-c0c6a91330", "lien": true, "casse": false}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WE2I52RHNNU42PX6NZ2RBUHSFFJ2LVZX/", "domaine": "lists.fedoraproject.org", "editeur": "Fedora", "etiquettes": ["Avis de l'éditeur"], "nom": "FEDORA-2023-492b7be466", "lien": true, "casse": false}, {"url": "https://www.debian.org/security/2023/dsa-5558", "domaine": "www.debian.org", "editeur": "Debian", "etiquettes": ["Avis de l'éditeur"], "nom": "DSA-5558", "lien": true, "casse": false}, {"url": "https://security.gentoo.org/glsa/202311-09", "domaine": "security.gentoo.org", "editeur": "Gentoo", "etiquettes": ["Avis de l'éditeur"], "nom": "GLSA-202311-09", "lien": true, "casse": false}, {"url": "https://www.debian.org/security/2023/dsa-5570", "domaine": "www.debian.org", "editeur": "Debian", "etiquettes": ["Avis de l'éditeur"], "nom": "DSA-5570", "lien": true, "casse": false}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JMEXY22BFG5Q64HQCM5CK2Q7KDKVV4TY/", "domaine": "lists.fedoraproject.org", "editeur": "Fedora", "etiquettes": ["Avis de l'éditeur"], "nom": "FEDORA-2023-ed2642fd58", "lien": true, "casse": false}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZKQSIKIAT5TJ3WSLU3RDBQ35YX4GY4V3/", "domaine": "lists.fedoraproject.org", "editeur": "Fedora", "etiquettes": ["Avis de l'éditeur"], "nom": "FEDORA-2023-54fadada12", "lien": true, "casse": false}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JIZSEFC3YKCGABA2BZW6ZJRMDZJMB7PJ/", "domaine": "lists.fedoraproject.org", "editeur": "Fedora", "etiquettes": ["Avis de l'éditeur"], "nom": "FEDORA-2023-5ff7bf1dd8", "lien": true, "casse": false}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WLPRQ5TWUQQXYWBJM7ECYDAIL2YVKIUH/", "domaine": "lists.fedoraproject.org", "editeur": "Fedora", "etiquettes": ["Avis de l'éditeur"], "nom": "FEDORA-2023-17efd3f2cd", "lien": true, "casse": false}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E72T67UPDRXHIDLO3OROR25YAMN4GGW5/", "domaine": "lists.fedoraproject.org", "editeur": "Fedora", "etiquettes": ["Avis de l'éditeur"], "nom": "FEDORA-2023-d5030c983c", "lien": true, "casse": false}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BFQD3KUEMFBHPAPBGLWQC34L4OWL5HAZ/", "domaine": "lists.fedoraproject.org", "editeur": "Fedora", "etiquettes": ["Avis de l'éditeur"], "nom": "FEDORA-2023-0259c3f26f", "lien": true, "casse": false}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZLU6U2R2IC2K64NDPNMV55AUAO65MAF4/", "domaine": "lists.fedoraproject.org", "editeur": "Fedora", "etiquettes": ["Avis de l'éditeur"], "nom": "FEDORA-2023-2a9214af5f", "lien": true, "casse": false}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X6QXN4ORIVF6XBW4WWFE7VNPVC74S45Y/", "domaine": "lists.fedoraproject.org", "editeur": "Fedora", "etiquettes": ["Avis de l'éditeur"], "nom": "FEDORA-2023-e9c04d81c1", "lien": true, "casse": false}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LKYHSZQFDNR7RSA7LHVLLIAQMVYCUGBG/", "domaine": "lists.fedoraproject.org", "editeur": "Fedora", "etiquettes": ["Avis de l'éditeur"], "nom": "FEDORA-2023-f66fc0f62a", "lien": true, "casse": false}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FNA62Q767CFAFHBCDKYNPBMZWB7TWYVU/", "domaine": "lists.fedoraproject.org", "editeur": "Fedora", "etiquettes": ["Avis de l'éditeur"], "nom": "FEDORA-2023-4d2fd884ea", "lien": true, "casse": false}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LNMZJCDHGLJJLXO4OXWJMTVQRNWOC7UL/", "domaine": "lists.fedoraproject.org", "editeur": "Fedora", "etiquettes": ["Avis de l'éditeur"], "nom": "FEDORA-2023-b2c50535cb", "lien": true, "casse": false}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KSEGD2IWKNUO3DWY4KQGUQM5BISRWHQE/", "domaine": "lists.fedoraproject.org", "editeur": "Fedora", "etiquettes": ["Avis de l'éditeur"], "nom": "FEDORA-2023-fe53e13b5b", "lien": true, "casse": false}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CLB4TW7KALB3EEQWNWCN7OUIWWVWWCG2/", "domaine": "lists.fedoraproject.org", "editeur": "Fedora", "etiquettes": ["Avis de l'éditeur"], "nom": "FEDORA-2023-4bf641255e", "lien": true, "casse": false}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VHUHTSXLXGXS7JYKBXTA3VINUPHTNGVU/", "domaine": "lists.fedoraproject.org", "editeur": "Fedora", "etiquettes": ["Avis de l'éditeur"], "nom": "FEDORA-2023-1caffb88af", "lien": true, "casse": false}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VSRDIV77HNKUSM7SJC5BKE5JSHLHU2NK/", "domaine": "lists.fedoraproject.org", "editeur": "Fedora", "etiquettes": ["Avis de l'éditeur"], "nom": "FEDORA-2023-3f70b8d406", "lien": true, "casse": false}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3N4NJ7FR4X4FPZUGNTQAPSTVB2HB2Y4A/", "domaine": "lists.fedoraproject.org", "editeur": "Fedora", "etiquettes": ["Avis de l'éditeur"], "nom": "FEDORA-2023-7b52921cae", "lien": true, "casse": false}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZB43REMKRQR62NJEI7I5NQ4FSXNLBKRT/", "domaine": "lists.fedoraproject.org", "editeur": "Fedora", "etiquettes": ["Avis de l'éditeur"], "nom": "FEDORA-2023-7934802344", "lien": true, "casse": false}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HT7T2R4MQKLIF4ODV4BDLPARWFPCJ5CZ/", "domaine": "lists.fedoraproject.org", "editeur": "Fedora", "etiquettes": ["Avis de l'éditeur"], "nom": "FEDORA-2023-dbe64661af", "lien": true, "casse": false}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XFOIBB4YFICHDM7IBOP7PWXW3FX4HLL2/", "domaine": "lists.fedoraproject.org", "editeur": "Fedora", "etiquettes": ["Avis de l'éditeur"], "nom": "FEDORA-2023-822aab0a5a", "lien": true, "casse": false}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2MBEPPC36UBVOZZNAXFHKLFGSLCMN5LI/", "domaine": "lists.fedoraproject.org", "editeur": "Fedora", "etiquettes": ["Avis de l'éditeur"], "nom": "FEDORA-2023-c0c6a91330", "lien": true, "casse": false}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WE2I52RHNNU42PX6NZ2RBUHSFFJ2LVZX/", "domaine": "lists.fedoraproject.org", "editeur": "Fedora", "etiquettes": ["Avis de l'éditeur"], "nom": "FEDORA-2023-492b7be466", "lien": true, "casse": false}]}, {"cle": "avis_tiers", "titre": "Avis d'autorités et d'organismes tiers", "explication": "CERT, agences gouvernementales, bases de vulnérabilités, chercheurs.", "items": [{"url": "http://www.openwall.com/lists/oss-security/2023/10/10/6", "domaine": "www.openwall.com", "editeur": "Openwall (oss-security)", "etiquettes": ["Liste de diffusion", "Avis d'un tiers"], "nom": "", "lien": true, "casse": false}, {"url": "http://www.openwall.com/lists/oss-security/2023/10/10/7", "domaine": "www.openwall.com", "editeur": "Openwall (oss-security)", "etiquettes": ["Liste de diffusion", "Avis d'un tiers"], "nom": "", "lien": true, "casse": false}, {"url": "http://www.openwall.com/lists/oss-security/2023/10/13/4", "domaine": "www.openwall.com", "editeur": "Openwall (oss-security)", "etiquettes": ["Liste de diffusion", "Avis d'un tiers"], "nom": "", "lien": true, "casse": false}, {"url": "http://www.openwall.com/lists/oss-security/2023/10/13/9", "domaine": "www.openwall.com", "editeur": "Openwall (oss-security)", "etiquettes": ["Liste de diffusion", "Avis d'un tiers"], "nom": "", "lien": true, "casse": false}, {"url": "http://www.openwall.com/lists/oss-security/2023/10/18/4", "domaine": "www.openwall.com", "editeur": "Openwall (oss-security)", "etiquettes": ["Liste de diffusion", "Avis d'un tiers"], "nom": "", "lien": true, "casse": false}, {"url": "http://www.openwall.com/lists/oss-security/2023/10/18/8", "domaine": "www.openwall.com", "editeur": "Openwall (oss-security)", "etiquettes": ["Liste de diffusion", "Avis d'un tiers"], "nom": "", "lien": true, "casse": false}, {"url": "http://www.openwall.com/lists/oss-security/2023/10/19/6", "domaine": "www.openwall.com", "editeur": "Openwall (oss-security)", "etiquettes": ["Liste de diffusion", "Avis d'un tiers"], "nom": "", "lien": true, "casse": false}, {"url": "http://www.openwall.com/lists/oss-security/2023/10/20/8", "domaine": "www.openwall.com", "editeur": "Openwall (oss-security)", "etiquettes": ["Liste de diffusion", "Avis d'un tiers"], "nom": "", "lien": true, "casse": false}, {"url": "https://arstechnica.com/security/2023/10/how-ddosers-used-the-http-2-protocol-to-deliver-attacks-of-unprecedented-size/", "domaine": "arstechnica.com", "editeur": "", "etiquettes": ["Article de presse", "Avis d'un tiers"], "nom": "", "lien": true, "casse": false}, {"url": "https://aws.amazon.com/security/security-bulletins/AWS-2023-011/", "domaine": "aws.amazon.com", "editeur": "", "etiquettes": ["Avis d'un tiers"], "nom": "", "lien": true, "casse": false}, {"url": "https://blog.qualys.com/vulnerabilities-threat-research/2023/10/10/cve-2023-44487-http-2-rapid-reset-attack", "domaine": "blog.qualys.com", "editeur": "", "etiquettes": ["Article de presse", "Avis d'un tiers"], "nom": "", "lien": true, "casse": false}, {"url": "https://bugzilla.proxmox.com/show_bug.cgi?id=4988", "domaine": "bugzilla.proxmox.com", "editeur": "", "etiquettes": ["Suivi de ticket", "Avis d'un tiers"], "nom": "", "lien": true, "casse": false}, {"url": "https://discuss.hashicorp.com/t/hcsec-2023-32-vault-consul-and-boundary-affected-by-http-2-rapid-reset-denial-of-service-vulnerability-cve-2023-44487/59715", "domaine": "discuss.hashicorp.com", "editeur": "", "etiquettes": ["Avis d'un tiers"], "nom": "", "lien": true, "casse": false}, {"url": "https://github.com/apache/tomcat/tree/main/java/org/apache/coyote/http2", "domaine": "github.com", "editeur": "GitHub", "etiquettes": ["Page produit", "Avis d'un tiers"], "nom": "", "lien": true, "casse": false}, {"url": "https://github.com/bcdannyboy/CVE-2023-44487", "domaine": "github.com", "editeur": "GitHub", "etiquettes": ["Avis d'un tiers"], "nom": "", "lien": true, "casse": false}, {"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-44487", "domaine": "www.cisa.gov", "editeur": "CISA", "etiquettes": ["Ressource gouvernementale"], "nom": "", "lien": true, "casse": false}]}, {"cle": "analyse", "titre": "Analyses, tickets et discussions", "explication": "Pour comprendre le défaut : description technique, ticket, liste de diffusion.", "items": [{"url": "https://github.com/Azure/AKS/issues/3947", "domaine": "github.com", "editeur": "GitHub", "etiquettes": ["Suivi de ticket"], "nom": "", "lien": true, "casse": false}, {"url": "https://github.com/Kong/kong/discussions/11741", "domaine": "github.com", "editeur": "GitHub", "etiquettes": ["Suivi de ticket"], "nom": "", "lien": true, "casse": false}, {"url": "https://github.com/akka/akka-http/issues/4323", "domaine": "github.com", "editeur": "GitHub", "etiquettes": ["Suivi de ticket"], "nom": "", "lien": true, "casse": false}, {"url": "https://github.com/alibaba/tengine/issues/1872", "domaine": "github.com", "editeur": "GitHub", "etiquettes": ["Suivi de ticket"], "nom": "", "lien": true, "casse": false}, {"url": "https://github.com/apache/apisix/issues/10320", "domaine": "github.com", "editeur": "GitHub", "etiquettes": ["Suivi de ticket"], "nom": "", "lien": true, "casse": false}, {"url": "https://github.com/apache/httpd-site/pull/10", "domaine": "github.com", "editeur": "GitHub", "etiquettes": ["Suivi de ticket"], "nom": "", "lien": true, "casse": false}, {"url": "https://github.com/eclipse/jetty.project/issues/10679", "domaine": "github.com", "editeur": "GitHub", "etiquettes": ["Suivi de ticket"], "nom": "", "lien": true, "casse": false}, {"url": "https://github.com/golang/go/issues/63417", "domaine": "github.com", "editeur": "GitHub", "etiquettes": ["Suivi de ticket"], "nom": "", "lien": true, "casse": false}, {"url": "https://github.com/grpc/grpc/releases/tag/v1.59.2", "domaine": "github.com", "editeur": "GitHub", "etiquettes": ["Liste de diffusion"], "nom": "", "lien": true, "casse": false}, {"url": "https://github.com/haproxy/haproxy/issues/2312", "domaine": "github.com", "editeur": "GitHub", "etiquettes": ["Suivi de ticket"], "nom": "", "lien": true, "casse": false}, {"url": "https://github.com/junkurihara/rust-rpxy/issues/97", "domaine": "github.com", "editeur": "GitHub", "etiquettes": ["Suivi de ticket"], "nom": "", "lien": true, "casse": false}, {"url": "https://github.com/kazu-yamamoto/http2/issues/93", "domaine": "github.com", "editeur": "GitHub", "etiquettes": ["Suivi de ticket"], "nom": "", "lien": true, "casse": false}, {"url": "https://lists.debian.org/debian-lts-announce/2023/10/msg00020.html", "domaine": "lists.debian.org", "editeur": "Debian", "etiquettes": ["Liste de diffusion"], "nom": "[debian-lts-announce] 20231013 [SECURITY] [DLA 3617-1] tomcat9 security update", "lien": true, "casse": false}, {"url": "https://lists.debian.org/debian-lts-announce/2023/10/msg00023.html", "domaine": "lists.debian.org", "editeur": "Debian", "etiquettes": ["Liste de diffusion"], "nom": "[debian-lts-announce] 20231016 [SECURITY] [DLA 3621-1] nghttp2 security update", "lien": true, "casse": false}, {"url": "https://lists.debian.org/debian-lts-announce/2023/10/msg00024.html", "domaine": "lists.debian.org", "editeur": "Debian", "etiquettes": ["Liste de diffusion"], "nom": "[debian-lts-announce] 20231016 [SECURITY] [DLA 3617-2] tomcat9 regression update", "lien": true, "casse": false}, {"url": "https://lists.debian.org/debian-lts-announce/2023/10/msg00045.html", "domaine": "lists.debian.org", "editeur": "Debian", "etiquettes": ["Liste de diffusion"], "nom": "[debian-lts-announce] 20231030 [SECURITY] [DLA 3641-1] jetty9 security update", "lien": true, "casse": false}, {"url": "https://lists.debian.org/debian-lts-announce/2023/10/msg00047.html", "domaine": "lists.debian.org", "editeur": "Debian", "etiquettes": ["Liste de diffusion"], "nom": "[debian-lts-announce] 20231031 [SECURITY] [DLA 3638-1] h2o security update", "lien": true, "casse": false}, {"url": "https://lists.debian.org/debian-lts-announce/2023/11/msg00001.html", "domaine": "lists.debian.org", "editeur": "Debian", "etiquettes": ["Liste de diffusion"], "nom": "[debian-lts-announce] 20231105 [SECURITY] [DLA 3645-1] trafficserver security update", "lien": true, "casse": false}, {"url": "https://lists.debian.org/debian-lts-announce/2023/11/msg00012.html", "domaine": "lists.debian.org", "editeur": "Debian", "etiquettes": ["Liste de diffusion"], "nom": "[debian-lts-announce] 20231119 [SECURITY] [DLA 3656-1] netty security update", "lien": true, "casse": false}]}, {"cle": "autres", "titre": "Autres références", "explication": "Références publiées sans étiquette par les sources : leur nature n'est pas qualifiée.", "items": [{"url": "https://edg.io/lp/blog/resets-leaks-ddos-and-the-tale-of-a-hidden-cve", "domaine": "edg.io", "editeur": "", "etiquettes": ["Lien signalé cassé"], "nom": "", "lien": true, "casse": true}, {"url": "https://github.com/apache/httpd/blob/afcdbeebbff4b0c50ea26cdd16e178c0d1f24152/modules/http2/h2_mplx.c#L1101-L1113", "domaine": "github.com", "editeur": "GitHub", "etiquettes": ["Page produit"], "nom": "", "lien": true, "casse": false}, {"url": "https://github.com/icing/mod_h2/blob/0a864782af0a942aa2ad4ed960a6b32cd35bcf0a/mod_http2/README.md?plain=1#L239-L244", "domaine": "github.com", "editeur": "GitHub", "etiquettes": ["Page produit"], "nom": "", "lien": true, "casse": false}, {"url": "https://www.nginx.com/blog/http-2-rapid-reset-attack-impacting-f5-nginx-products/", "domaine": "www.nginx.com", "editeur": "", "etiquettes": [], "nom": "", "lien": true, "casse": false}, {"url": "https://news.ycombinator.com/item?id=37831062", "domaine": "news.ycombinator.com", "editeur": "", "etiquettes": [], "nom": "", "lien": true, "casse": false}, {"url": "https://www.phoronix.com/news/HTTP2-Rapid-Reset-Attack", "domaine": "www.phoronix.com", "editeur": "", "etiquettes": [], "nom": "", "lien": true, "casse": false}, {"url": "https://github.com/nghttp2/nghttp2/pull/1961", "domaine": "github.com", "editeur": "GitHub", "etiquettes": [], "nom": "", "lien": true, "casse": false}, {"url": "https://github.com/netty/netty/commit/58f75f665aa81a8cbcf6ffa74820042a285c5e61", "domaine": "github.com", "editeur": "GitHub", "etiquettes": [], "nom": "", "lien": true, "casse": false}, {"url": "https://news.ycombinator.com/item?id=37830987", "domaine": "news.ycombinator.com", "editeur": "", "etiquettes": [], "nom": "", "lien": true, "casse": false}, {"url": "https://news.ycombinator.com/item?id=37830998", "domaine": "news.ycombinator.com", "editeur": "", "etiquettes": [], "nom": "", "lien": true, "casse": false}, {"url": "https://www.bleepingcomputer.com/news/security/new-http-2-rapid-reset-zero-day-attack-breaks-ddos-records/", "domaine": "www.bleepingcomputer.com", "editeur": "", "etiquettes": [], "nom": "", "lien": true, "casse": false}, {"url": "https://github.com/nghttp2/nghttp2/releases/tag/v1.57.0", "domaine": "github.com", "editeur": "GitHub", "etiquettes": [], "nom": "", "lien": true, "casse": false}, {"url": "https://mailman.nginx.org/pipermail/nginx-devel/2023-October/S36Q5HBXR7CAIMPLLPRSSSYR4PCMWILK.html", "domaine": "mailman.nginx.org", "editeur": "", "etiquettes": [], "nom": "", "lien": true, "casse": false}, {"url": "https://my.f5.com/manage/s/article/K000137106", "domaine": "my.f5.com", "editeur": "", "etiquettes": [], "nom": "", "lien": true, "casse": false}, {"url": "https://msrc.microsoft.com/blog/2023/10/microsoft-response-to-distributed-denial-of-service-ddos-attacks-against-http/2/", "domaine": "msrc.microsoft.com", "editeur": "Microsoft", "etiquettes": [], "nom": "", "lien": true, "casse": false}, {"url": "https://seanmonstar.com/post/730794151136935936/hyper-http2-rapid-reset-unaffected", "domaine": "seanmonstar.com", "editeur": "", "etiquettes": [], "nom": "", "lien": true, "casse": false}, {"url": "https://github.com/microsoft/CBL-Mariner/pull/6381", "domaine": "github.com", "editeur": "GitHub", "etiquettes": [], "nom": "", "lien": true, "casse": false}, {"url": "https://groups.google.com/g/golang-announce/c/iNNxDTCjZvo", "domaine": "groups.google.com", "editeur": "", "etiquettes": [], "nom": "", "lien": true, "casse": false}, {"url": "https://github.com/micrictor/http2-rst-stream", "domaine": "github.com", "editeur": "GitHub", "etiquettes": [], "nom": "", "lien": true, "casse": false}, {"url": "https://openssf.org/blog/2023/10/10/http-2-rapid-reset-vulnerability-highlights-need-for-rapid-response/", "domaine": "openssf.org", "editeur": "", "etiquettes": [], "nom": "", "lien": true, "casse": false}, {"url": "https://github.com/nodejs/node/pull/50121", "domaine": "github.com", "editeur": "GitHub", "etiquettes": [], "nom": "", "lien": true, "casse": false}, {"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-44487", "domaine": "msrc.microsoft.com", "editeur": "Microsoft", "etiquettes": [], "nom": "", "lien": true, "casse": false}, {"url": "https://tomcat.apache.org/security-10.html#Fixed_in_Apache_Tomcat_10.1.14", "domaine": "tomcat.apache.org", "editeur": "", "etiquettes": [], "nom": "", "lien": true, "casse": false}, {"url": "https://lists.apache.org/thread/5py8h42mxfsn8l1wy6o41xwhsjlsd87q", "domaine": "lists.apache.org", "editeur": "Apache", "etiquettes": [], "nom": "", "lien": true, "casse": false}, {"url": "https://www.openwall.com/lists/oss-security/2023/10/10/6", "domaine": "www.openwall.com", "editeur": "Openwall (oss-security)", "etiquettes": [], "nom": "", "lien": true, "casse": false}, {"url": "https://www.haproxy.com/blog/haproxy-is-not-affected-by-the-http-2-rapid-reset-attack-cve-2023-44487", "domaine": "www.haproxy.com", "editeur": "", "etiquettes": [], "nom": "", "lien": true, "casse": false}, {"url": "https://github.com/opensearch-project/data-prepper/issues/3474", "domaine": "github.com", "editeur": "GitHub", "etiquettes": [], "nom": "", "lien": true, "casse": false}, {"url": "https://github.com/oqtane/oqtane.framework/discussions/3367", "domaine": "github.com", "editeur": "GitHub", "etiquettes": [], "nom": "", "lien": true, "casse": false}, {"url": "https://netty.io/news/2023/10/10/4-1-100-Final.html", "domaine": "netty.io", "editeur": "", "etiquettes": [], "nom": "", "lien": true, "casse": false}, {"url": "https://www.cisa.gov/news-events/alerts/2023/10/10/http2-rapid-reset-vulnerability-cve-2023-44487", "domaine": "www.cisa.gov", "editeur": "CISA", "etiquettes": [], "nom": "", "lien": true, "casse": false}, {"url": "https://www.theregister.com/2023/10/10/http2_rapid_reset_zeroday/", "domaine": "www.theregister.com", "editeur": "", "etiquettes": [], "nom": "", "lien": true, "casse": false}, {"url": "https://news.ycombinator.com/item?id=37837043", "domaine": "news.ycombinator.com", "editeur": "", "etiquettes": [], "nom": "", "lien": true, "casse": false}, {"url": "https://martinthomson.github.io/h2-stream-limits/draft-thomson-httpbis-h2-stream-limits.html", "domaine": "martinthomson.github.io", "editeur": "", "etiquettes": [], "nom": "", "lien": true, "casse": false}, {"url": "https://github.com/ninenines/cowboy/issues/1615", "domaine": "github.com", "editeur": "GitHub", "etiquettes": [], "nom": "", "lien": true, "casse": false}, {"url": "https://github.com/varnishcache/varnish-cache/issues/3996", "domaine": "github.com", "editeur": "GitHub", "etiquettes": [], "nom": "", "lien": true, "casse": false}, {"url": "https://github.com/tempesta-tech/tempesta/issues/1986", "domaine": "github.com", "editeur": "GitHub", "etiquettes": [], "nom": "", "lien": true, "casse": false}, {"url": "https://www.darkreading.com/cloud/internet-wide-zero-day-bug-fuels-largest-ever-ddos-event", "domaine": "www.darkreading.com", "editeur": "", "etiquettes": [], "nom": "", "lien": true, "casse": false}, {"url": "https://istio.io/latest/news/security/istio-security-2023-004/", "domaine": "istio.io", "editeur": "", "etiquettes": [], "nom": "", "lien": true, "casse": false}, {"url": "https://ubuntu.com/security/CVE-2023-44487", "domaine": "ubuntu.com", "editeur": "Ubuntu (Canonical)", "etiquettes": [], "nom": "", "lien": true, "casse": false}, {"url": "https://github.com/projectcontour/contour/pull/5826", "domaine": "github.com", "editeur": "GitHub", "etiquettes": [], "nom": "", "lien": true, "casse": false}, {"url": "https://github.com/linkerd/website/pull/1695/commits/4b9c6836471bc8270ab48aae6fd2181bc73fd632", "domaine": "github.com", "editeur": "GitHub", "etiquettes": [], "nom": "", "lien": true, "casse": false}, {"url": "https://github.com/line/armeria/pull/5232", "domaine": "github.com", "editeur": "GitHub", "etiquettes": [], "nom": "", "lien": true, "casse": false}, {"url": "https://security.paloaltonetworks.com/CVE-2023-44487", "domaine": "security.paloaltonetworks.com", "editeur": "Palo Alto Networks", "etiquettes": [], "nom": "", "lien": true, "casse": false}, {"url": "https://github.com/openresty/openresty/issues/930", "domaine": "github.com", "editeur": "GitHub", "etiquettes": [], "nom": "", "lien": true, "casse": false}, {"url": "https://www.netlify.com/blog/netlify-successfully-mitigates-cve-2023-44487/", "domaine": "www.netlify.com", "editeur": "", "etiquettes": [], "nom": "", "lien": true, "casse": false}, {"url": "https://lists.w3.org/Archives/Public/ietf-http-wg/2023OctDec/0025.html", "domaine": "lists.w3.org", "editeur": "", "etiquettes": [], "nom": "", "lien": true, "casse": false}, {"url": "https://linkerd.io/2023/10/12/linkerd-cve-2023-44487/", "domaine": "linkerd.io", "editeur": "", "etiquettes": [], "nom": "", "lien": true, "casse": false}, {"url": "https://security.netapp.com/advisory/ntap-20231016-0001/", "domaine": "security.netapp.com", "editeur": "NetApp", "etiquettes": [], "nom": "", "lien": true, "casse": false}, {"url": "https://security.netapp.com/advisory/ntap-20240426-0007/", "domaine": "security.netapp.com", "editeur": "NetApp", "etiquettes": [], "nom": "", "lien": true, "casse": false}, {"url": "https://security.netapp.com/advisory/ntap-20240621-0006/", "domaine": "security.netapp.com", "editeur": "NetApp", "etiquettes": [], "nom": "", "lien": true, "casse": false}, {"url": "https://security.netapp.com/advisory/ntap-20240621-0007/", "domaine": "security.netapp.com", "editeur": "NetApp", "etiquettes": [], "nom": "", "lien": true, "casse": false}, {"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-http2-reset-d8Kf32vZ", "domaine": "sec.cloudapps.cisco.com", "editeur": "Cisco", "etiquettes": [], "nom": "", "lien": true, "casse": false}, {"url": "https://www.vicarius.io/vsociety/posts/rapid-reset-cve-2023-44487-dos-in-http2-understanding-the-root-cause", "domaine": "www.vicarius.io", "editeur": "", "etiquettes": [], "nom": "", "lien": true, "casse": false}, {"url": "http://www.openwall.com/lists/oss-security/2025/08/13/6", "domaine": "www.openwall.com", "editeur": "Openwall (oss-security)", "etiquettes": [], "nom": "", "lien": true, "casse": false}, {"url": "https://cert-portal.siemens.com/productcert/html/ssa-832273.html", "domaine": "cert-portal.siemens.com", "editeur": "", "etiquettes": [], "nom": "", "lien": true, "casse": false}, {"url": "https://cert-portal.siemens.com/productcert/html/ssa-341067.html", "domaine": "cert-portal.siemens.com", "editeur": "", "etiquettes": [], "nom": "", "lien": true, "casse": false}, {"url": "https://cert-portal.siemens.com/productcert/html/ssa-784301.html", "domaine": "cert-portal.siemens.com", "editeur": "", "etiquettes": [], "nom": "", "lien": true, "casse": false}, {"url": "https://cert-portal.siemens.com/productcert/html/ssa-915275.html", "domaine": "cert-portal.siemens.com", "editeur": "", "etiquettes": [], "nom": "", "lien": true, "casse": false}, {"url": "https://cert-portal.siemens.com/productcert/html/ssa-082556.html", "domaine": "cert-portal.siemens.com", "editeur": "", "etiquettes": [], "nom": "", "lien": true, "casse": false}]}], "liens_correction": [{"url": "https://cgit.freebsd.org/ports/commit/?id=c64c329c2c1752f46b73e3e6ce9f4329be6629f9", "domaine": "cgit.freebsd.org", "editeur": "", "etiquettes": ["Liste de diffusion", "Correctif", "Avis de l'éditeur"], "nom": "", "lien": true, "casse": false, "groupe": "correctif", "groupe_titre": "Correctifs et versions corrigées"}, {"url": "https://gist.github.com/adulau/7c2bfb8e9cdbe4b35a5e131c66a0c088", "domaine": "gist.github.com", "editeur": "", "etiquettes": ["Suivi de ticket", "Correctif"], "nom": "", "lien": true, "casse": false, "groupe": "correctif", "groupe_titre": "Correctifs et versions corrigées"}, {"url": "https://github.com/advisories/GHSA-vx74-f528-fxqg", "domaine": "github.com", "editeur": "GitHub Security Advisory", "etiquettes": ["Mesure de contournement", "Correctif", "Avis de l'éditeur"], "nom": "", "lien": true, "casse": false, "groupe": "correctif", "groupe_titre": "Correctifs et versions corrigées"}, {"url": "https://github.com/advisories/GHSA-xpw8-rcwv-8f8p", "domaine": "github.com", "editeur": "GitHub Security Advisory", "etiquettes": ["Correctif", "Avis de l'éditeur"], "nom": "", "lien": true, "casse": false, "groupe": "correctif", "groupe_titre": "Correctifs et versions corrigées"}, {"url": "https://github.com/apache/trafficserver/pull/10564", "domaine": "github.com", "editeur": "GitHub", "etiquettes": ["Suivi de ticket", "Correctif"], "nom": "", "lien": true, "casse": false, "groupe": "correctif", "groupe_titre": "Correctifs et versions corrigées"}, {"url": "https://github.com/caddyserver/caddy/releases/tag/v2.7.5", "domaine": "github.com", "editeur": "GitHub", "etiquettes": ["Notes de version", "Avis d'un tiers"], "nom": "", "lien": true, "casse": false, "groupe": "correctif", "groupe_titre": "Correctifs et versions corrigées"}, {"url": "https://github.com/dotnet/core/blob/e4613450ea0da7fd2fc6b61dfb2c1c1dec1ce9ec/release-notes/6.0/6.0.23/6.0.23.md?plain=1#L73", "domaine": "github.com", "editeur": "GitHub", "etiquettes": ["Page produit", "Notes de version"], "nom": "", "lien": true, "casse": false, "groupe": "correctif", "groupe_titre": "Correctifs et versions corrigées"}, {"url": "https://github.com/envoyproxy/envoy/pull/30055", "domaine": "github.com", "editeur": "GitHub", "etiquettes": ["Suivi de ticket", "Correctif"], "nom": "", "lien": true, "casse": false, "groupe": "correctif", "groupe_titre": "Correctifs et versions corrigées"}, {"url": "https://github.com/etcd-io/etcd/issues/16740", "domaine": "github.com", "editeur": "GitHub", "etiquettes": ["Suivi de ticket", "Correctif"], "nom": "", "lien": true, "casse": false, "groupe": "correctif", "groupe_titre": "Correctifs et versions corrigées"}, {"url": "https://github.com/facebook/proxygen/pull/466", "domaine": "github.com", "editeur": "GitHub", "etiquettes": ["Suivi de ticket", "Correctif"], "nom": "", "lien": true, "casse": false, "groupe": "correctif", "groupe_titre": "Correctifs et versions corrigées"}, {"url": "https://github.com/grpc/grpc-go/pull/6703", "domaine": "github.com", "editeur": "GitHub", "etiquettes": ["Suivi de ticket", "Correctif"], "nom": "", "lien": true, "casse": false, "groupe": "correctif", "groupe_titre": "Correctifs et versions corrigées"}, {"url": "https://github.com/h2o/h2o/pull/3291", "domaine": "github.com", "editeur": "GitHub", "etiquettes": ["Suivi de ticket", "Correctif"], "nom": "", "lien": true, "casse": false, "groupe": "correctif", "groupe_titre": "Correctifs et versions corrigées"}, {"url": "https://github.com/kazu-yamamoto/http2/commit/f61d41a502bd0f60eb24e1ce14edc7b6df6722a1", "domaine": "github.com", "editeur": "GitHub", "etiquettes": ["Correctif"], "nom": "", "lien": true, "casse": false, "groupe": "correctif", "groupe_titre": "Correctifs et versions corrigées"}, {"url": "https://github.com/kubernetes/kubernetes/pull/121120", "domaine": "github.com", "editeur": "GitHub", "etiquettes": ["Suivi de ticket", "Correctif"], "nom": "", "lien": true, "casse": false, "groupe": "correctif", "groupe_titre": "Correctifs et versions corrigées"}, {"url": "https://access.redhat.com/security/cve/cve-2023-44487", "domaine": "access.redhat.com", "editeur": "Red Hat", "etiquettes": ["Avis de l'éditeur"], "nom": "", "lien": true, "casse": false, "groupe": "avis_editeur", "groupe_titre": "Avis de sécurité de l'éditeur"}, {"url": "https://blog.cloudflare.com/technical-breakdown-http2-rapid-reset-ddos-attack/", "domaine": "blog.cloudflare.com", "editeur": "", "etiquettes": ["Description technique", "Avis de l'éditeur"], "nom": "", "lien": true, "casse": false, "groupe": "avis_editeur", "groupe_titre": "Avis de sécurité de l'éditeur"}, {"url": "https://blog.cloudflare.com/zero-day-rapid-reset-http2-record-breaking-ddos-attack/", "domaine": "blog.cloudflare.com", "editeur": "", "etiquettes": ["Avis d'un tiers", "Avis de l'éditeur"], "nom": "", "lien": true, "casse": false, "groupe": "avis_editeur", "groupe_titre": "Avis de sécurité de l'éditeur"}, {"url": "https://blog.litespeedtech.com/2023/10/11/rapid-reset-http-2-vulnerablilty/", "domaine": "blog.litespeedtech.com", "editeur": "", "etiquettes": ["Avis de l'éditeur"], "nom": "", "lien": true, "casse": false, "groupe": "avis_editeur", "groupe_titre": "Avis de sécurité de l'éditeur"}, {"url": "https://blog.vespa.ai/cve-2023-44487/", "domaine": "blog.vespa.ai", "editeur": "", "etiquettes": ["Avis de l'éditeur"], "nom": "", "lien": true, "casse": false, "groupe": "avis_editeur", "groupe_titre": "Avis de sécurité de l'éditeur"}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2242803", "domaine": "bugzilla.redhat.com", "editeur": "Red Hat", "etiquettes": ["Suivi de ticket", "Avis de l'éditeur"], "nom": "", "lien": true, "casse": false, "groupe": "avis_editeur", "groupe_titre": "Avis de sécurité de l'éditeur"}, {"url": "https://bugzilla.suse.com/show_bug.cgi?id=1216123", "domaine": "bugzilla.suse.com", "editeur": "", "etiquettes": ["Suivi de ticket", "Avis de l'éditeur"], "nom": "", "lien": true, "casse": false, "groupe": "avis_editeur", "groupe_titre": "Avis de sécurité de l'éditeur"}, {"url": "https://cloud.google.com/blog/products/identity-security/google-cloud-mitigated-largest-ddos-attack-peaking-above-398-million-rps/", "domaine": "cloud.google.com", "editeur": "", "etiquettes": ["Description technique", "Avis de l'éditeur"], "nom": "", "lien": true, "casse": false, "groupe": "avis_editeur", "groupe_titre": "Avis de sécurité de l'éditeur"}, {"url": "https://cloud.google.com/blog/products/identity-security/how-it-works-the-novel-http2-rapid-reset-ddos-attack", "domaine": "cloud.google.com", "editeur": "", "etiquettes": ["Description technique", "Avis de l'éditeur"], "nom": "", "lien": true, "casse": false, "groupe": "avis_editeur", "groupe_titre": "Avis de sécurité de l'éditeur"}, {"url": "https://community.traefik.io/t/is-traefik-vulnerable-to-cve-2023-44487/20125", "domaine": "community.traefik.io", "editeur": "", "etiquettes": ["Avis de l'éditeur"], "nom": "", "lien": true, "casse": false, "groupe": "avis_editeur", "groupe_titre": "Avis de sécurité de l'éditeur"}, {"url": "https://forums.swift.org/t/swift-nio-http2-security-update-cve-2023-44487-http-2-dos/67764", "domaine": "forums.swift.org", "editeur": "", "etiquettes": ["Avis de l'éditeur"], "nom": "", "lien": true, "casse": false, "groupe": "avis_editeur", "groupe_titre": "Avis de sécurité de l'éditeur"}, {"url": "https://github.com/advisories/GHSA-qppj-fm5r-hxr3", "domaine": "github.com", "editeur": "GitHub Security Advisory", "etiquettes": ["Avis de l'éditeur"], "nom": "", "lien": true, "casse": false, "groupe": "avis_editeur", "groupe_titre": "Avis de sécurité de l'éditeur"}, {"url": "https://github.com/arkrwn/PoC/tree/main/CVE-2023-44487", "domaine": "github.com", "editeur": "GitHub", "etiquettes": ["Avis de l'éditeur"], "nom": "", "lien": true, "casse": false, "groupe": "avis_editeur", "groupe_titre": "Avis de sécurité de l'éditeur"}, {"url": "https://github.com/caddyserver/caddy/issues/5877", "domaine": "github.com", "editeur": "GitHub", "etiquettes": ["Suivi de ticket", "Avis de l'éditeur"], "nom": "", "lien": true, "casse": false, "groupe": "avis_editeur", "groupe_titre": "Avis de sécurité de l'éditeur"}, {"url": "https://github.com/dotnet/announcements/issues/277", "domaine": "github.com", "editeur": "GitHub", "etiquettes": ["Suivi de ticket", "Mesure de contournement", "Avis de l'éditeur"], "nom": "", "lien": true, "casse": false, "groupe": "avis_editeur", "groupe_titre": "Avis de sécurité de l'éditeur"}, {"url": "https://github.com/h2o/h2o/security/advisories/GHSA-2m7v-gc89-fjqf", "domaine": "github.com", "editeur": "GitHub Security Advisory", "etiquettes": ["Avis de l'éditeur"], "nom": "", "lien": true, "casse": false, "groupe": "avis_editeur", "groupe_titre": "Avis de sécurité de l'éditeur"}, {"url": "https://www.debian.org/security/2023/dsa-5522", "domaine": "www.debian.org", "editeur": "Debian", "etiquettes": ["Avis de l'éditeur"], "nom": "DSA-5522", "lien": true, "casse": false, "groupe": "avis_editeur", "groupe_titre": "Avis de sécurité de l'éditeur"}, {"url": "https://www.debian.org/security/2023/dsa-5521", "domaine": "www.debian.org", "editeur": "Debian", "etiquettes": ["Avis de l'éditeur"], "nom": "DSA-5521", "lien": true, "casse": false, "groupe": "avis_editeur", "groupe_titre": "Avis de sécurité de l'éditeur"}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JMEXY22BFG5Q64HQCM5CK2Q7KDKVV4TY/", "domaine": "lists.fedoraproject.org", "editeur": "Fedora", "etiquettes": ["Avis de l'éditeur"], "nom": "FEDORA-2023-ed2642fd58", "lien": true, "casse": false, "groupe": "avis_editeur", "groupe_titre": "Avis de sécurité de l'éditeur"}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZKQSIKIAT5TJ3WSLU3RDBQ35YX4GY4V3/", "domaine": "lists.fedoraproject.org", "editeur": "Fedora", "etiquettes": ["Avis de l'éditeur"], "nom": "FEDORA-2023-54fadada12", "lien": true, "casse": false, "groupe": "avis_editeur", "groupe_titre": "Avis de sécurité de l'éditeur"}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JIZSEFC3YKCGABA2BZW6ZJRMDZJMB7PJ/", "domaine": "lists.fedoraproject.org", "editeur": "Fedora", "etiquettes": ["Avis de l'éditeur"], "nom": "FEDORA-2023-5ff7bf1dd8", "lien": true, "casse": false, "groupe": "avis_editeur", "groupe_titre": "Avis de sécurité de l'éditeur"}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WLPRQ5TWUQQXYWBJM7ECYDAIL2YVKIUH/", "domaine": "lists.fedoraproject.org", "editeur": "Fedora", "etiquettes": ["Avis de l'éditeur"], "nom": "FEDORA-2023-17efd3f2cd", "lien": true, "casse": false, "groupe": "avis_editeur", "groupe_titre": "Avis de sécurité de l'éditeur"}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/E72T67UPDRXHIDLO3OROR25YAMN4GGW5/", "domaine": "lists.fedoraproject.org", "editeur": "Fedora", "etiquettes": ["Avis de l'éditeur"], "nom": "FEDORA-2023-d5030c983c", "lien": true, "casse": false, "groupe": "avis_editeur", "groupe_titre": "Avis de sécurité de l'éditeur"}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BFQD3KUEMFBHPAPBGLWQC34L4OWL5HAZ/", "domaine": "lists.fedoraproject.org", "editeur": "Fedora", "etiquettes": ["Avis de l'éditeur"], "nom": "FEDORA-2023-0259c3f26f", "lien": true, "casse": false, "groupe": "avis_editeur", "groupe_titre": "Avis de sécurité de l'éditeur"}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZLU6U2R2IC2K64NDPNMV55AUAO65MAF4/", "domaine": "lists.fedoraproject.org", "editeur": "Fedora", "etiquettes": ["Avis de l'éditeur"], "nom": "FEDORA-2023-2a9214af5f", "lien": true, "casse": false, "groupe": "avis_editeur", "groupe_titre": "Avis de sécurité de l'éditeur"}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/X6QXN4ORIVF6XBW4WWFE7VNPVC74S45Y/", "domaine": "lists.fedoraproject.org", "editeur": "Fedora", "etiquettes": ["Avis de l'éditeur"], "nom": "FEDORA-2023-e9c04d81c1", "lien": true, "casse": false, "groupe": "avis_editeur", "groupe_titre": "Avis de sécurité de l'éditeur"}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LKYHSZQFDNR7RSA7LHVLLIAQMVYCUGBG/", "domaine": "lists.fedoraproject.org", "editeur": "Fedora", "etiquettes": ["Avis de l'éditeur"], "nom": "FEDORA-2023-f66fc0f62a", "lien": true, "casse": false, "groupe": "avis_editeur", "groupe_titre": "Avis de sécurité de l'éditeur"}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FNA62Q767CFAFHBCDKYNPBMZWB7TWYVU/", "domaine": "lists.fedoraproject.org", "editeur": "Fedora", "etiquettes": ["Avis de l'éditeur"], "nom": "FEDORA-2023-4d2fd884ea", "lien": true, "casse": false, "groupe": "avis_editeur", "groupe_titre": "Avis de sécurité de l'éditeur"}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LNMZJCDHGLJJLXO4OXWJMTVQRNWOC7UL/", "domaine": "lists.fedoraproject.org", "editeur": "Fedora", "etiquettes": ["Avis de l'éditeur"], "nom": "FEDORA-2023-b2c50535cb", "lien": true, "casse": false, "groupe": "avis_editeur", "groupe_titre": "Avis de sécurité de l'éditeur"}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KSEGD2IWKNUO3DWY4KQGUQM5BISRWHQE/", "domaine": "lists.fedoraproject.org", "editeur": "Fedora", "etiquettes": ["Avis de l'éditeur"], "nom": "FEDORA-2023-fe53e13b5b", "lien": true, "casse": false, "groupe": "avis_editeur", "groupe_titre": "Avis de sécurité de l'éditeur"}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CLB4TW7KALB3EEQWNWCN7OUIWWVWWCG2/", "domaine": "lists.fedoraproject.org", "editeur": "Fedora", "etiquettes": ["Avis de l'éditeur"], "nom": "FEDORA-2023-4bf641255e", "lien": true, "casse": false, "groupe": "avis_editeur", "groupe_titre": "Avis de sécurité de l'éditeur"}, {"url": "https://www.debian.org/security/2023/dsa-5540", "domaine": "www.debian.org", "editeur": "Debian", "etiquettes": ["Avis de l'éditeur"], "nom": "DSA-5540", "lien": true, "casse": false, "groupe": "avis_editeur", "groupe_titre": "Avis de sécurité de l'éditeur"}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VHUHTSXLXGXS7JYKBXTA3VINUPHTNGVU/", "domaine": "lists.fedoraproject.org", "editeur": "Fedora", "etiquettes": ["Avis de l'éditeur"], "nom": "FEDORA-2023-1caffb88af", "lien": true, "casse": false, "groupe": "avis_editeur", "groupe_titre": "Avis de sécurité de l'éditeur"}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VSRDIV77HNKUSM7SJC5BKE5JSHLHU2NK/", "domaine": "lists.fedoraproject.org", "editeur": "Fedora", "etiquettes": ["Avis de l'éditeur"], "nom": "FEDORA-2023-3f70b8d406", "lien": true, "casse": false, "groupe": "avis_editeur", "groupe_titre": "Avis de sécurité de l'éditeur"}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3N4NJ7FR4X4FPZUGNTQAPSTVB2HB2Y4A/", "domaine": "lists.fedoraproject.org", "editeur": "Fedora", "etiquettes": ["Avis de l'éditeur"], "nom": "FEDORA-2023-7b52921cae", "lien": true, "casse": false, "groupe": "avis_editeur", "groupe_titre": "Avis de sécurité de l'éditeur"}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZB43REMKRQR62NJEI7I5NQ4FSXNLBKRT/", "domaine": "lists.fedoraproject.org", "editeur": "Fedora", "etiquettes": ["Avis de l'éditeur"], "nom": "FEDORA-2023-7934802344", "lien": true, "casse": false, "groupe": "avis_editeur", "groupe_titre": "Avis de sécurité de l'éditeur"}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HT7T2R4MQKLIF4ODV4BDLPARWFPCJ5CZ/", "domaine": "lists.fedoraproject.org", "editeur": "Fedora", "etiquettes": ["Avis de l'éditeur"], "nom": "FEDORA-2023-dbe64661af", "lien": true, "casse": false, "groupe": "avis_editeur", "groupe_titre": "Avis de sécurité de l'éditeur"}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XFOIBB4YFICHDM7IBOP7PWXW3FX4HLL2/", "domaine": "lists.fedoraproject.org", "editeur": "Fedora", "etiquettes": ["Avis de l'éditeur"], "nom": "FEDORA-2023-822aab0a5a", "lien": true, "casse": false, "groupe": "avis_editeur", "groupe_titre": "Avis de sécurité de l'éditeur"}, {"url": "https://www.debian.org/security/2023/dsa-5549", "domaine": "www.debian.org", "editeur": "Debian", "etiquettes": ["Avis de l'éditeur"], "nom": "DSA-5549", "lien": true, "casse": false, "groupe": "avis_editeur", "groupe_titre": "Avis de sécurité de l'éditeur"}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2MBEPPC36UBVOZZNAXFHKLFGSLCMN5LI/", "domaine": "lists.fedoraproject.org", "editeur": "Fedora", "etiquettes": ["Avis de l'éditeur"], "nom": "FEDORA-2023-c0c6a91330", "lien": true, "casse": false, "groupe": "avis_editeur", "groupe_titre": "Avis de sécurité de l'éditeur"}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WE2I52RHNNU42PX6NZ2RBUHSFFJ2LVZX/", "domaine": "lists.fedoraproject.org", "editeur": "Fedora", "etiquettes": ["Avis de l'éditeur"], "nom": "FEDORA-2023-492b7be466", "lien": true, "casse": false, "groupe": "avis_editeur", "groupe_titre": "Avis de sécurité de l'éditeur"}, {"url": "https://www.debian.org/security/2023/dsa-5558", "domaine": "www.debian.org", "editeur": "Debian", "etiquettes": ["Avis de l'éditeur"], "nom": "DSA-5558", "lien": true, "casse": false, "groupe": "avis_editeur", "groupe_titre": "Avis de sécurité de l'éditeur"}, {"url": "https://security.gentoo.org/glsa/202311-09", "domaine": "security.gentoo.org", "editeur": "Gentoo", "etiquettes": ["Avis de l'éditeur"], "nom": "GLSA-202311-09", "lien": true, "casse": false, "groupe": "avis_editeur", "groupe_titre": "Avis de sécurité de l'éditeur"}, {"url": "https://www.debian.org/security/2023/dsa-5570", "domaine": "www.debian.org", "editeur": "Debian", "etiquettes": ["Avis de l'éditeur"], "nom": "DSA-5570", "lien": true, "casse": false, "groupe": "avis_editeur", "groupe_titre": "Avis de sécurité de l'éditeur"}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JMEXY22BFG5Q64HQCM5CK2Q7KDKVV4TY/", "domaine": "lists.fedoraproject.org", "editeur": "Fedora", "etiquettes": ["Avis de l'éditeur"], "nom": "FEDORA-2023-ed2642fd58", "lien": true, "casse": false, "groupe": "avis_editeur", "groupe_titre": "Avis de sécurité de l'éditeur"}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZKQSIKIAT5TJ3WSLU3RDBQ35YX4GY4V3/", "domaine": "lists.fedoraproject.org", "editeur": "Fedora", "etiquettes": ["Avis de l'éditeur"], "nom": "FEDORA-2023-54fadada12", "lien": true, "casse": false, "groupe": "avis_editeur", "groupe_titre": "Avis de sécurité de l'éditeur"}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JIZSEFC3YKCGABA2BZW6ZJRMDZJMB7PJ/", "domaine": "lists.fedoraproject.org", "editeur": "Fedora", "etiquettes": ["Avis de l'éditeur"], "nom": "FEDORA-2023-5ff7bf1dd8", "lien": true, "casse": false, "groupe": "avis_editeur", "groupe_titre": "Avis de sécurité de l'éditeur"}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WLPRQ5TWUQQXYWBJM7ECYDAIL2YVKIUH/", "domaine": "lists.fedoraproject.org", "editeur": "Fedora", "etiquettes": ["Avis de l'éditeur"], "nom": "FEDORA-2023-17efd3f2cd", "lien": true, "casse": false, "groupe": "avis_editeur", "groupe_titre": "Avis de sécurité de l'éditeur"}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E72T67UPDRXHIDLO3OROR25YAMN4GGW5/", "domaine": "lists.fedoraproject.org", "editeur": "Fedora", "etiquettes": ["Avis de l'éditeur"], "nom": "FEDORA-2023-d5030c983c", "lien": true, "casse": false, "groupe": "avis_editeur", "groupe_titre": "Avis de sécurité de l'éditeur"}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BFQD3KUEMFBHPAPBGLWQC34L4OWL5HAZ/", "domaine": "lists.fedoraproject.org", "editeur": "Fedora", "etiquettes": ["Avis de l'éditeur"], "nom": "FEDORA-2023-0259c3f26f", "lien": true, "casse": false, "groupe": "avis_editeur", "groupe_titre": "Avis de sécurité de l'éditeur"}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZLU6U2R2IC2K64NDPNMV55AUAO65MAF4/", "domaine": "lists.fedoraproject.org", "editeur": "Fedora", "etiquettes": ["Avis de l'éditeur"], "nom": "FEDORA-2023-2a9214af5f", "lien": true, "casse": false, "groupe": "avis_editeur", "groupe_titre": "Avis de sécurité de l'éditeur"}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X6QXN4ORIVF6XBW4WWFE7VNPVC74S45Y/", "domaine": "lists.fedoraproject.org", "editeur": "Fedora", "etiquettes": ["Avis de l'éditeur"], "nom": "FEDORA-2023-e9c04d81c1", "lien": true, "casse": false, "groupe": "avis_editeur", "groupe_titre": "Avis de sécurité de l'éditeur"}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LKYHSZQFDNR7RSA7LHVLLIAQMVYCUGBG/", "domaine": "lists.fedoraproject.org", "editeur": "Fedora", "etiquettes": ["Avis de l'éditeur"], "nom": "FEDORA-2023-f66fc0f62a", "lien": true, "casse": false, "groupe": "avis_editeur", "groupe_titre": "Avis de sécurité de l'éditeur"}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FNA62Q767CFAFHBCDKYNPBMZWB7TWYVU/", "domaine": "lists.fedoraproject.org", "editeur": "Fedora", "etiquettes": ["Avis de l'éditeur"], "nom": "FEDORA-2023-4d2fd884ea", "lien": true, "casse": false, "groupe": "avis_editeur", "groupe_titre": "Avis de sécurité de l'éditeur"}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LNMZJCDHGLJJLXO4OXWJMTVQRNWOC7UL/", "domaine": "lists.fedoraproject.org", "editeur": "Fedora", "etiquettes": ["Avis de l'éditeur"], "nom": "FEDORA-2023-b2c50535cb", "lien": true, "casse": false, "groupe": "avis_editeur", "groupe_titre": "Avis de sécurité de l'éditeur"}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KSEGD2IWKNUO3DWY4KQGUQM5BISRWHQE/", "domaine": "lists.fedoraproject.org", "editeur": "Fedora", "etiquettes": ["Avis de l'éditeur"], "nom": "FEDORA-2023-fe53e13b5b", "lien": true, "casse": false, "groupe": "avis_editeur", "groupe_titre": "Avis de sécurité de l'éditeur"}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CLB4TW7KALB3EEQWNWCN7OUIWWVWWCG2/", "domaine": "lists.fedoraproject.org", "editeur": "Fedora", "etiquettes": ["Avis de l'éditeur"], "nom": "FEDORA-2023-4bf641255e", "lien": true, "casse": false, "groupe": "avis_editeur", "groupe_titre": "Avis de sécurité de l'éditeur"}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VHUHTSXLXGXS7JYKBXTA3VINUPHTNGVU/", "domaine": "lists.fedoraproject.org", "editeur": "Fedora", "etiquettes": ["Avis de l'éditeur"], "nom": "FEDORA-2023-1caffb88af", "lien": true, "casse": false, "groupe": "avis_editeur", "groupe_titre": "Avis de sécurité de l'éditeur"}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VSRDIV77HNKUSM7SJC5BKE5JSHLHU2NK/", "domaine": "lists.fedoraproject.org", "editeur": "Fedora", "etiquettes": ["Avis de l'éditeur"], "nom": "FEDORA-2023-3f70b8d406", "lien": true, "casse": false, "groupe": "avis_editeur", "groupe_titre": "Avis de sécurité de l'éditeur"}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3N4NJ7FR4X4FPZUGNTQAPSTVB2HB2Y4A/", "domaine": "lists.fedoraproject.org", "editeur": "Fedora", "etiquettes": ["Avis de l'éditeur"], "nom": "FEDORA-2023-7b52921cae", "lien": true, "casse": false, "groupe": "avis_editeur", "groupe_titre": "Avis de sécurité de l'éditeur"}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZB43REMKRQR62NJEI7I5NQ4FSXNLBKRT/", "domaine": "lists.fedoraproject.org", "editeur": "Fedora", "etiquettes": ["Avis de l'éditeur"], "nom": "FEDORA-2023-7934802344", "lien": true, "casse": false, "groupe": "avis_editeur", "groupe_titre": "Avis de sécurité de l'éditeur"}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HT7T2R4MQKLIF4ODV4BDLPARWFPCJ5CZ/", "domaine": "lists.fedoraproject.org", "editeur": "Fedora", "etiquettes": ["Avis de l'éditeur"], "nom": "FEDORA-2023-dbe64661af", "lien": true, "casse": false, "groupe": "avis_editeur", "groupe_titre": "Avis de sécurité de l'éditeur"}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XFOIBB4YFICHDM7IBOP7PWXW3FX4HLL2/", "domaine": "lists.fedoraproject.org", "editeur": "Fedora", "etiquettes": ["Avis de l'éditeur"], "nom": "FEDORA-2023-822aab0a5a", "lien": true, "casse": false, "groupe": "avis_editeur", "groupe_titre": "Avis de sécurité de l'éditeur"}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2MBEPPC36UBVOZZNAXFHKLFGSLCMN5LI/", "domaine": "lists.fedoraproject.org", "editeur": "Fedora", "etiquettes": ["Avis de l'éditeur"], "nom": "FEDORA-2023-c0c6a91330", "lien": true, "casse": false, "groupe": "avis_editeur", "groupe_titre": "Avis de sécurité de l'éditeur"}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WE2I52RHNNU42PX6NZ2RBUHSFFJ2LVZX/", "domaine": "lists.fedoraproject.org", "editeur": "Fedora", "etiquettes": ["Avis de l'éditeur"], "nom": "FEDORA-2023-492b7be466", "lien": true, "casse": false, "groupe": "avis_editeur", "groupe_titre": "Avis de sécurité de l'éditeur"}], "nb_exploits": 0, "cvss": {"version": "3.1", "vecteur": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "metriques": [{"code": "AV", "nom": "Vecteur d'attaque", "valeur": "Réseau (à distance, y compris par Internet)", "brut": "N", "explication": "D'où l'attaquant doit agir."}, {"code": "AC", "nom": "Complexité de l'attaque", "valeur": "Faible", "brut": "L", "explication": "Conditions hors du contrôle de l'attaquant."}, {"code": "PR", "nom": "Privilèges requis", "valeur": "Aucun (pas de compte)", "brut": "N", "explication": "Droits dont l'attaquant a besoin avant d'attaquer."}, {"code": "UI", "nom": "Interaction de l'utilisateur", "valeur": "Aucune", "brut": "N", "explication": "Une victime doit-elle cliquer ou ouvrir quelque chose ?"}, {"code": "S", "nom": "Portée", "valeur": "Inchangée", "brut": "U", "explication": "L'attaque peut-elle toucher d'autres composants que celui qui est vulnérable ?"}, {"code": "C", "nom": "Confidentialité", "valeur": "Aucun", "brut": "N", "explication": "Accès à des informations protégées."}, {"code": "I", "nom": "Intégrité", "valeur": "Aucun", "brut": "N", "explication": "Modification de données ou du système."}, {"code": "A", "nom": "Disponibilité", "valeur": "Élevé", "brut": "H", "explication": "Arrêt ou ralentissement du service."}], "calculateur": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "specification": "https://www.first.org/cvss/v3.1/specification-document"}, "cvss4": null, "cwe": [{"id": "CWE-400", "nom": "Uncontrolled Resource Consumption", "url": "https://cwe.mitre.org/data/definitions/400.html"}], "owasp": [], "ssvc": {"lignes": [{"nom": "Exploitation", "valeur": "Exploitation active constatée", "brut": "active"}, {"nom": "Automatisable", "valeur": "Oui : l'attaque peut être enchaînée sans intervention humaine", "brut": "yes"}, {"nom": "Impact technique", "valeur": "Partiel : contrôle ou informations limités", "brut": "partial"}], "version": "2.0.3", "date": "2024-07-23", "role": "CISA Coordinator", "url": "https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc"}, "chronologie": [{"date": "2023-09-29", "libelle": "Identifiant réservé", "qui": "Programme CVE"}, {"date": "2023-10-10", "libelle": "Publication de la vulnérabilité", "qui": "mitre"}, {"date": "2023-10-10", "libelle": "Ajout au catalogue des failles exploitées", "qui": "CISA"}, {"date": "2023-10-31", "libelle": "Échéance de correction fixée par la CISA", "qui": "CISA"}, {"date": "2024-07-23", "libelle": "Décision SSVC publiée", "qui": "CISA"}, {"date": "2026-08-11", "libelle": "Dernière mise à jour de la fiche source", "qui": "Source"}, {"date": "2026-10-06", "libelle": "Calcul du score EPSS affiché", "qui": "FIRST"}], "liens_officiels": [{"nom": "NVD (NIST)", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-44487", "description": "Fiche de référence : CVSS, CPE, références étiquetées."}, {"nom": "CVE.org", "url": "https://www.cve.org/CVERecord?id=CVE-2023-44487", "description": "Enregistrement officiel publié par l'organisme qui a attribué l'identifiant."}, {"nom": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-44487", "description": "Entrée du catalogue des failles activement exploitées."}, {"nom": "FIRST EPSS", "url": "https://api.first.org/data/v1/epss?cve=CVE-2023-44487", "description": "Score de probabilité d'exploitation du jour."}, {"nom": "OSV.dev", "url": "https://osv.dev/vulnerability/CVE-2023-44487", "description": "Paquets open source concernés et versions corrigées."}, {"nom": "GitHub Advisory Database", "url": "https://github.com/advisories?query=CVE-2023-44487", "description": "Avis de sécurité des dépendances logicielles."}], "produits": [{"vendor": "Siemens", "product": "Simatic s7-1500 Cpu 1518f-4 Pn/dp Mfp Firmware", "ranges": ["à partir de 3.1.5"], "first_unaffected": [], "source": "NVD"}, {"vendor": "Siemens", "product": "Sinec Ins", "ranges": ["avant 1.0", "1.0"], "first_unaffected": ["1.0"], "source": "NVD"}, {"vendor": "Siemens", "product": "Sinec Nms", "ranges": ["avant 3.0"], "first_unaffected": ["3.0"], "source": "NVD"}, {"vendor": "Siemens", "product": "st7 Scadaconnect", "ranges": ["avant 1.1"], "first_unaffected": ["1.1"], "source": "NVD"}, {"vendor": "Siemens", "product": "Ruggedcom ape1808 Firmware", "ranges": ["toutes versions (selon NVD)"], "first_unaffected": [], "source": "NVD"}, {"vendor": "Siemens", "product": "Simatic s7-1500 Cpu 1518-4 Pn/dp Mfp Firmware", "ranges": ["à partir de 3.1.5"], "first_unaffected": [], "source": "NVD"}, {"vendor": "Siemens", "product": "Siplus s7-1500 Cpu 1518-4 Pn/dp Mfp Firmware", "ranges": ["à partir de 3.1.5"], "first_unaffected": [], "source": "NVD"}, {"vendor": "Ietf", "product": "Http", "ranges": ["2.0"], "first_unaffected": [], "source": "NVD"}, {"vendor": "nghttp2", "product": "nghttp2", "ranges": ["avant 1.57.0"], "first_unaffected": ["1.57.0"], "source": "NVD"}, {"vendor": "Netty", "product": "Netty", "ranges": ["avant 4.1.100"], "first_unaffected": ["4.1.100"], "source": "NVD"}, {"vendor": "Envoyproxy", "product": "Envoy", "ranges": ["1.24.10", "1.25.9", "1.26.4", "1.27.0"], "first_unaffected": [], "source": "NVD"}, {"vendor": "Eclipse", "product": "Jetty", "ranges": ["avant 9.4.53", "de 10.0.0 à 10.0.17 (exclue)", "de 11.0.0 à 11.0.17 (exclue)", "de 12.0.0 à 12.0.2 (exclue)"], "first_unaffected": ["9.4.53", "10.0.17", "11.0.17", "12.0.2"], "source": "NVD"}, {"vendor": "Caddyserver", "product": "Caddy", "ranges": ["avant 2.7.5"], "first_unaffected": ["2.7.5"], "source": "NVD"}, {"vendor": "Golang", "product": "Go", "ranges": ["avant 1.20.10", "de 1.21.0 à 1.21.3 (exclue)"], "first_unaffected": ["1.20.10", "1.21.3"], "source": "NVD"}, {"vendor": "Golang", "product": "http2", "ranges": ["avant 0.17.0"], "first_unaffected": ["0.17.0"], "source": "NVD"}, {"vendor": "f5", "product": "Big-ip Access Policy Manager", "ranges": ["de 13.1.0 à 13.1.5 (incluse)"], "first_unaffected": [], "source": "NVD"}, {"vendor": "Apache", "product": "Tomcat", "ranges": ["de 8.5.0 à 8.5.93 (incluse)"], "first_unaffected": [], "source": "NVD"}, {"vendor": "Apple", "product": "Swiftnio http/2", "ranges": ["avant 1.28.0"], "first_unaffected": ["1.28.0"], "source": "NVD"}, {"vendor": "Grpc", "product": "Grpc", "ranges": ["avant 1.56.3"], "first_unaffected": ["1.56.3"], "source": "NVD"}, {"vendor": "Microsoft", "product": ".net", "ranges": ["de 6.0.0 à 6.0.23 (exclue)"], "first_unaffected": ["6.0.23"], "source": "NVD"}, {"vendor": "Nodejs", "product": "Node.js", "ranges": ["de 18.0.0 à 18.18.2 (exclue)"], "first_unaffected": ["18.18.2"], "source": "NVD"}, {"vendor": "Microsoft", "product": "Cbl-mariner", "ranges": ["avant 2023-10-11"], "first_unaffected": ["2023-10-11"], "source": "NVD"}, {"vendor": "Dena", "product": "h2o", "ranges": ["avant 2023-10-10"], "first_unaffected": ["2023-10-10"], "source": "NVD"}, {"vendor": "Facebook", "product": "Proxygen", "ranges": ["avant 2023.10.16.00"], "first_unaffected": ["2023.10.16.00"], "source": "NVD"}, {"vendor": "Apache", "product": "Apisix", "ranges": ["avant 3.6.1"], "first_unaffected": ["3.6.1"], "source": "NVD"}, {"vendor": "Amazon", "product": "Opensearch Data Prepper", "ranges": ["avant 2.5.0"], "first_unaffected": ["2.5.0"], "source": "NVD"}, {"vendor": "Debian", "product": "Debian Linux", "ranges": ["10.0"], "first_unaffected": [], "source": "NVD"}, {"vendor": "Kazu-yamamoto", "product": "http2", "ranges": ["avant 4.2.2"], "first_unaffected": ["4.2.2"], "source": "NVD"}, {"vendor": "Istio", "product": "Istio", "ranges": ["avant 1.17.6"], "first_unaffected": ["1.17.6"], "source": "NVD"}, {"vendor": "Varnish Cache Project", "product": "Varnish Cache", "ranges": ["avant 2023-10-10"], "first_unaffected": ["2023-10-10"], "source": "NVD"}, {"vendor": "Traefik", "product": "Traefik", "ranges": ["avant 2.10.5"], "first_unaffected": ["2.10.5"], "source": "NVD"}, {"vendor": "Projectcontour", "product": "Contour", "ranges": ["avant 2023-10-11"], "first_unaffected": ["2023-10-11"], "source": "NVD"}, {"vendor": "Linkerd", "product": "Linkerd", "ranges": ["de 2.12.0 à 2.12.5 (incluse)"], "first_unaffected": [], "source": "NVD"}, {"vendor": "Linecorp", "product": "Armeria", "ranges": ["avant 1.26.0"], "first_unaffected": ["1.26.0"], "source": "NVD"}, {"vendor": "Redhat", "product": "3scale Api Management Platform", "ranges": ["2.0"], "first_unaffected": [], "source": "NVD"}, {"vendor": "Redhat", "product": "Service Telemetry Framework", "ranges": ["1.5"], "first_unaffected": [], "source": "NVD"}, {"vendor": "Fedoraproject", "product": "Fedora", "ranges": ["37"], "first_unaffected": [], "source": "NVD"}, {"vendor": "Netapp", "product": "Astra Control Center", "ranges": ["toutes versions (selon NVD)"], "first_unaffected": [], "source": "NVD"}, {"vendor": "Akka", "product": "Http Server", "ranges": ["avant 10.5.3"], "first_unaffected": ["10.5.3"], "source": "NVD"}, {"vendor": "Konghq", "product": "Kong Gateway", "ranges": ["avant 3.4.2"], "first_unaffected": ["3.4.2"], "source": "NVD"}, {"vendor": "Jenkins", "product": "Jenkins", "ranges": ["jusqu'à 2.414.2 (incluse)"], "first_unaffected": [], "source": "NVD"}, {"vendor": "Apache", "product": "Solr", "ranges": ["avant 9.4.0"], "first_unaffected": ["9.4.0"], "source": "NVD"}, {"vendor": "Openresty", "product": "Openresty", "ranges": ["avant 1.21.4.3"], "first_unaffected": ["1.21.4.3"], "source": "NVD"}, {"vendor": "Cisco", "product": "Business Process Automation", "ranges": ["avant 3.2.003.009"], "first_unaffected": ["3.2.003.009"], "source": "NVD"}, {"vendor": "Cisco", "product": "Secure Web Appliance Firmware", "ranges": ["avant 15.1.0"], "first_unaffected": ["15.1.0"], "source": "NVD"}, {"vendor": "Cisco", "product": "Nx-os", "ranges": ["avant 10.2\\(7\\)"], "first_unaffected": ["10.2\\(7\\)"], "source": "NVD"}, {"vendor": "n/a", "product": "n/a", "ranges": ["n/a"], "first_unaffected": [], "source": "CVE.org"}], "notes_kev": ["https://www.cisa.gov/news-events/alerts/2023/10/10/http2-rapid-reset-vulnerability-cve-2023-44487", "https://blog.cloudflare.com/technical-breakdown-http2-rapid-reset-ddos-attack/", "https://nvd.nist.gov/vuln/detail/CVE-2023-44487"]}, "consulted_at": "2026-10-07T04:32:37.149256+00:00"}