CVE-2023-44487
Aliases:CGA-5jp5-95p2-jw83BIT-apisix-2023-44487BIT-aspnet-core-2023-44487BIT-contour-2023-44487BIT-dotnet-2023-44487BIT-dotnet-sdk-2023-44487BIT-envoy-2023-44487BIT-golang-2023-44487BIT-jenkins-2023-44487BIT-kong-2023-44487BIT-nginx-2023-44487BIT-nginx-gateway-2023-44487BIT-nginx-ingress-controller-2023-44487BIT-node-2023-44487BIT-node-min-2023-44487BIT-solr-2023-44487BIT-tomcat-2023-44487BIT-varnish-2023-44487CGA-4mmr-qwxr-f88gCGA-5v4r-558c-254rCGA-9w4r-68hh-64j5CGA-m49h-wjp5-j434CGA-mp43-q6p3-96v2GHSA-m425-mq94-257gGHSA-qppj-fm5r-hxr3GO-2023-2153GHSA-M425-MQ94-257GALPINE-CVE-2023-44487RHEA-2023:6562RHEA-2023:6741RHSA-2023:5705RHSA-2023:5706RHSA-2023:5707RHSA-2023:5708RHSA-2023:5709RHSA-2023:5710RHSA-2023:5711RHSA-2023:5712RHSA-2023:5713RHSA-2023:5714RHSA-2023:5715RHSA-2023:5720RHSA-2023:5749RHSA-2023:5764RHSA-2023:5765RHSA-2023:5766RHSA-2023:5767RHSA-2023:5768RHSA-2023:5769RHSA-2023:5770RHSA-2023:5783RHSA-2023:5803RHSA-2023:5837RHSA-2023:5838RHSA-2023:5840RHSA-2023:5841RHSA-2023:5850RHSA-2023:5920RHSA-2023:5924RHSA-2023:5928RHSA-2023:5929RHSA-2023:5930RHSA-2023:5989RHSA-2023:6020RHSA-2023:6021RHSA-2023:6022RHSA-2023:6023RHSA-2023:6105RHSA-2023:6120RHSA-2023:6746RHSA-2023:7334DEBIAN-CVE-2023-44487CGA-22p7-prfj-gr5cCGA-237c-4qwg-gxg2CGA-2385-w6vm-wvgwCGA-2h88-fjr2-86ghCGA-2hw8-79x7-cqgrCGA-2hx9-7hv5-frg7CGA-2jvg-p29h-wgxfCGA-2m2j-vcrv-m38gCGA-2qjf-3fvv-vg2gCGA-2w6f-253w-rchgCGA-2x2q-5r33-h5g5CGA-343p-gjwq-v6j8CGA-34vq-4222-422pCGA-3967-qr38-69c7CGA-3c47-8xgc-m9f3CGA-3g4g-q4p5-v83cCGA-3hxg-844j-2m37CGA-3m66-x5pq-pvj8CGA-3mq4-2257-59v8CGA-3rv6-2xmr-w7vgCGA-3x8v-w9p2-7gw3CGA-42f4-646g-jqwvCGA-45c2-x597-wxf9CGA-48fr-2w35-26pgCGA-49cq-9fv6-6vjwCGA-4g96-r492-33jrCGA-4j34-6334-352qCGA-4p7p-27m2-54f7CGA-4pff-g23h-3v48CGA-5374-rrj4-h72qCGA-54x8-9frc-527pCGA-555p-rxj4-qp97CGA-55q6-9r55-85r5CGA-568h-q944-jc2mCGA-58wh-f6w2-8p98CGA-5p4w-9ghg-44xpCGA-5p76-g739-8w6qCGA-5v5f-x4j3-mmgjCGA-5w65-hw34-q8vqCGA-6248-mq76-r89wCGA-62gx-xvw6-427fCGA-64pq-rpvx-694fCGA-666c-whj8-m9gvCGA-6677-9g37-x28qCGA-69x2-gqvp-3cq9CGA-6fc5-fm2m-6r4xCGA-6gqr-qxpj-24hmCGA-6jxg-xjj7-q5vrCGA-6p7w-mj63-xf3hCGA-6qx6-xg6f-7mrpCGA-6rww-j6gw-4jhqCGA-6xp6-48p2-2rxxCGA-6xr8-xcc3-w3vqCGA-72h6-m56r-fprwCGA-72x2-8vh7-867pCGA-737f-g6rp-2p4vCGA-73f8-fqx3-jq9qCGA-774w-53h9-hqccCGA-7crh-mfxf-7xm4CGA-7f8v-5pxv-6r89CGA-7fhx-jjp2-cxc8CGA-7h3x-qqgp-8r5jCGA-7qpr-9wqw-rh6jCGA-7rf9-5v97-8j4qCGA-7v4f-j5qc-5jpqCGA-7wrw-x493-vx6rCGA-7xh7-mm3h-hpc5CGA-83mg-3fqg-fch4CGA-878x-7r2c-vhhgCGA-8cj6-4h45-jgxqCGA-8crc-7j4h-57jcCGA-8pp2-9fwv-xfm7CGA-8qwg-6frf-rhmhCGA-8rjj-ppf3-m53hCGA-92x7-p54x-x97hCGA-93vx-85v3-ghffCGA-96pp-6gh2-vcpwCGA-9jw4-r4f9-2mwfCGA-9vj2-v2h2-55xmCGA-9x75-779h-g4g2CGA-c2jr-pq8p-xxhrCGA-c4cm-mrwp-64pxCGA-c4rr-j5f9-xv89CGA-c8gh-hr3j-p78cCGA-c8jp-q68j-mg6mCGA-cc8j-m3xf-h7jjCGA-cm9c-w3cw-hwhvCGA-cp9p-x5qf-4865CGA-cv74-523x-74rxCGA-cxc2-g495-67jqCGA-f4cj-vhvj-c59cCGA-fm5j-r8mr-rw4rCGA-fq5r-px9m-7c7pCGA-fqqw-qr6w-x853CGA-fr96-5848-2q3rCGA-fvg5-qc5m-vgh2CGA-fvvp-8fx3-q2ghCGA-g2qr-m8cj-mrvfCGA-g5c9-rpvf-hgf4CGA-g5gf-52rr-rhgcCGA-g6px-5rrr-4pqxCGA-g7x7-9x95-p428CGA-g857-hmfj-g5f5CGA-gh7q-v2qw-p72rCGA-ghh4-vq7g-44mrCGA-gjjv-358r-q9jwCGA-gjw4-95rp-c9wwCGA-gp2r-xjvp-grqgCGA-gqm6-rq78-x6ccCGA-gw55-f487-jwj5CGA-h3wj-64c5-qh55CGA-h848-5wx5-gg2pCGA-h86p-7pxp-g978CGA-hcg5-r73q-78wjCGA-hffc-r6r3-j44wCGA-hg72-w9j6-q4c8CGA-hj6j-fxf2-6462CGA-hjgf-p854-63cqCGA-hjhp-xvpv-6c3cCGA-hrqr-cjjp-q749CGA-hw42-72vq-6769CGA-hx27-8ghm-6pgqCGA-j25f-j35f-7x6gCGA-j9m2-h38p-54jfCGA-jchv-fgg9-59q9CGA-jr2x-5pv6-vrfwCGA-jvfm-7h3x-4fj6CGA-m39w-v3c8-rq3cCGA-m4w6-38p7-89pwCGA-m7mj-gc9c-95r5CGA-mf4w-wxqf-c62xCGA-mgrx-m522-x98vCGA-mh7w-hqv8-xr3qCGA-mp7g-qj48-mvj6CGA-mq4j-g2px-h5m2CGA-p7rr-q72p-pw9mCGA-p844-gmc3-4x25CGA-p9x5-cvv7-xw8mCGA-pvpp-xrq9-4crcCGA-29fh-fwr6-8pc3CGA-2gc3-p7vv-vcm6CGA-2m28-pqvf-2mrjCGA-2w3c-q9px-v4w6CGA-3584-9m6g-x74vCGA-36hw-rgmr-r2wpCGA-3fpr-94c4-c29xCGA-3mwc-f8ch-f5vxCGA-3rw3-g887-qhw4CGA-3v44-vgm9-94w2CGA-493g-p8jm-5fgfCGA-49f2-mrgh-7h8rCGA-4cfq-w46q-2875CGA-4f57-5wq3-hr9wCGA-4w4j-c85v-9c6gCGA-53r7-jrq5-2f98CGA-54hf-46cv-j2mfCGA-54hp-j3x8-v5g5CGA-5632-qgp9-p3pqCGA-58g3-6m2v-g9qcCGA-5c32-rmwh-q2mhCGA-5ch7-fvv4-8v5rCGA-5f3j-qm84-w35vCGA-5fxv-8ggh-c6qrCGA-5j9q-38vc-prf3CGA-6367-cg89-mfp2CGA-63mq-pp99-vrg9CGA-64wr-8j6h-w73fCGA-6h3x-v3hx-hrpjCGA-6h9f-r5r7-56w2CGA-6j7h-jfv7-cqggCGA-6xmv-g439-hpfpCGA-796r-xw4v-36hcCGA-7pp5-qmjw-qwh4CGA-7qf3-2cpx-cgpxCGA-7r2r-2vjh-hqc7CGA-7rfx-w7gx-rh7cCGA-7w8q-fgwf-4r45CGA-85fc-hxv6-vcc3CGA-874w-p7x3-p4cwCGA-89jj-69q2-rmfgCGA-8frf-969j-5vw3CGA-8pq8-8jhj-pqg5CGA-8qmg-p6gj-ghh5CGA-972x-jfjg-4px5CGA-c6cr-54p2-j3r8CGA-c75p-xmv2-vq88CGA-cjjw-vm66-jp2cCGA-cqp9-qqrg-wq79CGA-crvh-xq5f-p957CGA-cxw7-c5rh-r733CGA-f48m-g6rg-jr8wCGA-f6v3-g5r5-pfcwCGA-fmhq-8jgw-6555CGA-fp99-r3r3-mg25CGA-fvxp-gm4w-6crhCGA-g3h9-9825-pqgrCGA-g59w-qc4x-hvw3CGA-g6j8-xm92-ggp4CGA-gm95-fmj6-w9wxCGA-gq7r-7x4x-5f6rCGA-gxgc-96j7-9wcvCGA-h297-98cj-vpp3CGA-h5h9-w9c3-44v6CGA-h5pj-qrf7-4xw5CGA-hvfc-93qm-4c42CGA-j25p-q5f3-w86mCGA-j2pr-p8p8-cg9fCGA-jxq4-p49m-756cCGA-m3p8-fpq8-w5h5CGA-m55c-5xq7-7fcrCGA-p4h2-vc53-jpcgCGA-p7h8-gr54-g92mCGA-pmm6-65v4-2fv3CGA-pr93-57j9-8w8cCGA-pw6c-7g7r-c2m6CGA-q6v5-p5g9-c8v6CGA-q77p-cmwq-6652CGA-q7m7-mgvv-mwfrCGA-q97g-28f2-gxhfCGA-q987-9cwh-pwxqCGA-qcj4-73hp-66mjCGA-qcm2-3ph8-rrj7CGA-qfwx-hg2r-7qr4CGA-qgm4-wg2h-53pjCGA-qhfp-4gwp-4hrmCGA-qjfj-f775-59j8CGA-qp47-q4mj-hg82CGA-qprc-q79w-c3h5CGA-qrr7-95qq-32vjCGA-qw6r-v53v-p7p3CGA-qx3x-5c43-rxwpCGA-r2xg-grhr-p58hCGA-r45p-f4v5-h3hwCGA-r5jv-37c4-3h4pCGA-r9fv-wm56-5jppCGA-rf64-gjr5-2fx3CGA-rfm6-7cff-6jv5CGA-rhwc-8q7j-3r25CGA-rjr3-3gvr-q7fmCGA-rjwx-7prx-cxp6CGA-rqgc-jrrg-4xgrCGA-rqxq-4hfm-fx29CGA-rv49-22j8-3xrqCGA-rv9q-98gv-93xcCGA-rw89-jvm4-7jqwCGA-rxqx-v29v-4jjqCGA-v3j6-rc3c-cgj2CGA-v44f-v6rr-r3qgCGA-v46m-p2xr-j6pcCGA-v7qj-6h6r-gx5xCGA-vfv5-5mrf-x2c3CGA-vfvq-w999-7h3xCGA-vhv6-2rhc-2c4hCGA-vm9c-xpcg-rvqpCGA-vmmg-r643-26w8CGA-vpff-fhf4-rr53CGA-vvjj-wxr6-gpmgCGA-vwg8-c47w-78xgCGA-vx6x-qpmm-qw72CGA-vxw8-6p96-257qCGA-w2jr-g9vh-vw9pCGA-w543-7xr6-j48mCGA-w59f-82g8-chfqCGA-w6m6-9jmr-39qfCGA-w7c7-8v47-hh9gCGA-wc2j-h953-hf7vCGA-wh73-9gw5-7p7gCGA-whvh-p9hr-2j64CGA-wrf5-w4vg-8hw6CGA-wvhq-wfhq-mm9pCGA-wvpv-4g2f-65jxCGA-wwrx-hp58-rxv5CGA-wx3m-5p7f-p729CGA-wxwg-9rg3-c3mpCGA-x32h-vc7p-4wmmCGA-x6m2-v83p-v7r8CGA-x7q4-79hc-9g62CGA-x7rr-28w4-g299CGA-x95q-4x2v-5f84CGA-xfv7-q4fj-4h7jCGA-xg8v-h6j9-qv8mCGA-xmww-h637-34m9CGA-xpfc-p8jj-qrhjCGA-xr7f-2gg3-fp94CGA-xv4w-w46m-9375CGA-xxq4-6473-f37r
Advisory lineage Upstream: 0 Downstream: 174
Analyzed
Published: 10 Oct 2023, 00:00
Last modified:14 Jul 2026, 12:03
Vulnerability Summary
Overall Risk (default)
high
60/100 CVSS Score
7.5 HIGH
v3.1 (cve.org)
EPSS Score
100% CRITICAL
100% probability +5.61%
KEV
Listed
CISA
1 listing
Ransomware
No reports
Public exploits
3 found
Dark Web
Not detected
Timeline
10 Oct 2023, 00:00
Published
Vulnerability first disclosed
10 Oct 2023, 00:00
Added to CISA KEV
HTTP/2 Rapid Reset Attack Vulnerability
31 Oct 2023, 00:00
CISA Remediation Due
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
14 Jul 2026, 12:03
Last Modified
Vulnerability information updated
Description
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
CVSS Metrics
- v4.0•MEDIUM•Score: 6.9CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:A
- v3.1•HIGH•Score: 7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- v3.1•MEDIUM•Score: 5.3CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:H
EPSS Trends
Current EPSS score: 100.00%• Percentile: 100%
Techniques & Countermeasures
- CWE-400•Uncontrolled Resource Consumption
The product does not properly control the allocation and maintenance of a limited resource.
Affected Systems
- akka•http_server
< 10.5.3
- amazon•opensearch_data_prepper
< 2.5.0
- apache•apisix
< 3.6.1
- apache•solr
< 9.4.0
- apache•tomcat
≥ 8.5.0, ≤ 8.5.93 | ≥ 9.0.0, ≤ 9.0.80 | ≥ 10.1.0, ≤ 10.1.13 | 11.0.0:milestone1 | 11.0.0:milestone10 | 11.0.0:milestone11 | 11.0.0:milestone2 | 11.0.0:milestone3 | 11.0.0:milestone4 | 11.0.0:milestone5 | 11.0.0:milestone6 | 11.0.0:milestone7 | 11.0.0:milestone8 | 11.0.0:milestone9
- apache•traffic_server
≥ 8.0.0, < 8.1.9 | ≥ 9.0.0, < 9.2.3
- alpine•lighttpd
< 1.4.73-r0 | < 1.4.73-r0 | < 1.4.73-r0
- alpine•nghttp2
< 1.46.0-r2 | < 1.47.0-r2 | < 1.51.0-r2 | < 1.57.0-r0 | < 1.57.0-r0 | < 1.57.0-r0 | < 1.57.0-r0 | < 1.57.0-r0 | < 1.57.0-r0 | < 1.57.0-r0
- alpine•nginx
≥ 1.9.5, < 1.20.2-r2 | ≥ 1.9.5, < 1.22.1-r1 | ≥ 1.9.5, < 1.22.1-r1 | ≥ 1.9.5, < 1.24.0-r7 | ≥ 1.9.5, < 1.24.0-r12 | ≥ 1.9.5, < 1.24.0-r12 | ≥ 1.9.5, < 1.24.0-r12 | ≥ 1.9.5, < 1.24.0-r12 | ≥ 1.9.5, < 1.24.0-r12 | ≥ 1.9.5, < 1.24.0-r12
- alpine•varnish
< 7.3.2-r0 | < 7.3.1-r0 | < 7.4.2-r0 | < 7.4.2-r0 | < 7.4.2-r0 | < 7.4.2-r0 | < 7.4.2-r0 | < 7.4.2-r0
- chainguard•aactl
< 0.4.12-r49
- chainguard•amass
< 5.1.1-r1
- chainguard•atlantis
< 0.26.0-r3
- chainguard•atlantis-fips
< 0.26.0-r3
- chainguard•aws-efs-csi-driver
< 1.7.0-r6
- chainguard•aws-efs-csi-driver-fips
< 3.0.1-r1 | < 3.1.0-r0
- chainguard•bank-vaults-fips
< 1.32.1-r8
- chainguard•bank-vaults-template-fips
< 1.32.1-r8
- chainguard•bom
< 0.6.0-r0
- chainguard•buildctl
< 0.29.0-r6
- chainguard•buildkitd
< 0.29.0-r6
- chainguard•certificate-transparency
< 1.3.2-r4
- chainguard•cluster-autoscaler-1.26
< 1.26.4-r4
- chainguard•cluster-autoscaler-1.26-compat
< 1.26.4-r4
- chainguard•cluster-autoscaler-1.27
< 1.27.3-r6
- chainguard•cluster-autoscaler-1.27-compat
< 1.27.3-r6
- chainguard•cluster-autoscaler-1.28
< 1.28.0-r6
- chainguard•cluster-autoscaler-1.28-compat
< 1.28.0-r6
- chainguard•configmap-reload-fips
< 0.12.0-r2
- chainguard•configmap-reload-fips-0.11
< 0.11.1-r3
- chainguard•conftest
< 0.46.0-r1
- chainguard•cortex
< 1.21.0-r0
- chainguard•cosign
< 2.2.0-r6
- chainguard•cue
< 0.6.0-r7
- chainguard•dex
< 2.37.0-r8
- chainguard•dgraph
< 25.3.2-r2
- chainguard•dynamic-localpv-provisioner
< 3.4.1-r4
- chainguard•dynamic-localpv-provisioner-fips
< 3.5.0-r0
- chainguard•envoy-ratelimit
< 0.0_git20231014-r3
- chainguard•falcoctl-fips
< 0.6.2-r2
- chainguard•falcoctl-fips-0.4
< 0.4.0-r2
- chainguard•flux-helm-controller
< 0.36.2-r2
- chainguard•flux-kustomize-controller
< 1.1.1-r2
- chainguard•flux-notification-controller
< 1.1.0-r5
- chainguard•flux-source-controller
< 1.1.2-r2
- chainguard•frp
< 0.52.2-r0
- chainguard•fuse-overlayfs-snapshotter
< 1.0.7-r2
- chainguard•git-lfs
< 3.4.0-r4
- chainguard•gitness
< 3.0.0_beta2-r2
- chainguard•gke-gcloud-auth-plugin
< 0.1.0-r16
Showing first 50 affected entries in server-rendered view.
References (361)
- https://github.com/dotnet/core/blob/e4613450ea0da7fd2fc6b61dfb2c1c1dec1ce9ec/release-notes/6.0/6.0.23/6.0.23.md?plain=1#L73
- https://blog.cloudflare.com/technical-breakdown-http2-rapid-reset-ddos-attack/
- https://aws.amazon.com/security/security-bulletins/AWS-2023-011/
- https://cloud.google.com/blog/products/identity-security/how-it-works-the-novel-http2-rapid-reset-ddos-attack
- https://www.nginx.com/blog/http-2-rapid-reset-attack-impacting-f5-nginx-products/
- https://cloud.google.com/blog/products/identity-security/google-cloud-mitigated-largest-ddos-attack-peaking-above-398-million-rps/
- https://news.ycombinator.com/item?id=37831062
- https://blog.cloudflare.com/zero-day-rapid-reset-http2-record-breaking-ddos-attack/
- https://www.phoronix.com/news/HTTP2-Rapid-Reset-Attack
- https://github.com/envoyproxy/envoy/pull/30055
- https://github.com/haproxy/haproxy/issues/2312
- https://github.com/eclipse/jetty.project/issues/10679
- https://forums.swift.org/t/swift-nio-http2-security-update-cve-2023-44487-http-2-dos/67764
- https://github.com/nghttp2/nghttp2/pull/1961
- https://github.com/netty/netty/commit/58f75f665aa81a8cbcf6ffa74820042a285c5e61
- https://github.com/alibaba/tengine/issues/1872
- https://github.com/apache/tomcat/tree/main/java/org/apache/coyote/http2
- https://news.ycombinator.com/item?id=37830987
- https://news.ycombinator.com/item?id=37830998
- https://github.com/caddyserver/caddy/issues/5877
- https://www.bleepingcomputer.com/news/security/new-http-2-rapid-reset-zero-day-attack-breaks-ddos-records/
- https://github.com/bcdannyboy/CVE-2023-44487
- https://github.com/grpc/grpc-go/pull/6703
- https://github.com/icing/mod_h2/blob/0a864782af0a942aa2ad4ed960a6b32cd35bcf0a/mod_http2/README.md?plain=1#L239-L244
- https://github.com/nghttp2/nghttp2/releases/tag/v1.57.0
- https://mailman.nginx.org/pipermail/nginx-devel/2023-October/S36Q5HBXR7CAIMPLLPRSSSYR4PCMWILK.html
- https://my.f5.com/manage/s/article/K000137106
- https://msrc.microsoft.com/blog/2023/10/microsoft-response-to-distributed-denial-of-service-ddos-attacks-against-http/2/
- https://bugzilla.proxmox.com/show_bug.cgi?id=4988
- https://cgit.freebsd.org/ports/commit/?id=c64c329c2c1752f46b73e3e6ce9f4329be6629f9
- http://www.openwall.com/lists/oss-security/2023/10/10/7
- http://www.openwall.com/lists/oss-security/2023/10/10/6
- https://seanmonstar.com/post/730794151136935936/hyper-http2-rapid-reset-unaffected
- https://github.com/microsoft/CBL-Mariner/pull/6381
- https://groups.google.com/g/golang-announce/c/iNNxDTCjZvo
- https://github.com/facebook/proxygen/pull/466
- https://gist.github.com/adulau/7c2bfb8e9cdbe4b35a5e131c66a0c088
- https://github.com/micrictor/http2-rst-stream
- https://edg.io/lp/blog/resets-leaks-ddos-and-the-tale-of-a-hidden-cve
- https://openssf.org/blog/2023/10/10/http-2-rapid-reset-vulnerability-highlights-need-for-rapid-response/
- https://github.com/h2o/h2o/security/advisories/GHSA-2m7v-gc89-fjqf
- https://github.com/h2o/h2o/pull/3291
- https://github.com/nodejs/node/pull/50121
- https://github.com/dotnet/announcements/issues/277
- https://github.com/golang/go/issues/63417
- https://github.com/advisories/GHSA-vx74-f528-fxqg
- https://github.com/apache/trafficserver/pull/10564
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-44487
- https://tomcat.apache.org/security-10.html#Fixed_in_Apache_Tomcat_10.1.14
- https://lists.apache.org/thread/5py8h42mxfsn8l1wy6o41xwhsjlsd87q
- https://www.openwall.com/lists/oss-security/2023/10/10/6
- https://www.haproxy.com/blog/haproxy-is-not-affected-by-the-http-2-rapid-reset-attack-cve-2023-44487
- https://github.com/opensearch-project/data-prepper/issues/3474
- https://github.com/kubernetes/kubernetes/pull/121120
- https://github.com/oqtane/oqtane.framework/discussions/3367
- https://github.com/advisories/GHSA-xpw8-rcwv-8f8p
- https://netty.io/news/2023/10/10/4-1-100-Final.html
- https://www.cisa.gov/news-events/alerts/2023/10/10/http2-rapid-reset-vulnerability-cve-2023-44487
- https://www.theregister.com/2023/10/10/http2_rapid_reset_zeroday/
- https://blog.qualys.com/vulnerabilities-threat-research/2023/10/10/cve-2023-44487-http-2-rapid-reset-attack
- https://news.ycombinator.com/item?id=37837043
- https://github.com/kazu-yamamoto/http2/issues/93
- https://martinthomson.github.io/h2-stream-limits/draft-thomson-httpbis-h2-stream-limits.html
- https://github.com/kazu-yamamoto/http2/commit/f61d41a502bd0f60eb24e1ce14edc7b6df6722a1
- https://github.com/apache/httpd/blob/afcdbeebbff4b0c50ea26cdd16e178c0d1f24152/modules/http2/h2_mplx.c#L1101-L1113
- https://www.debian.org/security/2023/dsa-5522
- https://www.debian.org/security/2023/dsa-5521
- https://access.redhat.com/security/cve/cve-2023-44487
- https://github.com/ninenines/cowboy/issues/1615
- https://github.com/varnishcache/varnish-cache/issues/3996
- https://github.com/tempesta-tech/tempesta/issues/1986
- https://blog.vespa.ai/cve-2023-44487/
- https://github.com/etcd-io/etcd/issues/16740
- https://www.darkreading.com/cloud/internet-wide-zero-day-bug-fuels-largest-ever-ddos-event
- https://istio.io/latest/news/security/istio-security-2023-004/
- https://github.com/junkurihara/rust-rpxy/issues/97
- https://bugzilla.suse.com/show_bug.cgi?id=1216123
- https://bugzilla.redhat.com/show_bug.cgi?id=2242803
- https://ubuntu.com/security/CVE-2023-44487
- https://community.traefik.io/t/is-traefik-vulnerable-to-cve-2023-44487/20125
- https://github.com/advisories/GHSA-qppj-fm5r-hxr3
- https://github.com/apache/httpd-site/pull/10
- https://github.com/projectcontour/contour/pull/5826
- https://github.com/linkerd/website/pull/1695/commits/4b9c6836471bc8270ab48aae6fd2181bc73fd632
- https://github.com/line/armeria/pull/5232
- https://blog.litespeedtech.com/2023/10/11/rapid-reset-http-2-vulnerablilty/
- https://security.paloaltonetworks.com/CVE-2023-44487
- https://github.com/akka/akka-http/issues/4323
- https://github.com/openresty/openresty/issues/930
- https://github.com/apache/apisix/issues/10320
- https://github.com/Azure/AKS/issues/3947
- https://github.com/Kong/kong/discussions/11741
- https://github.com/arkrwn/PoC/tree/main/CVE-2023-44487
- https://www.netlify.com/blog/netlify-successfully-mitigates-cve-2023-44487/
- https://github.com/caddyserver/caddy/releases/tag/v2.7.5
- https://lists.debian.org/debian-lts-announce/2023/10/msg00020.html
- http://www.openwall.com/lists/oss-security/2023/10/13/4
- http://www.openwall.com/lists/oss-security/2023/10/13/9
- https://arstechnica.com/security/2023/10/how-ddosers-used-the-http-2-protocol-to-deliver-attacks-of-unprecedented-size/
- https://lists.w3.org/Archives/Public/ietf-http-wg/2023OctDec/0025.html
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JMEXY22BFG5Q64HQCM5CK2Q7KDKVV4TY/
- https://linkerd.io/2023/10/12/linkerd-cve-2023-44487/
- https://lists.debian.org/debian-lts-announce/2023/10/msg00023.html
- https://security.netapp.com/advisory/ntap-20231016-0001/
- https://lists.debian.org/debian-lts-announce/2023/10/msg00024.html
- http://www.openwall.com/lists/oss-security/2023/10/18/4
- http://www.openwall.com/lists/oss-security/2023/10/18/8
- http://www.openwall.com/lists/oss-security/2023/10/19/6
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZKQSIKIAT5TJ3WSLU3RDBQ35YX4GY4V3/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JIZSEFC3YKCGABA2BZW6ZJRMDZJMB7PJ/
- http://www.openwall.com/lists/oss-security/2023/10/20/8
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WLPRQ5TWUQQXYWBJM7ECYDAIL2YVKIUH/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/E72T67UPDRXHIDLO3OROR25YAMN4GGW5/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BFQD3KUEMFBHPAPBGLWQC34L4OWL5HAZ/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZLU6U2R2IC2K64NDPNMV55AUAO65MAF4/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/X6QXN4ORIVF6XBW4WWFE7VNPVC74S45Y/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LKYHSZQFDNR7RSA7LHVLLIAQMVYCUGBG/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FNA62Q767CFAFHBCDKYNPBMZWB7TWYVU/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LNMZJCDHGLJJLXO4OXWJMTVQRNWOC7UL/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KSEGD2IWKNUO3DWY4KQGUQM5BISRWHQE/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CLB4TW7KALB3EEQWNWCN7OUIWWVWWCG2/
- https://lists.debian.org/debian-lts-announce/2023/10/msg00045.html
- https://www.debian.org/security/2023/dsa-5540
- https://lists.debian.org/debian-lts-announce/2023/10/msg00047.html
- https://discuss.hashicorp.com/t/hcsec-2023-32-vault-consul-and-boundary-affected-by-http-2-rapid-reset-denial-of-service-vulnerability-cve-2023-44487/59715
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VHUHTSXLXGXS7JYKBXTA3VINUPHTNGVU/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VSRDIV77HNKUSM7SJC5BKE5JSHLHU2NK/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3N4NJ7FR4X4FPZUGNTQAPSTVB2HB2Y4A/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZB43REMKRQR62NJEI7I5NQ4FSXNLBKRT/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HT7T2R4MQKLIF4ODV4BDLPARWFPCJ5CZ/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XFOIBB4YFICHDM7IBOP7PWXW3FX4HLL2/
- https://lists.debian.org/debian-lts-announce/2023/11/msg00001.html
- https://www.debian.org/security/2023/dsa-5549
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2MBEPPC36UBVOZZNAXFHKLFGSLCMN5LI/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WE2I52RHNNU42PX6NZ2RBUHSFFJ2LVZX/
- https://www.debian.org/security/2023/dsa-5558
- https://lists.debian.org/debian-lts-announce/2023/11/msg00012.html
- https://security.gentoo.org/glsa/202311-09
- https://www.debian.org/security/2023/dsa-5570
- https://security.netapp.com/advisory/ntap-20240426-0007/
- https://security.netapp.com/advisory/ntap-20240621-0006/
- https://security.netapp.com/advisory/ntap-20240621-0007/
- https://github.com/grpc/grpc/releases/tag/v1.59.2
- https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-http2-reset-d8Kf32vZ
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-44487
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JMEXY22BFG5Q64HQCM5CK2Q7KDKVV4TY/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZKQSIKIAT5TJ3WSLU3RDBQ35YX4GY4V3/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JIZSEFC3YKCGABA2BZW6ZJRMDZJMB7PJ/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WLPRQ5TWUQQXYWBJM7ECYDAIL2YVKIUH/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E72T67UPDRXHIDLO3OROR25YAMN4GGW5/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BFQD3KUEMFBHPAPBGLWQC34L4OWL5HAZ/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZLU6U2R2IC2K64NDPNMV55AUAO65MAF4/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X6QXN4ORIVF6XBW4WWFE7VNPVC74S45Y/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LKYHSZQFDNR7RSA7LHVLLIAQMVYCUGBG/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FNA62Q767CFAFHBCDKYNPBMZWB7TWYVU/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LNMZJCDHGLJJLXO4OXWJMTVQRNWOC7UL/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KSEGD2IWKNUO3DWY4KQGUQM5BISRWHQE/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CLB4TW7KALB3EEQWNWCN7OUIWWVWWCG2/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VHUHTSXLXGXS7JYKBXTA3VINUPHTNGVU/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VSRDIV77HNKUSM7SJC5BKE5JSHLHU2NK/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3N4NJ7FR4X4FPZUGNTQAPSTVB2HB2Y4A/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZB43REMKRQR62NJEI7I5NQ4FSXNLBKRT/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HT7T2R4MQKLIF4ODV4BDLPARWFPCJ5CZ/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XFOIBB4YFICHDM7IBOP7PWXW3FX4HLL2/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2MBEPPC36UBVOZZNAXFHKLFGSLCMN5LI/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WE2I52RHNNU42PX6NZ2RBUHSFFJ2LVZX/
- https://www.vicarius.io/vsociety/posts/rapid-reset-cve-2023-44487-dos-in-http2-understanding-the-root-cause
- http://www.openwall.com/lists/oss-security/2025/08/13/6
- https://github.com/grpc/grpc-go/security/advisories/GHSA-m425-mq94-257g
- https://nvd.nist.gov/vuln/detail/CVE-2023-44487
- https://github.com/grpc/grpc-go/commit/f2180b4d5403d2210b30b93098eb7da31c05c721
- https://github.com/grpc/grpc-go
- https://github.com/apple/swift-nio-http2/security/advisories/GHSA-qppj-fm5r-hxr3
- https://github.com/hyperium/hyper/issues/3337
- https://github.com/akka/akka-http/pull/4325
- https://github.com/akka/akka-http/pull/4324
- https://github.com/apache/tomcat/commit/944332bb15bd2f3bf76ec2caeb1ff0a58a3bc628
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XFOIBB4YFICHDM7IBOP7PWXW3FX4HLL2
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZB43REMKRQR62NJEI7I5NQ4FSXNLBKRT
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZKQSIKIAT5TJ3WSLU3RDBQ35YX4GY4V3
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZLU6U2R2IC2K64NDPNMV55AUAO65MAF4
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2MBEPPC36UBVOZZNAXFHKLFGSLCMN5LI
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3N4NJ7FR4X4FPZUGNTQAPSTVB2HB2Y4A
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BFQD3KUEMFBHPAPBGLWQC34L4OWL5HAZ
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CLB4TW7KALB3EEQWNWCN7OUIWWVWWCG2
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/E72T67UPDRXHIDLO3OROR25YAMN4GGW5
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FNA62Q767CFAFHBCDKYNPBMZWB7TWYVU
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HT7T2R4MQKLIF4ODV4BDLPARWFPCJ5CZ
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JIZSEFC3YKCGABA2BZW6ZJRMDZJMB7PJ
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JMEXY22BFG5Q64HQCM5CK2Q7KDKVV4TY
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KSEGD2IWKNUO3DWY4KQGUQM5BISRWHQE
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LKYHSZQFDNR7RSA7LHVLLIAQMVYCUGBG
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LNMZJCDHGLJJLXO4OXWJMTVQRNWOC7UL
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VHUHTSXLXGXS7JYKBXTA3VINUPHTNGVU
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VSRDIV77HNKUSM7SJC5BKE5JSHLHU2NK
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WE2I52RHNNU42PX6NZ2RBUHSFFJ2LVZX
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WLPRQ5TWUQQXYWBJM7ECYDAIL2YVKIUH
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/X6QXN4ORIVF6XBW4WWFE7VNPVC74S45Y
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XFOIBB4YFICHDM7IBOP7PWXW3FX4HLL2
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZB43REMKRQR62NJEI7I5NQ4FSXNLBKRT
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZKQSIKIAT5TJ3WSLU3RDBQ35YX4GY4V3
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZLU6U2R2IC2K64NDPNMV55AUAO65MAF4
- https://msrc.microsoft.com/blog/2023/10/microsoft-response-to-distributed-denial-of-service-ddos-attacks-against-http/2
- https://www.bleepingcomputer.com/news/security/new-http-2-rapid-reset-zero-day-attack-breaks-ddos-records
- https://www.eclipse.org/lists/jetty-announce/msg00181.html
- https://www.netlify.com/blog/netlify-successfully-mitigates-cve-2023-44487
- https://www.nginx.com/blog/http-2-rapid-reset-attack-impacting-f5-nginx-products
- https://www.theregister.com/2023/10/10/http2_rapid_reset_zeroday
- https://openssf.org/blog/2023/10/10/http-2-rapid-reset-vulnerability-highlights-need-for-rapid-response
- https://security.netapp.com/advisory/ntap-20231016-0001
- https://security.netapp.com/advisory/ntap-20240426-0007
- https://security.netapp.com/advisory/ntap-20240621-0006
- https://security.netapp.com/advisory/ntap-20240621-0007
- https://tomcat.apache.org/security-11.html#Fixed_in_Apache_Tomcat_11.0.0-M12
- https://tomcat.apache.org/security-8.html#Fixed_in_Apache_Tomcat_8.5.94
- https://tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.81
- https://github.com/apple/swift-nio-http2
- https://github.com/grpc/grpc-go/releases
- https://akka.io/security/akka-http-cve-2023-44487.html
- https://arstechnica.com/security/2023/10/how-ddosers-used-the-http-2-protocol-to-deliver-attacks-of-unprecedented-size
- https://aws.amazon.com/security/security-bulletins/AWS-2023-011
- https://blog.cloudflare.com/technical-breakdown-http2-rapid-reset-ddos-attack
- https://blog.cloudflare.com/zero-day-rapid-reset-http2-record-breaking-ddos-attack
- https://blog.litespeedtech.com/2023/10/11/rapid-reset-http-2-vulnerablilty
- https://blog.vespa.ai/cve-2023-44487
- https://chaos.social/@icing/111210915918780532
- https://cloud.google.com/blog/products/identity-security/google-cloud-mitigated-largest-ddos-attack-peaking-above-398-million-rps
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2MBEPPC36UBVOZZNAXFHKLFGSLCMN5LI
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3N4NJ7FR4X4FPZUGNTQAPSTVB2HB2Y4A
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BFQD3KUEMFBHPAPBGLWQC34L4OWL5HAZ
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CLB4TW7KALB3EEQWNWCN7OUIWWVWWCG2
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E72T67UPDRXHIDLO3OROR25YAMN4GGW5
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FNA62Q767CFAFHBCDKYNPBMZWB7TWYVU
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HT7T2R4MQKLIF4ODV4BDLPARWFPCJ5CZ
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JIZSEFC3YKCGABA2BZW6ZJRMDZJMB7PJ
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JMEXY22BFG5Q64HQCM5CK2Q7KDKVV4TY
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KSEGD2IWKNUO3DWY4KQGUQM5BISRWHQE
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LKYHSZQFDNR7RSA7LHVLLIAQMVYCUGBG
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LNMZJCDHGLJJLXO4OXWJMTVQRNWOC7UL
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VHUHTSXLXGXS7JYKBXTA3VINUPHTNGVU
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VSRDIV77HNKUSM7SJC5BKE5JSHLHU2NK
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WE2I52RHNNU42PX6NZ2RBUHSFFJ2LVZX
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WLPRQ5TWUQQXYWBJM7ECYDAIL2YVKIUH
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X6QXN4ORIVF6XBW4WWFE7VNPVC74S45Y
- https://go.dev/cl/534215
- https://go.dev/cl/534235
- https://go.dev/issue/63417
- https://groups.google.com/g/golang-announce/c/iNNxDTCjZvo/m/UDd7VKQuAAAJ
- https://istio.io/latest/news/security/istio-security-2023-004
- https://linkerd.io/2023/10/12/linkerd-cve-2023-44487
- https://cert-portal.siemens.com/productcert/html/ssa-832273.html
- https://cert-portal.siemens.com/productcert/html/ssa-341067.html
- https://cert-portal.siemens.com/productcert/html/ssa-784301.html
- https://cert-portal.siemens.com/productcert/html/ssa-915275.html
- https://cert-portal.siemens.com/productcert/html/ssa-082556.html
- https://security.alpinelinux.org/vuln/CVE-2023-44487
- https://access.redhat.com/errata/RHEA-2023:6562
- https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.3_release_notes/index
- https://bugzilla.redhat.com/show_bug.cgi?id=2170808
- https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhea-2023_6562.json
- https://access.redhat.com/security/cve/CVE-2023-44487
- https://access.redhat.com/security/vulnerabilities/RHSB-2023-003
- https://www.cve.org/CVERecord?id=CVE-2023-44487
- https://pkg.go.dev/vuln/GO-2023-2102
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog
- https://access.redhat.com/errata/RHEA-2023:6741
- https://issues.redhat.com/browse/RHEL-2522
- https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhea-2023_6741.json
- https://access.redhat.com/errata/RHSA-2023:5705
- https://access.redhat.com/security/updates/classification/#important
- https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_5705.json
- https://access.redhat.com/errata/RHSA-2023:5706
- https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_5706.json
- https://access.redhat.com/errata/RHSA-2023:5707
- https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_5707.json
- https://access.redhat.com/errata/RHSA-2023:5708
- https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_5708.json
- https://access.redhat.com/errata/RHSA-2023:5709
- https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_5709.json
- https://access.redhat.com/errata/RHSA-2023:5710
- https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_5710.json
- https://access.redhat.com/errata/RHSA-2023:5711
- https://access.redhat.com/security/updates/classification/#moderate
- https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_5711.json
- https://access.redhat.com/errata/RHSA-2023:5712
- https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_5712.json
- https://access.redhat.com/errata/RHSA-2023:5713
- https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_5713.json
- https://access.redhat.com/errata/RHSA-2023:5714
- https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_5714.json
- https://access.redhat.com/errata/RHSA-2023:5715
- https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_5715.json
- https://access.redhat.com/errata/RHSA-2023:5720
- https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_5720.json
- https://access.redhat.com/errata/RHSA-2023:5749
- https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_5749.json
- https://access.redhat.com/errata/RHSA-2023:5764
- https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_5764.json
- https://access.redhat.com/errata/RHSA-2023:5765
- https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_5765.json
- https://access.redhat.com/errata/RHSA-2023:5766
- https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_5766.json
- https://access.redhat.com/errata/RHSA-2023:5767
- https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_5767.json
- https://access.redhat.com/errata/RHSA-2023:5768
- https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_5768.json
- https://access.redhat.com/errata/RHSA-2023:5769
- https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_5769.json
- https://access.redhat.com/errata/RHSA-2023:5770
- https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_5770.json
- https://access.redhat.com/errata/RHSA-2023:5783
- https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_5783.json
- https://access.redhat.com/errata/RHSA-2023:5803
- https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_5803.json
- https://access.redhat.com/errata/RHSA-2023:5837
- https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_5837.json
- https://access.redhat.com/errata/RHSA-2023:5838
- https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_5838.json
- https://access.redhat.com/errata/RHSA-2023:5840
- https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_5840.json
- https://access.redhat.com/errata/RHSA-2023:5841
- https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_5841.json
- https://access.redhat.com/errata/RHSA-2023:5850
- https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_5850.json
- https://access.redhat.com/errata/RHSA-2023:5920
- https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.4/
- https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.4/html-single/installation_guide/
- https://issues.redhat.com/browse/JBEAP-25457
- https://issues.redhat.com/browse/JBEAP-25838
- https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_5920.json
- https://access.redhat.com/errata/RHSA-2023:5924
- https://access.redhat.com/security/updates/classification#critical
- https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_5924.json
- https://access.redhat.com/errata/RHSA-2023:5928
- https://issues.redhat.com/browse/RHEL-12884
- https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_5928.json
- https://access.redhat.com/errata/RHSA-2023:5929
- https://issues.redhat.com/browse/RHEL-13721
- https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_5929.json
- https://access.redhat.com/errata/RHSA-2023:5930
- https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_5930.json
- https://access.redhat.com/errata/RHSA-2023:5989
- https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_5989.json
- https://access.redhat.com/errata/RHSA-2023:6020
- https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_6020.json
- https://access.redhat.com/errata/RHSA-2023:6021
- https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_6021.json
- https://access.redhat.com/errata/RHSA-2023:6022
- https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_6022.json
- https://access.redhat.com/errata/RHSA-2023:6023
- https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_6023.json
- https://access.redhat.com/errata/RHSA-2023:6105
- https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_6105.json
- https://access.redhat.com/errata/RHSA-2023:6120
- https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_6120.json
- https://access.redhat.com/errata/RHSA-2023:6746
- https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_6746.json
- https://access.redhat.com/errata/RHSA-2023:7334
- https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_7334.json
- https://security-tracker.debian.org/tracker/CVE-2023-44487
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/44xxx/CVE-2023-44487.json