Tracker / CVE-2023-44487
CVE-2023-44487
Sfruttata Alta 7.5
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
Prodotti e versioni affette
| akka | http_server · … → 10.5.3 |
|---|---|
| amazon | opensearch_data_prepper · … → 2.5.0 |
| apache | apisix · … → 3.6.1 |
| apache | solr · … → 9.4.0 |
| apache | tomcat |
| apache | tomcat · 10.1.0 → 10.1.13 |
| apache | tomcat · 8.5.0 → 8.5.93 |
| apache | tomcat · 9.0.0 → 9.0.80 |
| apache | traffic_server · 8.0.0 → 8.1.9 |
| apache | traffic_server · 9.0.0 → 9.2.3 |
| apple | swiftnio_http\/2 · … → 1.28.0 |
| caddyserver | caddy · … → 2.7.5 |
| cisco | business_process_automation · … → 3.2.003.009 |
| cisco | connected_mobile_experiences · … → 11.1 |
| cisco | crosswork_data_gateway · … → 4.1.3 |
| cisco | crosswork_data_gateway · 5.0.0 → 5.0.2 |
| cisco | crosswork_situation_manager |
| cisco | crosswork_zero_touch_provisioning · … → 6.0.0 |
| cisco | data_center_network_manager |
| cisco | enterprise_chat_and_email |
| cisco | expressway · … → x14.3.3 |
| cisco | fog_director · … → 1.22 |
| cisco | ios_xe · … → 17.15.1 |
| cisco | ios_xr · … → 7.11.2 |
| cisco | iot_field_network_director · … → 4.11.0 |
| cisco | nx-os · … → 10.2\(7\) |
| cisco | nx-os · 10.3\(1\) → 10.3\(5\) |
| cisco | nx-os · 10.4\(1\) → 10.4\(2\) |
| cisco | prime_access_registrar · … → 9.3.3 |
| cisco | prime_cable_provisioning · … → 7.2.1 |
| cisco | prime_infrastructure · … → 3.10.4 |
| cisco | prime_network_registrar · … → 11.2 |
| cisco | secure_dynamic_attributes_connector · … → 2.2.0 |
| cisco | secure_firewall_threat_defense · … → 7.4.2 |
| cisco | secure_malware_analytics · … → 2.19.2 |
| cisco | secure_web_appliance_firmware · … → 15.1.0 |
| cisco | telepresence_video_communication_server · … → x14.3.3 |
| cisco | ultra_cloud_core_-_policy_control_function |
| cisco | ultra_cloud_core_-_policy_control_function · … → 2024.01.0 |
| cisco | ultra_cloud_core_-_serving_gateway_function · … → 2024.02.0 |
| cisco | ultra_cloud_core_-_session_management_function · … → 2024.02.0 |
| cisco | unified_attendant_console_advanced |
| cisco | unified_contact_center_domain_manager |
| cisco | unified_contact_center_enterprise |
| cisco | unified_contact_center_enterprise_-_live_data_server · … → 12.6.2 |
| cisco | unified_contact_center_management_portal |
| debian | debian_linux |
| dena | h2o · … → 2023-10-10 |
| eclipse | jetty · … → 9.4.53 |
| eclipse | jetty · 10.0.0 → 10.0.17 |
| eclipse | jetty · 11.0.0 → 11.0.17 |
| eclipse | jetty · 12.0.0 → 12.0.2 |
| envoyproxy | envoy |
| f5 | big-ip_access_policy_manager |
| f5 | big-ip_access_policy_manager · 13.1.0 → 13.1.5 |
| f5 | big-ip_access_policy_manager · 14.1.0 → 14.1.5 |
| f5 | big-ip_access_policy_manager · 15.1.0 → 15.1.10 |
| f5 | big-ip_access_policy_manager · 16.1.0 → 16.1.4 |
| f5 | big-ip_advanced_firewall_manager |
| f5 | big-ip_advanced_firewall_manager · 13.1.0 → 13.1.5 |
Analisi
Questa pagina non è ancora indicizzabile.Finché non contiene un’analisi originale — cosa espone davvero, come verificare in due minuti se un sistema è stato toccato, cosa fare se lo è stato — la pagina resta noindex. È il database a deciderlo, non il modello di pagina.