{
  "version": "https://jsonfeed.org/version/1.1",
  "title": "HTTP/2 Rapid Reset: record-breaking DDoS attacks (CVE-2023-44487) · updates",
  "home_page_url": "https://pwn.watch/i/http2-rapid-reset-ddos-cve-2023-44487",
  "feed_url": "https://pwn.watch/i/http2-rapid-reset-ddos-cve-2023-44487/feed.json",
  "description": "Attackers abused HTTP/2 stream cancellation (open a request, reset it right away, repeat) to make servers do work at enormous rates. Peaks hit 398M req/s at Google, 201M at Cloudflare and 155M at AWS. Almost every HTTP/2 server and proxy needed a fix, including Node.js, Go, Java servers, .NET/IIS and nginx.",
  "language": "en",
  "_pwn": {
    "slug": "http2-rapid-reset-ddos-cve-2023-44487",
    "severity": "high",
    "status": "closed",
    "patchStatus": "patched",
    "rss": "https://pwn.watch/i/http2-rapid-reset-ddos-cve-2023-44487/feed.xml",
    "llms": "https://pwn.watch/i/http2-rapid-reset-ddos-cve-2023-44487/llms.txt",
    "json": "https://pwn.watch/i/http2-rapid-reset-ddos-cve-2023-44487.json"
  },
  "items": [
    {
      "id": "https://pwn.watch/i/http2-rapid-reset-ddos-cve-2023-44487#2023-10-10-f350151a",
      "url": "https://pwn.watch/i/http2-rapid-reset-ddos-cve-2023-44487#2023-10-10-f350151a",
      "title": "HTTP/2 Rapid Reset: record-breaking DDoS attacks (CVE-2023-44487): Coordinated disclosure by Google, Cloudflare and AWS; CISA adds CVE-2023-44487 to KEV",
      "content_text": "HTTP/2 Rapid Reset: record-breaking DDoS attacks (CVE-2023-44487): Coordinated disclosure by Google, Cloudflare and AWS; CISA adds CVE-2023-44487 to KEV\n\nSource: https://cloud.google.com/blog/products/identity-security/how-it-works-the-novel-http2-rapid-reset-ddos-attack",
      "date_published": "2023-10-10T00:00:00.000Z",
      "external_url": "https://cloud.google.com/blog/products/identity-security/how-it-works-the-novel-http2-rapid-reset-ddos-attack",
      "tags": [
        "high"
      ]
    },
    {
      "id": "https://pwn.watch/i/http2-rapid-reset-ddos-cve-2023-44487#2023-08-25-92acc0e7",
      "url": "https://pwn.watch/i/http2-rapid-reset-ddos-cve-2023-44487#2023-08-25-92acc0e7",
      "title": "HTTP/2 Rapid Reset: record-breaking DDoS attacks (CVE-2023-44487): Cloudflare starts seeing unusually large HTTP/2 attacks",
      "content_text": "HTTP/2 Rapid Reset: record-breaking DDoS attacks (CVE-2023-44487): Cloudflare starts seeing unusually large HTTP/2 attacks\n\nSource: https://blog.cloudflare.com/technical-breakdown-http2-rapid-reset-ddos-attack/",
      "date_published": "2023-08-25T00:00:00.000Z",
      "external_url": "https://blog.cloudflare.com/technical-breakdown-http2-rapid-reset-ddos-attack/",
      "tags": [
        "high"
      ]
    }
  ]
}