CVE-2023-44487: - Rapid Reset HTTP/2 vulnerability
First published: Mon Oct 09 2023(Updated: )
## HTTP/2 Rapid reset attack The HTTP/2 protocol allows clients to indicate to the server that a previous stream should be canceled by sending a RST_STREAM frame. The protocol does not require the client and server to coordinate the cancellation in any way, the client may do it unilaterally. The client may also assume that the cancellation will take effect immediately when the server receives the RST_STREAM frame, before any other data from that TCP connection is processed. Abuse of this feature is called a Rapid Reset attack because it relies on the ability for an endpoint to send a RST_STREAM frame immediately after sending a request frame, which makes the other endpoint start working and then rapidly resets the request. The request is canceled, but leaves the HTTP/2 connection open. The HTTP/2 Rapid Reset attack built on this capability is simple: The client opens a large number of streams at once as in the standard HTTP/2 attack, but rather than waiting for a response to each request stream from the server or proxy, the client cancels each request immediately. The ability to reset streams immediately allows each connection to have an indefinite number of requests in flight. By explicitly canceling the requests, the attacker never exceeds the limit on the number of concurrent open streams. The number of in-flight requests is no longer dependent on the round-trip time (RTT), but only on the available network bandwidth. In a typical HTTP/2 server implementation, the server will still have to do significant amounts of work for canceled requests, such as allocating new stream data structures, parsing the query and doing header decompression, and mapping the URL to a resource. For reverse proxy implementations, the request may be proxied to the backend server before the RST_STREAM frame is processed. The client on the other hand paid almost no costs for sending the requests. This creates an exploitable cost asymmetry between the server and the client. Multiple software artifacts implementing HTTP/2 are affected. This advisory was originally ingested from the `swift-nio-http2` repo advisory and their original conent follows. ## swift-nio-http2 specific advisory swift-nio-http2 is vulnerable to a denial-of-service vulnerability in which a malicious client can create and then reset a large number of HTTP/2 streams in a short period of time. This causes swift-nio-http2 to commit to a large amount of expensive work which it then throws away, including creating entirely new `Channel`s to serve the traffic. This can easily overwhelm an `EventLoop` and prevent it from making forward progress. swift-nio-http2 1.28 contains a remediation for this issue that applies reset counter using a sliding window. This constrains the number of stream resets that may occur in a given window of time. Clients violating this limit will have their connections torn down. This allows clients to continue to cancel streams for legitimate reasons, while constraining malicious actors.
Credit: cve@mitre.org cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Microsoft Windows 11 | =21H2 | |
| Microsoft Windows 11 | =21H2 | |
| Microsoft Windows Server 2022 | ||
| Microsoft Windows Server 2022 | ||
| Microsoft Windows 11 | =22H2 | |
| Microsoft Windows 11 | =22H2 | |
| Microsoft Windows Server 2019 | ||
| Microsoft Windows Server 2019 | ||
| Microsoft Windows 10 | =21H2 | |
| Microsoft Windows 10 | =21H2 | |
| Microsoft Windows 10 | =21H2 | |
| Microsoft Windows 10 | =22H2 | |
| Microsoft Windows 10 | =1809 | |
| Microsoft Windows 10 | =1607 | |
| Microsoft Windows 10 | =1607 | |
| Microsoft Windows 10 | =1809 | |
| Microsoft Windows 10 | =22H2 | |
| Microsoft Windows 10 | =22H2 | |
| Microsoft Windows 10 | =1809 | |
| debian/netty | <=1:4.1.48-7<=1:4.1.48-4 | 1:4.1.48-8 1:4.1.48-4+deb11u2 1:4.1.48-7+deb12u1 |
| IETF HTTP/2 | ||
| Microsoft ASP.NET Core | =7.0 | |
| Microsoft .NET 6.0 | ||
| Microsoft ASP.NET Core | =6.0 | |
| Microsoft Visual Studio 2022 | =17.6 | |
| Microsoft Visual Studio 2022 | =17.2 | |
| Microsoft Visual Studio 2022 | =17.7 | |
| Microsoft ASP.NET Core | =2.0 | |
| Nghttp2 Nghttp2 | <1.57.0 | |
| Netty Netty | <4.1.100 | |
| Envoyproxy Envoy | =1.24.10 | |
| Envoyproxy Envoy | =1.25.9 | |
| Envoyproxy Envoy | =1.26.4 | |
| Envoyproxy Envoy | =1.27.0 | |
| Eclipse Jetty | <9.4.53 | |
| Eclipse Jetty | >=10.0.0<10.0.17 | |
| Eclipse Jetty | >=11.0.0<11.0.17 | |
| Eclipse Jetty | >=12.0.0<12.0.2 | |
| Microsoft ASP.NET Core | <2.7.5 | |
| Golang Go | <1.20.10 | |
| Golang Go | >=1.21.0<1.21.3 | |
| Golang Http2 | <0.17.0 | |
| Golang Networking | <0.17.0 | |
| F5 BIG-IP Access Policy Manager | >=13.1.0<=13.1.5 | |
| F5 BIG-IP Access Policy Manager | >=14.1.0<=14.1.5 | |
| F5 BIG-IP Access Policy Manager | >=15.1.0<=15.1.10 | |
| F5 BIG-IP Access Policy Manager | >=16.1.0<=16.1.4 | |
| F5 BIG-IP Access Policy Manager | =17.1.0 | |
| F5 BIG-IP Advanced Firewall Manager | >=13.1.0<=13.1.5 | |
| F5 BIG-IP Advanced Firewall Manager | >=14.1.0<=14.1.5 | |
| F5 BIG-IP Advanced Firewall Manager | >=15.1.0<=15.1.10 | |
| F5 BIG-IP Advanced Firewall Manager | >=16.1.0<=16.1.4 | |
| F5 BIG-IP Advanced Firewall Manager | =17.1.0 | |
| F5 Big-ip Advanced Web Application Firewall | >=13.1.0<=13.1.5 | |
| F5 Big-ip Advanced Web Application Firewall | >=14.1.0<=14.1.5 | |
| F5 Big-ip Advanced Web Application Firewall | >=15.1.0<=15.1.10 | |
| F5 Big-ip Advanced Web Application Firewall | >=16.1.0<=16.1.4 | |
| F5 Big-ip Advanced Web Application Firewall | =17.1.0 | |
| F5 BIG-IP Analytics | >=13.1.0<=13.1.5 | |
| F5 BIG-IP Analytics | >=14.1.0<=14.1.5 | |
| F5 BIG-IP Analytics | >=15.1.0<=15.1.10 | |
| F5 BIG-IP Analytics | >=16.1.0<=16.1.4 | |
| F5 BIG-IP Analytics | =17.1.0 | |
| F5 Big-ip Application Acceleration Manager | >=13.1.0<=13.1.5 | |
| F5 Big-ip Application Acceleration Manager | >=14.1.0<=14.1.5 | |
| F5 Big-ip Application Acceleration Manager | >=15.1.0<=15.1.10 | |
| F5 Big-ip Application Acceleration Manager | >=16.1.0<=16.1.4 | |
| F5 Big-ip Application Acceleration Manager | =17.1.0 | |
| F5 BIG-IP Application Security Manager | >=13.1.0<=13.1.5 | |
| F5 BIG-IP Application Security Manager | >=14.1.0<=14.1.5 | |
| F5 BIG-IP Application Security Manager | >=15.1.0<=15.1.10 | |
| F5 BIG-IP Application Security Manager | >=16.1.0<=16.1.4 | |
| F5 BIG-IP Application Security Manager | =17.1.0 | |
| F5 Big-ip Application Visibility And Reporting | >=13.1.0<=13.1.5 | |
| F5 Big-ip Application Visibility And Reporting | >=14.1.0<=14.1.5 | |
| F5 Big-ip Application Visibility And Reporting | >=15.1.0<=15.1.10 | |
| F5 Big-ip Application Visibility And Reporting | >=16.1.0<=16.1.4 | |
| F5 Big-ip Application Visibility And Reporting | =17.1.0 | |
| F5 Big-ip Carrier-grade Nat | >=13.1.0<=13.1.5 | |
| F5 Big-ip Carrier-grade Nat | >=14.1.0<=14.1.5 | |
| F5 Big-ip Carrier-grade Nat | >=15.1.0<=15.1.10 | |
| F5 Big-ip Carrier-grade Nat | >=16.1.0<=16.1.4 | |
| F5 Big-ip Carrier-grade Nat | =17.1.0 | |
| F5 Big-ip Ddos Hybrid Defender | >=13.1.0<=13.1.5 | |
| F5 Big-ip Ddos Hybrid Defender | >=14.1.0<=14.1.5 | |
| F5 Big-ip Ddos Hybrid Defender | >=15.1.0<=15.1.10 | |
| F5 Big-ip Ddos Hybrid Defender | >=16.1.0<=16.1.4 | |
| F5 Big-ip Ddos Hybrid Defender | =17.1.0 | |
| F5 Big-ip Domain Name System | >=13.1.0<=13.1.5 | |
| F5 Big-ip Domain Name System | >=14.1.0<=14.1.5 | |
| F5 Big-ip Domain Name System | >=15.1.0<=15.1.10 | |
| F5 Big-ip Domain Name System | >=16.1.0<=16.1.4 | |
| F5 Big-ip Domain Name System | =17.1.0 | |
| F5 Big-ip Fraud Protection Service | >=13.1.0<=13.1.5 | |
| F5 Big-ip Fraud Protection Service | >=14.1.0<=14.1.5 | |
| F5 Big-ip Fraud Protection Service | >=15.1.0<=15.1.10 | |
| F5 Big-ip Fraud Protection Service | >=16.1.0<=16.1.4 | |
| F5 Big-ip Fraud Protection Service | =17.1.0 | |
| F5 Big-ip Global Traffic Manager | >=13.1.0<=13.1.5 | |
| F5 Big-ip Global Traffic Manager | >=14.1.0<=14.1.5 | |
| F5 Big-ip Global Traffic Manager | >=15.1.0<=15.1.10 | |
| F5 Big-ip Global Traffic Manager | >=16.1.0<=16.1.4 | |
| F5 Big-ip Global Traffic Manager | =17.1.0 | |
| F5 Big-ip Link Controller | >=13.1.0<=13.1.5 | |
| F5 Big-ip Link Controller | >=14.1.0<=14.1.5 | |
| F5 Big-ip Link Controller | >=15.1.0<=15.1.10 | |
| F5 Big-ip Link Controller | >=16.1.0<=16.1.4 | |
| F5 Big-ip Link Controller | =17.1.0 | |
| F5 Big-ip Local Traffic Manager | >=13.1.0<=13.1.5 | |
| F5 Big-ip Local Traffic Manager | >=14.1.0<=14.1.5 | |
| F5 Big-ip Local Traffic Manager | >=15.1.0<=15.1.10 | |
| F5 Big-ip Local Traffic Manager | >=16.1.0<=16.1.4 | |
| F5 Big-ip Local Traffic Manager | =17.1.0 | |
| Microsoft .NET 7.0 | =20.0.1 | |
| F5 Big-ip Next Service Proxy For Kubernetes | >=1.5.0<=1.8.2 | |
| F5 Big-ip Policy Enforcement Manager | >=13.1.0<=13.1.5 | |
| F5 Big-ip Policy Enforcement Manager | >=14.1.0<=14.1.5 | |
| F5 Big-ip Policy Enforcement Manager | >=15.1.0<=15.1.10 | |
| F5 Big-ip Policy Enforcement Manager | >=16.1.0<=16.1.4 | |
| F5 Big-ip Policy Enforcement Manager | =17.1.0 | |
| F5 Big-ip Ssl Orchestrator | >=13.1.0<=13.1.5 | |
| F5 Big-ip Ssl Orchestrator | >=14.1.0<=14.1.5 | |
| F5 Big-ip Ssl Orchestrator | >=15.1.0<=15.1.10 | |
| F5 Big-ip Ssl Orchestrator | >=16.1.0<=16.1.4 | |
| F5 Big-ip Ssl Orchestrator | =17.1.0 | |
| F5 Big-ip Webaccelerator | >=13.1.0<=13.1.5 | |
| F5 Big-ip Webaccelerator | >=14.1.0<=14.1.5 | |
| F5 Big-ip Webaccelerator | >=15.1.0<=15.1.10 | |
| F5 Big-ip Webaccelerator | >=16.1.0<=16.1.4 | |
| F5 Big-ip Webaccelerator | =17.1.0 | |
| F5 Big-ip Websafe | >=13.1.0<=13.1.5 | |
| F5 Big-ip Websafe | >=14.1.0<=14.1.5 | |
| F5 Big-ip Websafe | >=15.1.0<=15.1.10 | |
| F5 Big-ip Websafe | >=16.1.0<=16.1.4 | |
| F5 Big-ip Websafe | =17.1.0 | |
| F5 Nginx | >=1.9.5<=1.25.2 | |
| Microsoft .NET 7.0 | >=2.0.0<=2.4.2 | |
| Microsoft .NET 7.0 | >=3.0.0<=3.3.0 | |
| Microsoft .NET 6.0 | >=r25<r29 | |
| Microsoft .NET 6.0 | =r29 | |
| Microsoft .NET 6.0 | =r30 | |
| Apache Tomcat | >=8.5.0<=8.5.93 | |
| Apache Tomcat | >=9.0.0<=9.0.80 | |
| Apache Tomcat | >=10.1.0<=10.1.13 | |
| Apache Tomcat | =11.0.0-milestone1 | |
| Apache Tomcat | =11.0.0-milestone10 | |
| Apache Tomcat | =11.0.0-milestone11 | |
| Apache Tomcat | =11.0.0-milestone2 | |
| Apache Tomcat | =11.0.0-milestone3 | |
| Apache Tomcat | =11.0.0-milestone4 | |
| Apache Tomcat | =11.0.0-milestone5 | |
| Apache Tomcat | =11.0.0-milestone6 | |
| Apache Tomcat | =11.0.0-milestone7 | |
| Apache Tomcat | =11.0.0-milestone8 | |
| Apache Tomcat | =11.0.0-milestone9 | |
| IETF HTTP/2 | <1.28.0 | |
| Microsoft .NET 6.0 | <1.56.3 | |
| Microsoft .NET 6.0 | >=1.58.0<1.58.3 | |
| Microsoft .NET 6.0 | =1.57.0 | |
| Microsoft .NET | >=6.0.0<6.0.23 | |
| Microsoft .NET | >=7.0.0<7.0.12 | |
| Microsoft ASP.NET Core | >=6.0.0<6.0.23 | |
| Microsoft ASP.NET Core | >=7.0.0<7.0.12 | |
| Microsoft Azure Kubernetes Service | <2023-10-08 | |
| Microsoft Visual Studio 2022 | >=17.0<17.2.20 | |
| Microsoft Visual Studio 2022 | >=17.4<17.4.12 | |
| Microsoft Visual Studio 2022 | >=17.6<17.6.8 | |
| Microsoft Visual Studio 2022 | >=17.7<17.7.5 | |
| Microsoft Windows Server 2016 | <10.0.14393.6351 | |
| Microsoft Windows Server 2016 | <10.0.14393.6351 | |
| Microsoft Windows Server 2016 | <10.0.17763.4974 | |
| Microsoft Windows Server 2019 | <10.0.19044.3570 | |
| Microsoft Windows 10 22h2 | <10.0.19045.3570 | |
| Microsoft Windows 11 21h2 | <10.0.22000.2538 | |
| Microsoft Windows 11 | <10.0.22621.2428 | |
| Microsoft Windows Server 2016 | ||
| Microsoft Windows Server 2019 | ||
| Microsoft Windows Server 2022 | ||
| Nodejs Node.js | <21.0.0 | |
| Microsoft Visual Studio 2022 | <2023-10-11 | |
| Microsoft Windows Server 2022 | <2023-10-10 | |
| Microsoft Windows Server 2022 | <2023.10.16.00 | |
| Apache APISIX | <3.6.1 | |
| Apache Traffic Server | >=8.0.0<8.1.9 | |
| Apache Traffic Server | >=9.0.0<9.2.3 | |
| Microsoft Windows Server 2019 | <2.5.0 | |
| Debian Debian Linux | =10.0 | |
| Debian Debian Linux | =11.0 | |
| Debian Debian Linux | =12.0 | |
| Microsoft Windows 11 | <4.2.2 | |
| Microsoft Windows Server 2022 | <1.17.6 | |
| Microsoft Windows Server 2022 | >=1.18.0<1.18.3 | |
| Microsoft Windows Server 2022 | >=1.19.0<1.19.1 | |
| Microsoft .NET 6.0 | <2023-10-10 | |
| Microsoft Visual Studio 2022 | <2.10.5 | |
| Microsoft Visual Studio 2022 | =3.0.0-beta1 | |
| Microsoft Visual Studio 2022 | =3.0.0-beta2 | |
| Microsoft Visual Studio 2022 | =3.0.0-beta3 | |
| Microsoft .NET 7.0 | <2023-10-11 | |
| Microsoft Visual Studio 2022 | >=2.12.0<=2.12.5 | |
| Microsoft Visual Studio 2022 | =2.13.0 | |
| Microsoft Visual Studio 2022 | =2.13.1 | |
| Microsoft Visual Studio 2022 | =2.14.0 | |
| Microsoft Visual Studio 2022 | =2.14.1 | |
| Linecorp Armeria | <1.26.0 | |
| Microsoft Windows Server 2022 | =2.0 | |
| Redhat Advanced Cluster Management For Kubernetes | =2.0 | |
| Redhat Advanced Cluster Security | =3.0 | |
| Redhat Advanced Cluster Security | =4.0 | |
| Redhat Ansible Automation Platform | =2.0 | |
| Redhat Build Of Optaplanner | =8.0 | |
| Redhat Build Of Quarkus | ||
| Microsoft Windows Server 2022 | =5.0 | |
| Microsoft Windows Server 2016 | ||
| Microsoft Windows Server 2016 | =8.0 | |
| Microsoft Windows Server 2016 | =9.0 | |
| Microsoft Visual Studio 2022 | ||
| Microsoft .NET 6.0 | =2.0 | |
| Redhat Decision Manager | =7.0 | |
| IETF HTTP/2 | ||
| Microsoft Windows 11 | ||
| Redhat Integration Camel K | ||
| Redhat Integration Service Registry | ||
| Redhat Jboss A-mq | =7 | |
| Microsoft Windows Server 2016 | ||
| Microsoft .NET 7.0 | ||
| Redhat Jboss Data Grid | =7.0.0 | |
| Redhat Jboss Enterprise Application Platform | =6.0.0 | |
| Redhat Jboss Enterprise Application Platform | =7.0.0 | |
| Redhat Jboss Fuse | =6.0.0 | |
| Redhat Jboss Fuse | =7.0.0 | |
| Microsoft .NET 7.0 | ||
| Microsoft Visual Studio 2022 | ||
| Microsoft ASP.NET Core | =6.0 | |
| Microsoft Windows Server 2022 | ||
| IETF HTTP/2 | ||
| Microsoft Windows Server 2022 | ||
| Microsoft Windows Server 2019 | ||
| IETF HTTP/2 | ||
| Microsoft Windows Server 2022 | ||
| IETF HTTP/2 | ||
| Redhat Openshift Container Platform | =4.0 | |
| Microsoft Windows Server 2019 | ||
| Redhat Openshift Data Science | ||
| Microsoft Windows Server 2022 | ||
| Microsoft Windows Server 2022 | ||
| Microsoft ASP.NET Core | ||
| IETF HTTP/2 | ||
| Microsoft .NET 7.0 | ||
| Microsoft Windows 11 | ||
| Microsoft .NET 7.0 | ||
| Redhat Openshift Serverless | ||
| Redhat Openshift Service Mesh | =2.0 | |
| Microsoft Windows 11 | =4 | |
| Redhat Openstack Platform | =16.1 | |
| Redhat Openstack Platform | =16.2 | |
| Redhat Openstack Platform | =17.1 | |
| Redhat Process Automation | =7.0 | |
| Redhat Quay | =3.0.0 | |
| Microsoft Windows 10 | ||
| Redhat Satellite | =6.0 | |
| Microsoft Windows Server 2016 | ||
| Microsoft Windows Server 2016 | =1.0 | |
| Redhat Single Sign-on | =7.0 | |
| Microsoft Windows Server 2016 | ||
| Microsoft .NET 6.0 | ||
| Redhat Enterprise Linux | =6.0 | |
| Redhat Enterprise Linux | =8.0 | |
| Redhat Enterprise Linux | =9.0 | |
| Microsoft Windows 10 | =1.5 | |
| Redhat Enterprise Linux | =8.0 | |
| Fedoraproject Fedora | =38 | |
| Microsoft Windows Server 2019 | ||
| Microsoft Windows 11 | <10.5.3 | |
| Microsoft ASP.NET Core | <3.4.2 | |
| Microsoft .NET 7.0 | ||
| Microsoft Windows Server 2016 | ||
| Microsoft Windows Server 2016 | ||
| Grpc Grpc | <=1.59.2 | |
| Nodejs Node.js | >=18.0.0<18.18.2 | |
| Nodejs Node.js | >=20.0.0<20.8.1 | |
| Microsoft .NET 6.0 | >=2.12.0<=2.12.5 | |
| Microsoft .NET 6.0 | =2.13.0 | |
| Microsoft .NET 6.0 | =2.13.1 | |
| Microsoft .NET 6.0 | =2.14.0 | |
| Microsoft .NET 6.0 | =2.14.1 | |
| All of | ||
| Microsoft Windows 10 | =1.5 | |
| Redhat Enterprise Linux | =8.0 | |
| Fedoraproject Fedora | =37 | |
| Jenkins Jenkins | <=2.414.2 | |
| Jenkins Jenkins | <=2.427 | |
| Apache Solr | <9.4.0 | |
| Openresty Openresty | <1.21.4.3 | |
| Cisco Connected Mobile Experiences | <11.1 | |
| Apple Xcode | <4.1.3 | |
| Apple Xcode | =5.0 | |
| Apache Log4j2 | <6.0.0 | |
| Cisco Data Center Network Manager | ||
| Cisco Enterprise Chat and Email | ||
| Cisco Expressway | <x14.3.3 | |
| Cisco Firepower Threat Defense | <7.4.2 | |
| Cisco IoT Field Network Director | <4.11.0 | |
| Cisco Prime Access Registrar | <9.3.3 | |
| Microsoft Windows Server 2016 | <7.2.1 | |
| Cisco Prime Infrastructure | <3.10.4 | |
| Cisco Prime Network Registrar | <11.2 | |
| Microsoft Windows Server 2016 | <2.2.0 | |
| Microsoft Windows Server 2016 | <2.19.2 | |
| Cisco TelePresence Video Communication Server | <x14.3.3 | |
| Microsoft Windows Server 2016 | <2024.01.0 | |
| Microsoft Windows Server 2016 | =2024.01.0 | |
| Microsoft Windows Server 2016 | <2024.02.0 | |
| Microsoft Windows Server 2016 | <2024.02.0 | |
| Microsoft Windows Server 2016 | ||
| Microsoft Windows Server 2016 | ||
| Cisco Unified Contact Center Enterprise | ||
| Microsoft Windows Server 2016 | <12.6.2 | |
| Cisco Unified Contact Center Management Portal | ||
| Cisco Fog Director | <1.22 | |
| Cisco IOS XE | <17.15.1 | |
| Cisco IOS XR | <7.11.2 | |
| All of | ||
| Microsoft Windows Server 2016 | <15.1.0 | |
| Cisco Secure Web Appliance | ||
| All of | ||
| Any of | ||
| Cisco Nx-os | <10.2\(7\) | |
| Cisco Nx-os | >=10.3\(1\)<10.3\(5\) | |
| Any of | ||
| Cisco Nexus 3016 | ||
| Cisco Nexus 3016q | ||
| Cisco Nexus 3048 | ||
| Cisco Nexus 3064 | ||
| Cisco Nexus 3064-32t | ||
| Cisco Nexus 3064-t | ||
| Cisco Nexus 3064-x | ||
| Cisco Nexus 3064t | ||
| Cisco Nexus 3064x | ||
| Cisco Nexus 3100 | ||
| Cisco Nexus 3100-v | ||
| Cisco Nexus 3100-z | ||
| Cisco Nexus 3100v | ||
| Cisco Nexus 31108pc-v | ||
| Cisco Nexus 31108pv-v | ||
| Cisco Nexus 31108tc-v | ||
| Cisco Nexus 31128pq | ||
| Cisco Nexus 3132c-z | ||
| Cisco Nexus 3132q | ||
| Cisco Nexus 3132q-v | ||
| Cisco Nexus 3132q-x | ||
| Cisco Nexus 3132q-x\/3132q-xl | ||
| Cisco Nexus 3132q-xl | ||
| Cisco Nexus 3164q | ||
| Cisco Nexus 3172 | ||
| Cisco Nexus 3172pq | ||
| Cisco Nexus 3172pq-xl | ||
| Cisco Nexus 3172pq\/pq-xl | ||
| Cisco Nexus 3172tq | ||
| Cisco Nexus 3172tq-32t | ||
| Cisco Nexus 3172tq-xl | ||
| Cisco Nexus 3200 | ||
| Cisco Nexus 3232 | ||
| Cisco Nexus 3232c | ||
| Cisco Nexus 3232c | ||
| Cisco Nexus 3264c-e | ||
| Cisco Nexus 3264q | ||
| Cisco Nexus 3400 | ||
| Cisco Nexus 3408-s | ||
| Cisco Nexus 34180yc | ||
| Cisco Nexus 34200yc-sm | ||
| Cisco Nexus 3432d-s | ||
| Cisco Nexus 3464c | ||
| Cisco Nexus 3500 | ||
| Cisco Nexus 3524 | ||
| Cisco Nexus 3524-x | ||
| Cisco Nexus 3524-x\/xl | ||
| Cisco Nexus 3524-xl | ||
| Cisco Nexus 3548 | ||
| Cisco Nexus 3548-x | ||
| Cisco Nexus 3548-x\/xl | ||
| Cisco Nexus 3548-xl | ||
| Cisco Nexus 3600 | ||
| Cisco Nexus 36180yc-r | ||
| Cisco Nexus 3636c-r | ||
| All of | ||
| Any of | ||
| Cisco Nx-os | <10.2\(7\) | |
| Cisco Nx-os | >=10.3\(1\)<10.3\(5\) | |
| Any of | ||
| Cisco Nexus 9000v | ||
| Cisco Nexus 9200 | ||
| Cisco Nexus 9200yc | ||
| Cisco Nexus 92160yc-x | ||
| Cisco Nexus 92160yc Switch | ||
| Cisco Nexus 9221c | ||
| Cisco Nexus 92300yc | ||
| Cisco Nexus 92300yc Switch | ||
| Cisco Nexus 92304qc | ||
| Cisco Nexus 92304qc Switch | ||
| Cisco Nexus 9232e | ||
| Cisco Nexus 92348gc-x | ||
| Cisco Nexus 9236c | ||
| Cisco Nexus 9236c Switch | ||
| Cisco Nexus 9272q | ||
| Cisco Nexus 9272q Switch | ||
| Cisco Nexus 9300 | ||
| Cisco Nexus 93108tc-ex | ||
| Cisco Nexus 93108tc-ex-24 | ||
| Cisco Nexus 93108tc-ex Switch | ||
| Cisco Nexus 93108tc-fx | ||
| Cisco Nexus 93108tc-fx-24 | ||
| Cisco Nexus 93108tc-fx3h | ||
| Cisco Nexus 93108tc-fx3p | ||
| Cisco Nexus 93120tx | ||
| Cisco Nexus 93120tx Switch | ||
| Cisco Nexus 93128 | ||
| Cisco Nexus 93128tx | ||
| Cisco Nexus 93128tx Switch | ||
| Cisco Nexus 9316d-gx | ||
| Cisco Nexus 93180lc-ex | ||
| Cisco Nexus 93180lc-ex Switch | ||
| Cisco Nexus 93180tc-ex | ||
| Cisco Nexus 93180yc-ex | ||
| Cisco Nexus 93180yc-ex-24 | ||
| Cisco Nexus 93180yc-ex Switch | ||
| Cisco Nexus 93180yc-fx | ||
| Cisco Nexus 93180yc-fx-24 | ||
| Cisco Nexus 93180yc-fx3 | ||
| Cisco Nexus 93180yc-fx3h | ||
| Cisco Nexus 93180yc-fx3s | ||
| Cisco Nexus 93216tc-fx2 | ||
| Cisco Nexus 93240tc-fx2 | ||
| Cisco Nexus 93240yc-fx2 | ||
| Cisco Nexus 9332c | ||
| Cisco Nexus 9332d-gx2b | ||
| Cisco Nexus 9332d-h2r | ||
| Cisco Nexus 9332pq | ||
| Cisco Nexus 9332pq Switch | ||
| Cisco Nexus 93360yc-fx2 | ||
| Cisco Nexus 9336c-fx2 | ||
| Cisco Nexus 9336c-fx2-e | ||
| Cisco Nexus 9336pq | ||
| Cisco Nexus 9336pq Aci | ||
| Cisco Nexus 9336pq Aci Spine | ||
| Cisco Nexus 9336pq Aci Spine Switch | ||
| Cisco Nexus 9348d-gx2a | ||
| Cisco Nexus 9348gc-fx3 | ||
| Cisco Nexus 9348gc-fxp | ||
| Cisco Nexus 93600cd-gx | ||
| Cisco Nexus 9364c | ||
| Cisco Nexus 9364c-gx | ||
| Cisco Nexus 9364d-gx2a | ||
| Cisco Nexus 9372px | ||
| Cisco Nexus 9372px-e | ||
| Cisco Nexus 9372px-e Switch | ||
| Cisco Nexus 9372px Switch | ||
| Cisco Nexus 9372tx | ||
| Cisco Nexus 9372tx-e | ||
| Cisco Nexus 9372tx-e Switch | ||
| Cisco Nexus 9372tx Switch | ||
| Cisco Nexus 9396px | ||
| Cisco Nexus 9396px Switch | ||
| Cisco Nexus 9396tx | ||
| Cisco Nexus 9396tx Switch | ||
| Cisco Nexus 9408 | ||
| Cisco Nexus 9432pq | ||
| Cisco Nexus 9500 | ||
| Cisco Nexus 9500 16-slot | ||
| Cisco Nexus 9500 4-slot | ||
| Cisco Nexus 9500 8-slot | ||
| Cisco Nexus 9500 Supervisor A | ||
| Cisco Nexus 9500 Supervisor A\+ | ||
| Cisco Nexus 9500 Supervisor B | ||
| Cisco Nexus 9500 Supervisor B\+ | ||
| Cisco Nexus 9500r | ||
| Cisco Nexus 9504 | ||
| Cisco Nexus 9504 Switch | ||
| Cisco Nexus 9508 | ||
| Cisco Nexus 9508 Switch | ||
| Cisco Nexus 9516 | ||
| Cisco Nexus 9516 Switch | ||
| Cisco Nexus 9536pq | ||
| Cisco Nexus 9636pq | ||
| Cisco Nexus 9716d-gx | ||
| Cisco Nexus 9736pq | ||
| Cisco Nexus 9800 | ||
| Cisco Nexus 9804 | ||
| Cisco Nexus 9808 | ||
| IBM Secure Proxy | <=6.0.3 | |
| IBM Secure Proxy | <=6.1.0 | |
| maven/com.typesafe.akka:akka-http-core_2.11 | <=10.1.15 | |
| maven/com.typesafe.akka:akka-http-core_2.12 | <10.5.3 | 10.5.3 |
| maven/com.typesafe.akka:akka-http-core_2.13 | <10.5.3 | 10.5.3 |
| maven/com.typesafe.akka:akka-http-core | <10.5.3 | 10.5.3 |
| maven/org.eclipse.jetty.http2:jetty-http2-server | >=12.0.0<12.0.2 | 12.0.2 |
| maven/org.eclipse.jetty.http2:jetty-http2-common | >=12.0.0<12.0.2 | 12.0.2 |
| maven/org.eclipse.jetty.http2:http2-server | >=11.0.0<11.0.17 | 11.0.17 |
| maven/org.eclipse.jetty.http2:http2-server | >=10.0.0<10.0.17 | 10.0.17 |
| maven/org.eclipse.jetty.http2:http2-server | >=9.3.0<9.4.53 | 9.4.53 |
| maven/org.eclipse.jetty.http2:http2-common | >=11.0.0<11.0.17 | 11.0.17 |
| maven/org.eclipse.jetty.http2:http2-common | >=10.0.0<10.0.17 | 10.0.17 |
| maven/org.eclipse.jetty.http2:http2-common | >=9.3.0<9.4.53 | 9.4.53 |
| swift/github.com/apple/swift-nio-http2 | <1.28.0 | 1.28.0 |
| maven/org.apache.tomcat.embed:tomcat-embed-core | >=8.5.0<8.5.94 | 8.5.94 |
| maven/org.apache.tomcat.embed:tomcat-embed-core | >=9.0.0<9.0.81 | 9.0.81 |
| maven/org.apache.tomcat.embed:tomcat-embed-core | >=10.0.0<10.1.14 | 10.1.14 |
| maven/org.apache.tomcat.embed:tomcat-embed-core | >=11.0.0-M1<11.0.0-M12 | 11.0.0-M12 |
| maven/org.apache.tomcat:tomcat | >=8.5.0<8.5.94 | 8.5.94 |
| maven/org.apache.tomcat:tomcat | >=9.0.0<9.0.81 | 9.0.81 |
| maven/org.apache.tomcat:tomcat | >=10.0.0<10.1.14 | 10.1.14 |
| maven/org.apache.tomcat:tomcat | >=11.0.0-M1<11.0.0-M12 | 11.0.0-M12 |
| go/google.golang.org/grpc | <1.56.3 | 1.56.3 |
| go/google.golang.org/grpc | >=1.57.0<1.57.1 | 1.57.1 |
| go/google.golang.org/grpc | >=1.58.0<1.58.3 | 1.58.3 |
| go/golang.org/x/net | <0.17.0 | 0.17.0 |
| redhat/golang | <1.21.3 | 1.21.3 |
| redhat/golang | <1.20.10 | 1.20.10 |
| redhat/tomcat | <11.0.0 | 11.0.0 |
| redhat/tomcat | <10.1.14 | 10.1.14 |
| redhat/tomcat | <9.0.81 | 9.0.81 |
| redhat/tomcat | <8.5.94 | 8.5.94 |
| redhat/nghttp2 | <1.57.0 | 1.57.0 |
| redhat/netty | <4.1.100. | 4.1.100. |
| ubuntu/dotnet6 | <6.0.123-0ubuntu1~22.04.1 | 6.0.123-0ubuntu1~22.04.1 |
| ubuntu/dotnet6 | <6.0.123-0ubuntu1~23.04.1 | 6.0.123-0ubuntu1~23.04.1 |
| ubuntu/dotnet6 | <6.0.123-0ubuntu1 | 6.0.123-0ubuntu1 |
| ubuntu/dotnet6 | <6.0.23 | 6.0.23 |
| ubuntu/dotnet7 | <7.0.112-0ubuntu1~22.04.1 | 7.0.112-0ubuntu1~22.04.1 |
| ubuntu/dotnet7 | <7.0.112-0ubuntu1~23.04.1 | 7.0.112-0ubuntu1~23.04.1 |
| ubuntu/dotnet7 | <7.0.112-0ubuntu1 | 7.0.112-0ubuntu1 |
| ubuntu/dotnet7 | <7.0.12 | 7.0.12 |
| ubuntu/dotnet8 | <8.0.100-8.0.0~ | 8.0.100-8.0.0~ |
| ubuntu/dotnet8 | <8.0.0- | 8.0.0- |
| ubuntu/golang-1.20 | <1.20.3-1ubuntu0.1~20.04.1 | 1.20.3-1ubuntu0.1~20.04.1 |
| ubuntu/golang-1.20 | <1.20.3-1ubuntu0.1~22.04.1 | 1.20.3-1ubuntu0.1~22.04.1 |
| ubuntu/golang-1.20 | <1.20.3-1ubuntu0.2 | 1.20.3-1ubuntu0.2 |
| ubuntu/golang-1.20 | <1.20.8-1ubuntu0.23.10.1 | 1.20.8-1ubuntu0.23.10.1 |
| ubuntu/golang-1.21 | <1.21.1-1~ubuntu20.04.2 | 1.21.1-1~ubuntu20.04.2 |
| ubuntu/golang-1.21 | <1.21.1-1~ubuntu22.04.2 | 1.21.1-1~ubuntu22.04.2 |
| ubuntu/golang-1.21 | <1.21.1-1~ubuntu23.04.2 | 1.21.1-1~ubuntu23.04.2 |
| ubuntu/golang-1.21 | <1.21.1-1ubuntu0.23.10.1 | 1.21.1-1ubuntu0.23.10.1 |
| ubuntu/nghttp2 | <1.40.0-1ubuntu0.2 | 1.40.0-1ubuntu0.2 |
| ubuntu/nghttp2 | <1.43.0-1ubuntu0.1 | 1.43.0-1ubuntu0.1 |
| ubuntu/nghttp2 | <1.52.0-1ubuntu0.1 | 1.52.0-1ubuntu0.1 |
| ubuntu/nghttp2 | <1.55.1-1ubuntu0.1 | 1.55.1-1ubuntu0.1 |
| ubuntu/tomcat10 | <10.1.14 | 10.1.14 |
| ubuntu/tomcat8 | <8.5.94 | 8.5.94 |
| ubuntu/tomcat9 | <9.0.81 | 9.0.81 |
| Fortinet FortiOS | >=7.4.0<=7.4.1 | |
| Fortinet FortiOS | >=7.2.0<=7.2.6 | |
| Fortinet FortiOS | >=7.0.0<=7.0.13 | |
| Fortinet FortiProxy | >=7.4.0<=7.4.1 | |
| Fortinet FortiProxy | >=7.2.0<=7.2.7 | |
| Fortinet FortiProxy | >=7.0 | |
| debian/dnsdist | <=1.5.1-3<=1.7.3-2 | 1.3.3-3 1.8.3-2 1.9.3-1 |
| debian/grpc | <=1.16.1-1<=1.30.2-3<=1.51.1-3<=1.51.1-4<=1.51.1-4.1 | |
| debian/h2o | <=2.2.5+dfsg2-2+deb10u1<=2.2.5+dfsg2-6<=2.2.5+dfsg2-7 | 2.2.5+dfsg2-2+deb10u2 2.2.5+dfsg2-8 2.2.5+dfsg2-8.1 |
| debian/haproxy | 1.8.19-1+deb10u3 1.8.19-1+deb10u5 2.2.9-2+deb11u6 2.6.12-1+deb12u1 2.9.5-1 2.9.7-1 | |
| debian/jetty9 | <=9.4.16-0+deb10u1 | 9.4.50-4+deb10u2 9.4.50-4+deb11u1 9.4.50-4+deb11u2 9.4.50-4+deb12u2 9.4.50-4+deb12u3 9.4.54-1 |
| debian/netty | <=1:4.1.33-1+deb10u2 | 1:4.1.33-1+deb10u4 1:4.1.48-4+deb11u2 1:4.1.48-7+deb12u1 1:4.1.48-9 |
| debian/nghttp2 | <=1.36.0-2+deb10u1 | 1.36.0-2+deb10u2 1.43.0-1+deb11u1 1.52.0-1+deb12u1 1.59.0-1 1.61.0-1 |
| debian/nginx | <=1.14.2-2+deb10u4<=1.14.2-2+deb10u5<=1.18.0-6.1+deb11u3<=1.22.1-9 | 1.24.0-2 |
| debian/tomcat10 | 10.1.6-1+deb12u1 10.1.6-1+deb12u2 10.1.23-1 | |
| debian/tomcat9 | <=9.0.31-1~deb10u6 | 9.0.31-1~deb10u12 9.0.43-2~deb11u9 9.0.43-2~deb11u10 9.0.70-2 |
| debian/trafficserver | <=8.0.2+ds-1+deb10u6 | 8.1.7-0+deb10u3 8.1.9+ds-1~deb11u1 8.1.10+ds-1~deb11u1 9.2.3+ds-1+deb12u1 9.2.4+ds-0+deb12u1 9.2.4+ds-2 |
| debian/varnish | <=6.1.1-1+deb10u3<=6.1.1-1+deb10u4<=6.5.1-1+deb11u3<=7.1.1-1.1<=7.1.1-1.2 |
Remedy
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Remedy
https://mailman.nginx.org/pipermail/nginx-devel/2023-October/S36Q5HBXR7CAIMPLLPRSSSYR4PCMWILK.html
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-44487 (Advisory)
- https://security-tracker.debian.org/tracker/CVE-2023-44487
- https://www.cve.org/CVERecord?id=CVE-2023-44487
- https://github.com/netty/netty/security/advisories/GHSA-xpw8-rcwv-8f8p
- https://github.com/netty/netty/commit/58f75f665aa81a8cbcf6ffa74820042a285c5e61
- https://salsa.debian.org/java-team/netty/-/commit/538e85cc9d5a9ff26afcab6d242db4df18a57ce3
- https://security-tracker.debian.org/tracker/CVE-2023-34462
- https://bugs.debian.org/1054234
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1054234
- https://www.debian.org/security/2023/dsa-5521
- https://www.debian.org/security/2023/dsa-5522
- https://blog.qualys.com/vulnerabilities-threat-research/2023/10/10/cve-2023-44487-http-2-rapid-reset-attack
- https://github.com/advisories/GHSA-xpw8-rcwv-8f8p
- https://github.com/apache/httpd/blob/afcdbeebbff4b0c50ea26cdd16e178c0d1f24152/modules/http2/h2_mplx.c#L1101-L1113
- https://github.com/dotnet/core/blob/e4613450ea0da7fd2fc6b61dfb2c1c1dec1ce9ec/release-notes/6.0/6.0.23/6.0.23.md?plain=1#L73
- https://github.com/kazu-yamamoto/http2/commit/f61d41a502bd0f60eb24e1ce14edc7b6df6722a1
- https://github.com/kazu-yamamoto/http2/issues/93
- https://github.com/kubernetes/kubernetes/pull/121120
- https://github.com/opensearch-project/data-prepper/issues/3474
- https://github.com/oqtane/oqtane.framework/discussions/3367
- https://lists.apache.org/thread/5py8h42mxfsn8l1wy6o41xwhsjlsd87q
- https://martinthomson.github.io/h2-stream-limits/draft-thomson-httpbis-h2-stream-limits.html
- https://netty.io/news/2023/10/10/4-1-100-Final.html
- https://news.ycombinator.com/item?id=37837043
- https://seanmonstar.com/post/730794151136935936/hyper-http2-rapid-reset-unaffected
- https://tomcat.apache.org/security-10.html#Fixed_in_Apache_Tomcat_10.1.14
- https://www.cisa.gov/news-events/alerts/2023/10/10/http2-rapid-reset-vulnerability-cve-2023-44487
- https://www.haproxy.com/blog/haproxy-is-not-affected-by-the-http-2-rapid-reset-attack-cve-2023-44487
- https://www.openwall.com/lists/oss-security/2023/10/10/6
- https://www.theregister.com/2023/10/10/http2_rapid_reset_zeroday/
- https://aws.amazon.com/security/security-bulletins/AWS-2023-011/
- https://blog.cloudflare.com/technical-breakdown-http2-rapid-reset-ddos-attack/
- https://blog.cloudflare.com/zero-day-rapid-reset-http2-record-breaking-ddos-attack/
- https://bugzilla.proxmox.com/show_bug.cgi?id=4988
- https://cgit.freebsd.org/ports/commit/?id=c64c329c2c1752f46b73e3e6ce9f4329be6629f9
- https://cloud.google.com/blog/products/identity-security/google-cloud-mitigated-largest-ddos-attack-peaking-above-398-million-rps/
- https://cloud.google.com/blog/products/identity-security/how-it-works-the-novel-http2-rapid-reset-ddos-attack
- https://edg.io/lp/blog/resets-leaks-ddos-and-the-tale-of-a-hidden-cve
- https://forums.swift.org/t/swift-nio-http2-security-update-cve-2023-44487-http-2-dos/67764
- https://gist.github.com/adulau/7c2bfb8e9cdbe4b35a5e131c66a0c088
- https://github.com/advisories/GHSA-vx74-f528-fxqg
- https://github.com/alibaba/tengine/issues/1872
- https://github.com/apache/tomcat/tree/main/java/org/apache/coyote/http2
- https://github.com/apache/trafficserver/pull/10564
- https://github.com/bcdannyboy/CVE-2023-44487
- https://github.com/caddyserver/caddy/issues/5877
- https://github.com/dotnet/announcements/issues/277
- https://github.com/eclipse/jetty.project/issues/10679
- https://github.com/envoyproxy/envoy/pull/30055
- https://github.com/facebook/proxygen/pull/466
- https://github.com/golang/go/issues/63417
- https://github.com/grpc/grpc-go/pull/6703
- https://github.com/h2o/h2o/pull/3291
- https://github.com/h2o/h2o/security/advisories/GHSA-2m7v-gc89-fjqf
- https://github.com/haproxy/haproxy/issues/2312
- https://github.com/icing/mod_h2/blob/0a864782af0a942aa2ad4ed960a6b32cd35bcf0a/mod_http2/README.md?plain=1#L239-L244
- https://github.com/micrictor/http2-rst-stream
- https://github.com/microsoft/CBL-Mariner/pull/6381
- https://github.com/nghttp2/nghttp2/pull/1961
- https://github.com/nghttp2/nghttp2/releases/tag/v1.57.0
- https://github.com/nodejs/node/pull/50121
- https://groups.google.com/g/golang-announce/c/iNNxDTCjZvo
- https://mailman.nginx.org/pipermail/nginx-devel/2023-October/S36Q5HBXR7CAIMPLLPRSSSYR4PCMWILK.html
- https://msrc.microsoft.com/blog/2023/10/microsoft-response-to-distributed-denial-of-service-ddos-attacks-against-http/2/
- https://my.f5.com/manage/s/article/K000137106
- https://news.ycombinator.com/item?id=37830987
- https://news.ycombinator.com/item?id=37830998
- https://news.ycombinator.com/item?id=37831062
- https://openssf.org/blog/2023/10/10/http-2-rapid-reset-vulnerability-highlights-need-for-rapid-response/
- https://www.bleepingcomputer.com/news/security/new-http-2-rapid-reset-zero-day-attack-breaks-ddos-records/
- https://www.nginx.com/blog/http-2-rapid-reset-attack-impacting-f5-nginx-products/
- https://www.phoronix.com/news/HTTP2-Rapid-Reset-Attack
- https://access.redhat.com/security/cve/cve-2023-44487
- https://blog.litespeedtech.com/2023/10/11/rapid-reset-http-2-vulnerablilty/
- https://blog.vespa.ai/cve-2023-44487/
- https://bugzilla.redhat.com/show_bug.cgi?id=2242803
- https://bugzilla.suse.com/show_bug.cgi?id=1216123
- https://community.traefik.io/t/is-traefik-vulnerable-to-cve-2023-44487/20125
- https://github.com/advisories/GHSA-qppj-fm5r-hxr3 (Advisory)
- https://github.com/apache/httpd-site/pull/10
- https://github.com/etcd-io/etcd/issues/16740
- https://github.com/junkurihara/rust-rpxy/issues/97
- https://github.com/line/armeria/pull/5232
- https://github.com/linkerd/website/pull/1695/commits/4b9c6836471bc8270ab48aae6fd2181bc73fd632
- https://github.com/ninenines/cowboy/issues/1615
- https://github.com/projectcontour/contour/pull/5826
- https://github.com/tempesta-tech/tempesta/issues/1986
- https://github.com/varnishcache/varnish-cache/issues/3996
- https://istio.io/latest/news/security/istio-security-2023-004/
- https://ubuntu.com/security/CVE-2023-44487
- https://www.darkreading.com/cloud/internet-wide-zero-day-bug-fuels-largest-ever-ddos-event
- https://github.com/Azure/AKS/issues/3947
- https://github.com/Kong/kong/discussions/11741
- https://github.com/akka/akka-http/issues/4323
- https://github.com/apache/apisix/issues/10320
- https://github.com/arkrwn/PoC/tree/main/CVE-2023-44487
- https://github.com/caddyserver/caddy/releases/tag/v2.7.5
- https://github.com/openresty/openresty/issues/930
- https://security.paloaltonetworks.com/CVE-2023-44487
- https://www.netlify.com/blog/netlify-successfully-mitigates-cve-2023-44487/
- https://arstechnica.com/security/2023/10/how-ddosers-used-the-http-2-protocol-to-deliver-attacks-of-unprecedented-size/
- https://lists.w3.org/Archives/Public/ietf-http-wg/2023OctDec/0025.html
- https://lists.debian.org/debian-lts-announce/2023/10/msg00020.html
- http://www.openwall.com/lists/oss-security/2023/10/13/4
- http://www.openwall.com/lists/oss-security/2023/10/13/9
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JMEXY22BFG5Q64HQCM5CK2Q7KDKVV4TY/
- https://linkerd.io/2023/10/12/linkerd-cve-2023-44487/
- https://security.netapp.com/advisory/ntap-20231016-0001/
- https://lists.debian.org/debian-lts-announce/2023/10/msg00024.html
- https://lists.debian.org/debian-lts-announce/2023/10/msg00023.html
- http://www.openwall.com/lists/oss-security/2023/10/18/8
- http://www.openwall.com/lists/oss-security/2023/10/18/4
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZKQSIKIAT5TJ3WSLU3RDBQ35YX4GY4V3/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JIZSEFC3YKCGABA2BZW6ZJRMDZJMB7PJ/
- http://www.openwall.com/lists/oss-security/2023/10/19/6
- http://www.openwall.com/lists/oss-security/2023/10/20/8
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BFQD3KUEMFBHPAPBGLWQC34L4OWL5HAZ/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WLPRQ5TWUQQXYWBJM7ECYDAIL2YVKIUH/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZLU6U2R2IC2K64NDPNMV55AUAO65MAF4/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/E72T67UPDRXHIDLO3OROR25YAMN4GGW5/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FNA62Q767CFAFHBCDKYNPBMZWB7TWYVU/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/X6QXN4ORIVF6XBW4WWFE7VNPVC74S45Y/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LKYHSZQFDNR7RSA7LHVLLIAQMVYCUGBG/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LNMZJCDHGLJJLXO4OXWJMTVQRNWOC7UL/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CLB4TW7KALB3EEQWNWCN7OUIWWVWWCG2/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KSEGD2IWKNUO3DWY4KQGUQM5BISRWHQE/
- https://www.debian.org/security/2023/dsa-5540
- https://lists.debian.org/debian-lts-announce/2023/10/msg00045.html
- https://lists.debian.org/debian-lts-announce/2023/10/msg00047.html
- https://discuss.hashicorp.com/t/hcsec-2023-32-vault-consul-and-boundary-affected-by-http-2-rapid-reset-denial-of-service-vulnerability-cve-2023-44487/59715
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VHUHTSXLXGXS7JYKBXTA3VINUPHTNGVU/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VSRDIV77HNKUSM7SJC5BKE5JSHLHU2NK/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZB43REMKRQR62NJEI7I5NQ4FSXNLBKRT/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3N4NJ7FR4X4FPZUGNTQAPSTVB2HB2Y4A/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XFOIBB4YFICHDM7IBOP7PWXW3FX4HLL2/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HT7T2R4MQKLIF4ODV4BDLPARWFPCJ5CZ/
- https://www.debian.org/security/2023/dsa-5549
- https://lists.debian.org/debian-lts-announce/2023/11/msg00001.html
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WE2I52RHNNU42PX6NZ2RBUHSFFJ2LVZX/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2MBEPPC36UBVOZZNAXFHKLFGSLCMN5LI/
- https://www.debian.org/security/2023/dsa-5558
- https://lists.debian.org/debian-lts-announce/2023/11/msg00012.html
- https://security.gentoo.org/glsa/202311-09
- https://www.debian.org/security/2023/dsa-5570
- https://launchpad.net/bugs/cve/CVE-2023-44487
- https://www.bleepingcomputer.com/news/security/new-fortinet-rce-flaw-in-ssl-vpn-likely-exploited-in-attacks/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2MBEPPC36UBVOZZNAXFHKLFGSLCMN5LI/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3N4NJ7FR4X4FPZUGNTQAPSTVB2HB2Y4A/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BFQD3KUEMFBHPAPBGLWQC34L4OWL5HAZ/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CLB4TW7KALB3EEQWNWCN7OUIWWVWWCG2/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E72T67UPDRXHIDLO3OROR25YAMN4GGW5/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FNA62Q767CFAFHBCDKYNPBMZWB7TWYVU/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HT7T2R4MQKLIF4ODV4BDLPARWFPCJ5CZ/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JIZSEFC3YKCGABA2BZW6ZJRMDZJMB7PJ/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JMEXY22BFG5Q64HQCM5CK2Q7KDKVV4TY/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KSEGD2IWKNUO3DWY4KQGUQM5BISRWHQE/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LKYHSZQFDNR7RSA7LHVLLIAQMVYCUGBG/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LNMZJCDHGLJJLXO4OXWJMTVQRNWOC7UL/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VHUHTSXLXGXS7JYKBXTA3VINUPHTNGVU/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VSRDIV77HNKUSM7SJC5BKE5JSHLHU2NK/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WE2I52RHNNU42PX6NZ2RBUHSFFJ2LVZX/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WLPRQ5TWUQQXYWBJM7ECYDAIL2YVKIUH/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X6QXN4ORIVF6XBW4WWFE7VNPVC74S45Y/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XFOIBB4YFICHDM7IBOP7PWXW3FX4HLL2/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZB43REMKRQR62NJEI7I5NQ4FSXNLBKRT/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZKQSIKIAT5TJ3WSLU3RDBQ35YX4GY4V3/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZLU6U2R2IC2K64NDPNMV55AUAO65MAF4/
- https://exchange.xforce.ibmcloud.com/vulnerabilities/268044
- https://www.ibm.com/support/pages/node/7142038 (Advisory)
- https://github.com/apple/swift-nio-http2/security/advisories/GHSA-qppj-fm5r-hxr3
- https://nvd.nist.gov/vuln/detail/CVE-2023-44487
- https://github.com/hyperium/hyper/issues/3337
- https://chaos.social/@icing/111210915918780532
- https://go.dev/cl/534215
- https://go.dev/cl/534235
- https://go.dev/issue/63417
- https://groups.google.com/g/golang-announce/c/iNNxDTCjZvo/m/UDd7VKQuAAAJ
- https://github.com/grpc/grpc-go/releases
- https://tomcat.apache.org/security-11.html#Fixed_in_Apache_Tomcat_11.0.0-M12
- https://tomcat.apache.org/security-8.html#Fixed_in_Apache_Tomcat_8.5.94
- https://tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.81
- https://arstechnica.com/security/2023/10/how-ddosers-used-the-http-2-protocol-to-deliver-attacks-of-unprecedented-size
- https://aws.amazon.com/security/security-bulletins/AWS-2023-011
- https://blog.cloudflare.com/technical-breakdown-http2-rapid-reset-ddos-attack
- https://blog.cloudflare.com/zero-day-rapid-reset-http2-record-breaking-ddos-attack
- https://blog.litespeedtech.com/2023/10/11/rapid-reset-http-2-vulnerablilty
- https://blog.vespa.ai/cve-2023-44487
- https://cloud.google.com/blog/products/identity-security/google-cloud-mitigated-largest-ddos-attack-peaking-above-398-million-rps
- https://istio.io/latest/news/security/istio-security-2023-004
- https://linkerd.io/2023/10/12/linkerd-cve-2023-44487
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2MBEPPC36UBVOZZNAXFHKLFGSLCMN5LI
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3N4NJ7FR4X4FPZUGNTQAPSTVB2HB2Y4A
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BFQD3KUEMFBHPAPBGLWQC34L4OWL5HAZ
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CLB4TW7KALB3EEQWNWCN7OUIWWVWWCG2
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E72T67UPDRXHIDLO3OROR25YAMN4GGW5
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FNA62Q767CFAFHBCDKYNPBMZWB7TWYVU
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HT7T2R4MQKLIF4ODV4BDLPARWFPCJ5CZ
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JIZSEFC3YKCGABA2BZW6ZJRMDZJMB7PJ
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JMEXY22BFG5Q64HQCM5CK2Q7KDKVV4TY
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KSEGD2IWKNUO3DWY4KQGUQM5BISRWHQE
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LKYHSZQFDNR7RSA7LHVLLIAQMVYCUGBG
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LNMZJCDHGLJJLXO4OXWJMTVQRNWOC7UL
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VHUHTSXLXGXS7JYKBXTA3VINUPHTNGVU
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VSRDIV77HNKUSM7SJC5BKE5JSHLHU2NK
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WE2I52RHNNU42PX6NZ2RBUHSFFJ2LVZX
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WLPRQ5TWUQQXYWBJM7ECYDAIL2YVKIUH
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X6QXN4ORIVF6XBW4WWFE7VNPVC74S45Y
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XFOIBB4YFICHDM7IBOP7PWXW3FX4HLL2
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZB43REMKRQR62NJEI7I5NQ4FSXNLBKRT
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZKQSIKIAT5TJ3WSLU3RDBQ35YX4GY4V3
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZLU6U2R2IC2K64NDPNMV55AUAO65MAF4
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3N4NJ7FR4X4FPZUGNTQAPSTVB2HB2Y4A
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BFQD3KUEMFBHPAPBGLWQC34L4OWL5HAZ
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CLB4TW7KALB3EEQWNWCN7OUIWWVWWCG2
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/E72T67UPDRXHIDLO3OROR25YAMN4GGW5
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FNA62Q767CFAFHBCDKYNPBMZWB7TWYVU
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HT7T2R4MQKLIF4ODV4BDLPARWFPCJ5CZ
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JIZSEFC3YKCGABA2BZW6ZJRMDZJMB7PJ
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JMEXY22BFG5Q64HQCM5CK2Q7KDKVV4TY
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KSEGD2IWKNUO3DWY4KQGUQM5BISRWHQE
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LKYHSZQFDNR7RSA7LHVLLIAQMVYCUGBG
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LNMZJCDHGLJJLXO4OXWJMTVQRNWOC7UL
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VHUHTSXLXGXS7JYKBXTA3VINUPHTNGVU
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VSRDIV77HNKUSM7SJC5BKE5JSHLHU2NK
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WLPRQ5TWUQQXYWBJM7ECYDAIL2YVKIUH
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/X6QXN4ORIVF6XBW4WWFE7VNPVC74S45Y
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XFOIBB4YFICHDM7IBOP7PWXW3FX4HLL2
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZB43REMKRQR62NJEI7I5NQ4FSXNLBKRT
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZKQSIKIAT5TJ3WSLU3RDBQ35YX4GY4V3
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZLU6U2R2IC2K64NDPNMV55AUAO65MAF4
- https://msrc.microsoft.com/blog/2023/10/microsoft-response-to-distributed-denial-of-service-ddos-attacks-against-http/2
- https://openssf.org/blog/2023/10/10/http-2-rapid-reset-vulnerability-highlights-need-for-rapid-response
- https://security.netapp.com/advisory/ntap-20231016-0001
- https://www.bleepingcomputer.com/news/security/new-http-2-rapid-reset-zero-day-attack-breaks-ddos-records
- https://www.eclipse.org/lists/jetty-announce/msg00181.html
- https://www.netlify.com/blog/netlify-successfully-mitigates-cve-2023-44487
- https://www.nginx.com/blog/http-2-rapid-reset-attack-impacting-f5-nginx-products
- https://www.theregister.com/2023/10/10/http2_rapid_reset_zeroday
- https://github.com/akka/akka-http/pull/4325
- https://github.com/akka/akka-http/pull/4324
- https://akka.io/security/akka-http-cve-2023-44487.html
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2243127
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2243126
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2243249
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2243250
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2243247
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2243248
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2243253
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2243251
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2243252
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2243321
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2243320
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2243327
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2243323
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2243322
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2243326
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2243324
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2243325
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2243331
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2243328
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2243329
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2243330
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2243611
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2243612
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2243613
- https://access.redhat.com/errata/RHSA-2023:5705
- https://access.redhat.com/errata/RHSA-2023:5706
- https://access.redhat.com/errata/RHSA-2023:5707
- https://access.redhat.com/errata/RHSA-2023:5710
- https://access.redhat.com/errata/RHSA-2023:5708
- https://access.redhat.com/errata/RHSA-2023:5711
- https://access.redhat.com/errata/RHSA-2023:5714
- https://access.redhat.com/errata/RHSA-2023:5715
- https://access.redhat.com/errata/RHSA-2023:5709
- https://access.redhat.com/errata/RHSA-2023:5712
- https://access.redhat.com/errata/RHSA-2023:5713
- https://access.redhat.com/errata/RHSA-2023:5719
- https://access.redhat.com/errata/RHSA-2023:5720
- https://access.redhat.com/errata/RHSA-2023:5721
- https://access.redhat.com/errata/RHSA-2023:5738
- https://access.redhat.com/errata/RHSA-2023:5716
- https://access.redhat.com/errata/RHSA-2023:5749
- https://access.redhat.com/errata/RHSA-2023:5724
- https://access.redhat.com/errata/RHSA-2023:5764
- https://access.redhat.com/errata/RHSA-2023:5766
- https://access.redhat.com/errata/RHSA-2023:5765
- https://access.redhat.com/errata/RHSA-2023:5767
- https://access.redhat.com/errata/RHSA-2023:5768
- https://access.redhat.com/errata/RHSA-2023:5770
- https://access.redhat.com/errata/RHSA-2023:5769
- https://access.redhat.com/errata/RHSA-2023:5780
- https://access.redhat.com/errata/RHSA-2023:5783
- https://access.redhat.com/errata/RHSA-2023:5784
- https://access.redhat.com/errata/RHSA-2023:5802
- https://access.redhat.com/errata/RHSA-2023:5803
- https://access.redhat.com/errata/RHSA-2023:5801
- https://access.redhat.com/errata/RHSA-2023:5805
- https://access.redhat.com/errata/RHSA-2023:5679
- https://access.redhat.com/errata/RHSA-2023:5835
- https://access.redhat.com/errata/RHSA-2023:5837
- https://access.redhat.com/errata/RHSA-2023:5838
- https://access.redhat.com/errata/RHSA-2023:5840
- https://access.redhat.com/errata/RHSA-2023:5841
- https://catalog.redhat.com/software/containers/rhel9/go-toolset/61df08166d9a1b7b2aab2344/history?0=a&1=m&2=d&3=6&4=4
- https://catalog.redhat.com/software/containers/rhel8/go-toolset/5b9c810add19c70b45cbd666
- https://access.redhat.com/errata/RHSA-2023:5717
- https://access.redhat.com/errata/RHSA-2023:5849
- https://access.redhat.com/errata/RHSA-2023:5850
- https://access.redhat.com/errata/RHSA-2023:5851
- https://access.redhat.com/errata/RHSA-2023:5864
- https://access.redhat.com/errata/RHSA-2023:5866
- https://access.redhat.com/errata/RHSA-2023:5865
- https://access.redhat.com/errata/RHSA-2023:5867
- https://access.redhat.com/errata/RHSA-2023:5863
- https://access.redhat.com/errata/RHSA-2023:5869
- https://access.redhat.com/errata/RHSA-2023:5920
- https://access.redhat.com/security/cve/CVE-2023-44487
- https://access.redhat.com/errata/RHSA-2023:5922
- https://access.redhat.com/errata/RHSA-2023:5924
- https://access.redhat.com/errata/RHSA-2023:5930
- https://access.redhat.com/errata/RHSA-2023:5931
- https://access.redhat.com/errata/RHSA-2023:5929
- https://access.redhat.com/errata/RHSA-2023:5928
- https://access.redhat.com/errata/RHSA-2023:5935
- https://access.redhat.com/errata/RHSA-2023:5945
- https://access.redhat.com/errata/RHSA-2023:5946
- https://access.redhat.com/errata/RHSA-2023:5541
- https://access.redhat.com/errata/RHSA-2023:5530
- https://access.redhat.com/errata/RHSA-2023:5956
- https://access.redhat.com/errata/RHSA-2023:5969
- https://access.redhat.com/errata/RHSA-2023:5971
- https://access.redhat.com/errata/RHSA-2023:5965
- https://access.redhat.com/errata/RHSA-2023:5964
- https://access.redhat.com/errata/RHSA-2023:5970
- https://access.redhat.com/errata/RHSA-2023:5967
- https://access.redhat.com/errata/RHSA-2023:5973
- https://access.redhat.com/errata/RHSA-2023:5974
- https://access.redhat.com/errata/RHSA-2023:5976
- https://access.redhat.com/errata/RHSA-2023:5978
- https://access.redhat.com/errata/RHSA-2023:5979
- https://access.redhat.com/errata/RHSA-2023:5980
- https://access.redhat.com/errata/RHSA-2023:5982
- https://access.redhat.com/errata/RHSA-2023:5989
- https://access.redhat.com/errata/RHSA-2023:6023
- https://access.redhat.com/errata/RHSA-2023:6022
- https://access.redhat.com/errata/RHSA-2023:6021
- https://access.redhat.com/errata/RHSA-2023:6020
- https://access.redhat.com/errata/RHSA-2023:6030
- https://access.redhat.com/errata/RHSA-2023:6031
- https://access.redhat.com/errata/RHSA-2023:6039
- https://access.redhat.com/errata/RHSA-2023:6041
- https://access.redhat.com/errata/RHSA-2023:6044
- https://access.redhat.com/errata/RHSA-2023:6048
- https://access.redhat.com/errata/RHSA-2023:6057
- https://access.redhat.com/errata/RHSA-2023:6059
- https://access.redhat.com/errata/RHSA-2023:6061
- https://access.redhat.com/errata/RHSA-2023:5902
- https://access.redhat.com/errata/RHSA-2023:5542
- https://access.redhat.com/errata/RHSA-2023:6077
- https://access.redhat.com/errata/RHSA-2023:6079
- https://access.redhat.com/errata/RHSA-2023:6080
- https://access.redhat.com/errata/RHSA-2023:6084
- https://access.redhat.com/errata/RHSA-2023:6085
- https://access.redhat.com/errata/RHSA-2023:5896
- https://access.redhat.com/errata/RHSA-2023:6115
- https://access.redhat.com/errata/RHSA-2023:6117
- https://access.redhat.com/errata/RHSA-2023:6118
- https://access.redhat.com/errata/RHSA-2023:6114
- https://access.redhat.com/errata/RHSA-2023:6120
- https://access.redhat.com/errata/RHSA-2023:6119
- https://access.redhat.com/errata/RHSA-2023:6122
- https://access.redhat.com/errata/RHSA-2023:5947
- https://access.redhat.com/errata/RHSA-2023:5933
- https://access.redhat.com/errata/RHSA-2023:6137
- https://access.redhat.com/errata/RHSA-2023:6106
- https://access.redhat.com/errata/RHSA-2023:6105
- https://access.redhat.com/errata/RHSA-2023:6145
- https://access.redhat.com/errata/RHSA-2023:6148
- https://access.redhat.com/errata/RHSA-2023:6144
- https://access.redhat.com/errata/RHSA-2023:6161
- https://access.redhat.com/errata/RHSA-2023:6165
- https://access.redhat.com/errata/RHSA-2023:6179
- https://access.redhat.com/errata/RHSA-2023:6129
- https://access.redhat.com/errata/RHSA-2023:6200
- https://access.redhat.com/errata/RHSA-2023:6202
- https://access.redhat.com/errata/RHSA-2023:5006
- https://access.redhat.com/errata/RHSA-2023:5009
- https://access.redhat.com/errata/RHSA-2023:6217
- https://access.redhat.com/errata/RHSA-2023:6154
- https://access.redhat.com/errata/RHSA-2023:6233
- https://access.redhat.com/errata/RHSA-2023:6235
- https://access.redhat.com/errata/RHSA-2023:6239
- https://access.redhat.com/errata/RHSA-2023:6248
- https://access.redhat.com/errata/RHSA-2023:6251
- https://access.redhat.com/errata/RHSA-2023:6280
- https://access.redhat.com/errata/RHSA-2023:6286
- https://access.redhat.com/errata/RHSA-2023:6296
- https://access.redhat.com/errata/RHSA-2023:6298
- https://access.redhat.com/errata/RHSA-2023:6305
- https://access.redhat.com/errata/RHSA-2023:6746
- https://access.redhat.com/errata/RHSA-2023:6779
- https://access.redhat.com/errata/RHSA-2023:6782
- https://access.redhat.com/errata/RHSA-2023:6781
- https://access.redhat.com/errata/RHSA-2023:6783
- https://access.redhat.com/errata/RHSA-2023:6784
- https://access.redhat.com/errata/RHSA-2023:6785
- https://access.redhat.com/errata/RHSA-2023:6786
- https://access.redhat.com/errata/RHSA-2023:6787
- https://access.redhat.com/errata/RHSA-2023:6788
- https://access.redhat.com/errata/RHSA-2023:6272
- https://access.redhat.com/errata/RHSA-2023:6817
- https://access.redhat.com/errata/RHSA-2023:6818
- https://access.redhat.com/errata/RHSA-2023:6832
- https://access.redhat.com/errata/RHSA-2023:7205
- https://access.redhat.com/errata/RHSA-2023:7215
- https://access.redhat.com/errata/RHSA-2023:6836
- https://access.redhat.com/errata/RHSA-2023:7218
- https://access.redhat.com/errata/RHSA-2023:6269
- https://access.redhat.com/errata/RHSA-2023:6837
- https://access.redhat.com/errata/RHSA-2023:6840
- https://access.redhat.com/errata/RHSA-2023:7247
- https://access.redhat.com/errata/RHSA-2023:6839
- https://access.redhat.com/errata/RHSA-2023:7288
- https://access.redhat.com/errata/RHSA-2023:7334
- https://access.redhat.com/errata/RHSA-2023:7335
- https://access.redhat.com/errata/RHSA-2023:7344
- https://access.redhat.com/errata/RHSA-2023:7345
- https://access.redhat.com/errata/RHSA-2023:7315
- https://access.redhat.com/errata/RHSA-2023:7325
- https://access.redhat.com/errata/RHSA-2023:7484
- https://access.redhat.com/errata/RHSA-2023:7482
- https://access.redhat.com/errata/RHSA-2023:7483
- https://access.redhat.com/errata/RHSA-2023:7486
- https://access.redhat.com/errata/RHSA-2023:7488
- https://access.redhat.com/errata/RHSA-2023:7521
- https://access.redhat.com/errata/RHSA-2023:7522
- https://access.redhat.com/errata/RHSA-2023:7555
- https://access.redhat.com/errata/RHSA-2023:7481
- https://access.redhat.com/errata/RHSA-2023:7587
- https://access.redhat.com/errata/RHSA-2023:7639
- https://access.redhat.com/errata/RHSA-2023:7637
- https://access.redhat.com/errata/RHSA-2023:7638
- https://access.redhat.com/errata/RHSA-2023:7641
- https://access.redhat.com/errata/RHSA-2023:7653
- https://access.redhat.com/errata/RHSA-2023:7610
- https://access.redhat.com/errata/RHSA-2023:7699
- https://access.redhat.com/errata/RHSA-2023:7703
- https://access.redhat.com/errata/RHSA-2023:7704
- https://access.redhat.com/errata/RHSA-2023:7741
- https://access.redhat.com/errata/RHSA-2024:0777
- https://access.redhat.com/errata/RHSA-2023:7198
- https://access.redhat.com/errata/RHSA-2023:7201
- https://access.redhat.com/errata/RHSA-2024:0269
- https://access.redhat.com/errata/RHSA-2024:0302
- https://access.redhat.com/errata/RHSA-2024:1444
- https://www.mail-archive.com/haproxy@formilux.org/msg44134.html
- https://devblogs.microsoft.com/dotnet/october-2023-updates/
- https://ubuntu.com/security/notices/USN-6427-1
- https://ubuntu.com/security/notices/USN-6427-2
- https://ubuntu.com/security/notices/USN-6438-1
- https://nodejs.org/en/blog/vulnerability/october-2023-security-releases
- https://ubuntu.com/security/notices/USN-6505-1
- https://ubuntu.com/security/notices/USN-6574-1
- http://git.haproxy.org/?p=haproxy.git;a=commit;h=f210191dc
- https://github.com/nghttp2/nghttp2/commit/72b4af6143681f528f1d237b21a9a7aee1738832
- https://github.com/nginx/nginx/commit/6ceef192e7af1c507826ac38a2d43f08bf265fb9
- https://github.com/apache/tomcat/commit/76bb4bfbfeae827dce896f650655bbf6e251ed49
- https://github.com/apache/tomcat/commit/6d1a9fd6642387969e4410b9989c85856b74917a
- https://github.com/apache/trafficserver/commit/b28ad74f117307e8de206f1de70c3fa716f90682
- https://github.com/apache/trafficserver/commit/d742d74039aaa548dda0148ab4ba207906abc620
- https://github.com/grpc/grpc/pull/34763
- https://github.com/h2o/h2o/commit/28fe15117b909588bf14269a0e1c6ec4548579fe
- http://git.haproxy.org/?p=haproxy.git;a=commit;h=f210191dcdf32a2cb263c5bd22b7fc98698ce59a
- https://www.mail-archive.com/haproxy@formilux.org/msg44136.html
- https://github.com/nghttp2/nghttp2/security/advisories/GHSA-vx74-f528-fxqg
- https://github.com/eclipse/jetty.project/releases/tag/jetty-9.4.53.v20231009
- https://varnish-cache.org/security/VSV00013.html
- https://varnish-cache.org/docs/7.5/whats-new/changes-7.5.html#cve-2023-44487
- https://www.openwall.com/lists/oss-security/2023/10/13/9
- https://www.fortiguard.com/psirt/cvrf/FG-IR-23-397
- https://www.fortiguard.com/psirt/FG-IR-23-397
- https://security.netapp.com/advisory/ntap-20240426-0007/
Parent vulnerabilities
(Appears in the following advisories)
- collector/oss-sec
- alias/CVE-2023-44487
- collector/msrc
- collector/debian-bugs
- agent/type
- agent/first-publish-date
- exploited/true
- source/Microsoft
- collector/msrc-cve
- collector/launchpad-cve
- source/Launchpad
- agent/remedy
- agent/weakness
- agent/author
- collector/cisa-known-exploited
- source/CISA
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- collector/nvd-index
- collector/bleeping-computer
- source/BleepingComputer
- collector/the-register
- source/The Register
- alias/CVE-2024-21762
- alias/CVE-2024-23113
- alias/CVE-2023-47537
- collector/fortiguard-psirt-latest
- source/FortiGuard
- agent/severity
- collector/nvd-cve
- source/NVD
- collector/nvd-api
- collector/ibm-support
- source/IBM
- collector/github-advisory-latest
- source/GitHub
- alias/GHSA-qppj-fm5r-hxr3
- collector/redhat-bugzilla
- source/Red Hat
- agent/last-modified-date
- zeroday/true
- agent/news-ai
- collector/github-advisory
- collector/usn-cve
- source/Ubuntu
- agent/references
- agent/event
- agent/tags
- agent/title
- agent/description
- collector/security-tracker-debian
- source/Debian
- agent/softwarecombine
- collector/fortiguard-psirt
- collector/mitre-cve
- source/MITRE
- vendor/microsoft
- canonical/microsoft windows 11
- version/microsoft windows 11/21h2
- canonical/microsoft windows server 2022
- version/microsoft windows 11/22h2
- canonical/microsoft windows server 2019
- canonical/microsoft windows 10
- version/microsoft windows 10/21h2
- version/microsoft windows 10/22h2
- version/microsoft windows 10/1809
- version/microsoft windows 10/1607
- package-manager/debian
- vendor/ietf
- canonical/ietf http/2
- canonical/microsoft asp.net core
- version/microsoft asp.net core/7.0
- canonical/microsoft .net 6.0
- version/microsoft asp.net core/6.0
- canonical/microsoft visual studio 2022
- version/microsoft visual studio 2022/17.6
- version/microsoft visual studio 2022/17.4
- version/microsoft visual studio 2022/17.2
- version/microsoft visual studio 2022/17.7
- version/microsoft asp.net core/2.0
- vendor/nghttp2
- canonical/nghttp2 nghttp2
- vendor/netty
- canonical/netty netty
- vendor/envoyproxy
- canonical/envoyproxy envoy
- version/envoyproxy envoy/1.24.10
- version/envoyproxy envoy/1.25.9
- version/envoyproxy envoy/1.26.4
- version/envoyproxy envoy/1.27.0
- vendor/eclipse
- canonical/eclipse jetty
- version/eclipse jetty/10.0.0
- version/eclipse jetty/11.0.0
- version/eclipse jetty/12.0.0
- vendor/caddyserver
- vendor/golang
- canonical/golang go
- version/golang go/1.21.0
- canonical/golang http2
- canonical/golang networking
- vendor/f5
- canonical/f5 big-ip access policy manager
- version/f5 big-ip access policy manager/13.1.0
- version/f5 big-ip access policy manager/13.1.5
- version/f5 big-ip access policy manager/14.1.0
- version/f5 big-ip access policy manager/14.1.5
- version/f5 big-ip access policy manager/15.1.0
- version/f5 big-ip access policy manager/15.1.10
- version/f5 big-ip access policy manager/16.1.0
- version/f5 big-ip access policy manager/16.1.4
- version/f5 big-ip access policy manager/17.1.0
- canonical/f5 big-ip advanced firewall manager
- version/f5 big-ip advanced firewall manager/13.1.0
- version/f5 big-ip advanced firewall manager/13.1.5
- version/f5 big-ip advanced firewall manager/14.1.0
- version/f5 big-ip advanced firewall manager/14.1.5
- version/f5 big-ip advanced firewall manager/15.1.0
- version/f5 big-ip advanced firewall manager/15.1.10
- version/f5 big-ip advanced firewall manager/16.1.0
- version/f5 big-ip advanced firewall manager/16.1.4
- version/f5 big-ip advanced firewall manager/17.1.0
- canonical/f5 big-ip advanced web application firewall
- version/f5 big-ip advanced web application firewall/13.1.0
- version/f5 big-ip advanced web application firewall/13.1.5
- version/f5 big-ip advanced web application firewall/14.1.0
- version/f5 big-ip advanced web application firewall/14.1.5
- version/f5 big-ip advanced web application firewall/15.1.0
- version/f5 big-ip advanced web application firewall/15.1.10
- version/f5 big-ip advanced web application firewall/16.1.0
- version/f5 big-ip advanced web application firewall/16.1.4
- version/f5 big-ip advanced web application firewall/17.1.0
- canonical/f5 big-ip analytics
- version/f5 big-ip analytics/13.1.0
- version/f5 big-ip analytics/13.1.5
- version/f5 big-ip analytics/14.1.0
- version/f5 big-ip analytics/14.1.5
- version/f5 big-ip analytics/15.1.0
- version/f5 big-ip analytics/15.1.10
- version/f5 big-ip analytics/16.1.0
- version/f5 big-ip analytics/16.1.4
- version/f5 big-ip analytics/17.1.0
- canonical/f5 big-ip application acceleration manager
- version/f5 big-ip application acceleration manager/13.1.0
- version/f5 big-ip application acceleration manager/13.1.5
- version/f5 big-ip application acceleration manager/14.1.0
- version/f5 big-ip application acceleration manager/14.1.5
- version/f5 big-ip application acceleration manager/15.1.0
- version/f5 big-ip application acceleration manager/15.1.10
- version/f5 big-ip application acceleration manager/16.1.0
- version/f5 big-ip application acceleration manager/16.1.4
- version/f5 big-ip application acceleration manager/17.1.0
- canonical/f5 big-ip application security manager
- version/f5 big-ip application security manager/13.1.0
- version/f5 big-ip application security manager/13.1.5
- version/f5 big-ip application security manager/14.1.0
- version/f5 big-ip application security manager/14.1.5
- version/f5 big-ip application security manager/15.1.0
- version/f5 big-ip application security manager/15.1.10
- version/f5 big-ip application security manager/16.1.0
- version/f5 big-ip application security manager/16.1.4
- version/f5 big-ip application security manager/17.1.0
- canonical/f5 big-ip application visibility and reporting
- version/f5 big-ip application visibility and reporting/13.1.0
- version/f5 big-ip application visibility and reporting/13.1.5
- version/f5 big-ip application visibility and reporting/14.1.0
- version/f5 big-ip application visibility and reporting/14.1.5
- version/f5 big-ip application visibility and reporting/15.1.0
- version/f5 big-ip application visibility and reporting/15.1.10
- version/f5 big-ip application visibility and reporting/16.1.0
- version/f5 big-ip application visibility and reporting/16.1.4
- version/f5 big-ip application visibility and reporting/17.1.0
- canonical/f5 big-ip carrier-grade nat
- version/f5 big-ip carrier-grade nat/13.1.0
- version/f5 big-ip carrier-grade nat/13.1.5
- version/f5 big-ip carrier-grade nat/14.1.0
- version/f5 big-ip carrier-grade nat/14.1.5
- version/f5 big-ip carrier-grade nat/15.1.0
- version/f5 big-ip carrier-grade nat/15.1.10
- version/f5 big-ip carrier-grade nat/16.1.0
- version/f5 big-ip carrier-grade nat/16.1.4
- version/f5 big-ip carrier-grade nat/17.1.0
- canonical/f5 big-ip ddos hybrid defender
- version/f5 big-ip ddos hybrid defender/13.1.0
- version/f5 big-ip ddos hybrid defender/13.1.5
- version/f5 big-ip ddos hybrid defender/14.1.0
- version/f5 big-ip ddos hybrid defender/14.1.5
- version/f5 big-ip ddos hybrid defender/15.1.0
- version/f5 big-ip ddos hybrid defender/15.1.10
- version/f5 big-ip ddos hybrid defender/16.1.0
- version/f5 big-ip ddos hybrid defender/16.1.4
- version/f5 big-ip ddos hybrid defender/17.1.0
- canonical/f5 big-ip domain name system
- version/f5 big-ip domain name system/13.1.0
- version/f5 big-ip domain name system/13.1.5
- version/f5 big-ip domain name system/14.1.0
- version/f5 big-ip domain name system/14.1.5
- version/f5 big-ip domain name system/15.1.0
- version/f5 big-ip domain name system/15.1.10
- version/f5 big-ip domain name system/16.1.0
- version/f5 big-ip domain name system/16.1.4
- version/f5 big-ip domain name system/17.1.0
- canonical/f5 big-ip fraud protection service
- version/f5 big-ip fraud protection service/13.1.0
- version/f5 big-ip fraud protection service/13.1.5
- version/f5 big-ip fraud protection service/14.1.0
- version/f5 big-ip fraud protection service/14.1.5
- version/f5 big-ip fraud protection service/15.1.0
- version/f5 big-ip fraud protection service/15.1.10
- version/f5 big-ip fraud protection service/16.1.0
- version/f5 big-ip fraud protection service/16.1.4
- version/f5 big-ip fraud protection service/17.1.0
- canonical/f5 big-ip global traffic manager
- version/f5 big-ip global traffic manager/13.1.0
- version/f5 big-ip global traffic manager/13.1.5
- version/f5 big-ip global traffic manager/14.1.0
- version/f5 big-ip global traffic manager/14.1.5
- version/f5 big-ip global traffic manager/15.1.0
- version/f5 big-ip global traffic manager/15.1.10
- version/f5 big-ip global traffic manager/16.1.0
- version/f5 big-ip global traffic manager/16.1.4
- version/f5 big-ip global traffic manager/17.1.0
- canonical/f5 big-ip link controller
- version/f5 big-ip link controller/13.1.0
- version/f5 big-ip link controller/13.1.5
- version/f5 big-ip link controller/14.1.0
- version/f5 big-ip link controller/14.1.5
- version/f5 big-ip link controller/15.1.0
- version/f5 big-ip link controller/15.1.10
- version/f5 big-ip link controller/16.1.0
- version/f5 big-ip link controller/16.1.4
- version/f5 big-ip link controller/17.1.0
- canonical/f5 big-ip local traffic manager
- version/f5 big-ip local traffic manager/13.1.0
- version/f5 big-ip local traffic manager/13.1.5
- version/f5 big-ip local traffic manager/14.1.0
- version/f5 big-ip local traffic manager/14.1.5
- version/f5 big-ip local traffic manager/15.1.0
- version/f5 big-ip local traffic manager/15.1.10
- version/f5 big-ip local traffic manager/16.1.0
- version/f5 big-ip local traffic manager/16.1.4
- version/f5 big-ip local traffic manager/17.1.0
- canonical/microsoft .net 7.0
- version/microsoft .net 7.0/20.0.1
- canonical/f5 big-ip next service proxy for kubernetes
- version/f5 big-ip next service proxy for kubernetes/1.5.0
- version/f5 big-ip next service proxy for kubernetes/1.8.2
- canonical/f5 big-ip policy enforcement manager
- version/f5 big-ip policy enforcement manager/13.1.0
- version/f5 big-ip policy enforcement manager/13.1.5
- version/f5 big-ip policy enforcement manager/14.1.0
- version/f5 big-ip policy enforcement manager/14.1.5
- version/f5 big-ip policy enforcement manager/15.1.0
- version/f5 big-ip policy enforcement manager/15.1.10
- version/f5 big-ip policy enforcement manager/16.1.0
- version/f5 big-ip policy enforcement manager/16.1.4
- version/f5 big-ip policy enforcement manager/17.1.0
- canonical/f5 big-ip ssl orchestrator
- version/f5 big-ip ssl orchestrator/13.1.0
- version/f5 big-ip ssl orchestrator/13.1.5
- version/f5 big-ip ssl orchestrator/14.1.0
- version/f5 big-ip ssl orchestrator/14.1.5
- version/f5 big-ip ssl orchestrator/15.1.0
- version/f5 big-ip ssl orchestrator/15.1.10
- version/f5 big-ip ssl orchestrator/16.1.0
- version/f5 big-ip ssl orchestrator/16.1.4
- version/f5 big-ip ssl orchestrator/17.1.0
- canonical/f5 big-ip webaccelerator
- version/f5 big-ip webaccelerator/13.1.0
- version/f5 big-ip webaccelerator/13.1.5
- version/f5 big-ip webaccelerator/14.1.0
- version/f5 big-ip webaccelerator/14.1.5
- version/f5 big-ip webaccelerator/15.1.0
- version/f5 big-ip webaccelerator/15.1.10
- version/f5 big-ip webaccelerator/16.1.0
- version/f5 big-ip webaccelerator/16.1.4
- version/f5 big-ip webaccelerator/17.1.0
- canonical/f5 big-ip websafe
- version/f5 big-ip websafe/13.1.0
- version/f5 big-ip websafe/13.1.5
- version/f5 big-ip websafe/14.1.0
- version/f5 big-ip websafe/14.1.5
- version/f5 big-ip websafe/15.1.0
- version/f5 big-ip websafe/15.1.10
- version/f5 big-ip websafe/16.1.0
- version/f5 big-ip websafe/16.1.4
- version/f5 big-ip websafe/17.1.0
- canonical/f5 nginx
- version/f5 nginx/1.9.5
- version/f5 nginx/1.25.2
- version/microsoft .net 7.0/2.0.0
- version/microsoft .net 7.0/2.4.2
- version/microsoft .net 7.0/3.0.0
- version/microsoft .net 7.0/3.3.0
- version/microsoft .net 6.0/r25
- version/microsoft .net 6.0/r29
- version/microsoft .net 6.0/r30
- vendor/apache
- canonical/apache tomcat
- version/apache tomcat/8.5.0
- version/apache tomcat/8.5.93
- version/apache tomcat/9.0.0
- version/apache tomcat/9.0.80
- version/apache tomcat/10.1.0
- version/apache tomcat/10.1.13
- version/apache tomcat/11.0.0-milestone1
- version/apache tomcat/11.0.0-milestone10
- version/apache tomcat/11.0.0-milestone11
- version/apache tomcat/11.0.0-milestone2
- version/apache tomcat/11.0.0-milestone3
- version/apache tomcat/11.0.0-milestone4
- version/apache tomcat/11.0.0-milestone5
- version/apache tomcat/11.0.0-milestone6
- version/apache tomcat/11.0.0-milestone7
- version/apache tomcat/11.0.0-milestone8
- version/apache tomcat/11.0.0-milestone9
- vendor/apple
- vendor/grpc
- version/microsoft .net 6.0/1.58.0
- version/microsoft .net 6.0/1.57.0
- canonical/microsoft .net
- version/microsoft .net/6.0.0
- version/microsoft .net/7.0.0
- version/microsoft asp.net core/6.0.0
- version/microsoft asp.net core/7.0.0
- canonical/microsoft azure kubernetes service
- version/microsoft visual studio 2022/17.0
- canonical/microsoft windows server 2016
- canonical/microsoft windows 10 22h2
- canonical/microsoft windows 11 21h2
- vendor/nodejs
- canonical/nodejs node.js
- vendor/dena
- vendor/facebook
- canonical/apache apisix
- canonical/apache traffic server
- version/apache traffic server/8.0.0
- version/apache traffic server/9.0.0
- vendor/amazon
- vendor/debian
- canonical/debian debian linux
- version/debian debian linux/10.0
- version/debian debian linux/11.0
- version/debian debian linux/12.0
- vendor/kazu-yamamoto
- vendor/istio
- version/microsoft windows server 2022/1.18.0
- version/microsoft windows server 2022/1.19.0
- vendor/varnish cache project
- vendor/traefik
- version/microsoft visual studio 2022/3.0.0-beta1
- version/microsoft visual studio 2022/3.0.0-beta2
- version/microsoft visual studio 2022/3.0.0-beta3
- vendor/projectcontour
- vendor/linkerd
- version/microsoft visual studio 2022/2.12.0
- version/microsoft visual studio 2022/2.12.5
- version/microsoft visual studio 2022/2.13.0
- version/microsoft visual studio 2022/2.13.1
- version/microsoft visual studio 2022/2.14.0
- version/microsoft visual studio 2022/2.14.1
- vendor/linecorp
- canonical/linecorp armeria
- vendor/redhat
- version/microsoft windows server 2022/2.0
- canonical/redhat advanced cluster management for kubernetes
- version/redhat advanced cluster management for kubernetes/2.0
- canonical/redhat advanced cluster security
- version/redhat advanced cluster security/3.0
- version/redhat advanced cluster security/4.0
- canonical/redhat ansible automation platform
- version/redhat ansible automation platform/2.0
- canonical/redhat build of optaplanner
- version/redhat build of optaplanner/8.0
- canonical/redhat build of quarkus
- version/microsoft windows server 2022/5.0
- version/microsoft windows server 2016/8.0
- version/microsoft windows server 2016/9.0
- version/microsoft .net 6.0/2.0
- canonical/redhat decision manager
- version/redhat decision manager/7.0
- canonical/redhat integration camel k
- canonical/redhat integration service registry
- canonical/redhat jboss a-mq
- version/redhat jboss a-mq/7
- canonical/redhat jboss data grid
- version/redhat jboss data grid/7.0.0
- canonical/redhat jboss enterprise application platform
- version/redhat jboss enterprise application platform/6.0.0
- version/redhat jboss enterprise application platform/7.0.0
- canonical/redhat jboss fuse
- version/redhat jboss fuse/6.0.0
- version/redhat jboss fuse/7.0.0
- canonical/redhat openshift container platform
- version/redhat openshift container platform/4.0
- canonical/redhat openshift data science
- canonical/redhat openshift serverless
- canonical/redhat openshift service mesh
- version/redhat openshift service mesh/2.0
- version/microsoft windows 11/4
- canonical/redhat openstack platform
- version/redhat openstack platform/16.1
- version/redhat openstack platform/16.2
- version/redhat openstack platform/17.1
- canonical/redhat process automation
- version/redhat process automation/7.0
- canonical/redhat quay
- version/redhat quay/3.0.0
- canonical/redhat satellite
- version/redhat satellite/6.0
- version/microsoft windows server 2016/1.0
- canonical/redhat single sign-on
- version/redhat single sign-on/7.0
- canonical/redhat enterprise linux
- version/redhat enterprise linux/6.0
- version/redhat enterprise linux/8.0
- version/redhat enterprise linux/9.0
- version/microsoft windows 10/1.5
- vendor/fedoraproject
- canonical/fedoraproject fedora
- version/fedoraproject fedora/38
- vendor/netapp
- vendor/akka
- vendor/konghq
- canonical/grpc grpc
- version/grpc grpc/1.59.2
- version/nodejs node.js/18.0.0
- version/nodejs node.js/20.0.0
- version/microsoft .net 6.0/2.12.0
- version/microsoft .net 6.0/2.12.5
- version/microsoft .net 6.0/2.13.0
- version/microsoft .net 6.0/2.13.1
- version/microsoft .net 6.0/2.14.0
- version/microsoft .net 6.0/2.14.1
- version/fedoraproject fedora/37
- vendor/jenkins
- canonical/jenkins jenkins
- version/jenkins jenkins/2.414.2
- version/jenkins jenkins/2.427
- canonical/apache solr
- vendor/openresty
- canonical/openresty openresty
- vendor/cisco
- canonical/cisco connected mobile experiences
- canonical/apple xcode
- version/apple xcode/5.0
- canonical/apache log4j2
- canonical/cisco data center network manager
- canonical/cisco enterprise chat and email
- canonical/cisco expressway
- canonical/cisco firepower threat defense
- canonical/cisco iot field network director
- canonical/cisco prime access registrar
- canonical/cisco prime infrastructure
- canonical/cisco prime network registrar
- canonical/cisco telepresence video communication server
- version/microsoft windows server 2016/2024.01.0
- canonical/cisco unified contact center enterprise
- canonical/cisco unified contact center management portal
- canonical/cisco fog director
- canonical/cisco ios xe
- canonical/cisco ios xr
- canonical/cisco secure web appliance
- canonical/cisco nx-os
- version/cisco nx-os/10.3\(1\)
- canonical/cisco nexus 3016
- canonical/cisco nexus 3016q
- canonical/cisco nexus 3048
- canonical/cisco nexus 3064
- canonical/cisco nexus 3064-32t
- canonical/cisco nexus 3064-t
- canonical/cisco nexus 3064-x
- canonical/cisco nexus 3064t
- canonical/cisco nexus 3064x
- canonical/cisco nexus 3100
- canonical/cisco nexus 3100-v
- canonical/cisco nexus 3100-z
- canonical/cisco nexus 3100v
- canonical/cisco nexus 31108pc-v
- canonical/cisco nexus 31108pv-v
- canonical/cisco nexus 31108tc-v
- canonical/cisco nexus 31128pq
- canonical/cisco nexus 3132c-z
- canonical/cisco nexus 3132q
- canonical/cisco nexus 3132q-v
- canonical/cisco nexus 3132q-x
- canonical/cisco nexus 3132q-x\/3132q-xl
- canonical/cisco nexus 3132q-xl
- canonical/cisco nexus 3164q
- canonical/cisco nexus 3172
- canonical/cisco nexus 3172pq
- canonical/cisco nexus 3172pq-xl
- canonical/cisco nexus 3172pq\/pq-xl
- canonical/cisco nexus 3172tq
- canonical/cisco nexus 3172tq-32t
- canonical/cisco nexus 3172tq-xl
- canonical/cisco nexus 3200
- canonical/cisco nexus 3232
- canonical/cisco nexus 3232c
- canonical/cisco nexus 3264c-e
- canonical/cisco nexus 3264q
- canonical/cisco nexus 3400
- canonical/cisco nexus 3408-s
- canonical/cisco nexus 34180yc
- canonical/cisco nexus 34200yc-sm
- canonical/cisco nexus 3432d-s
- canonical/cisco nexus 3464c
- canonical/cisco nexus 3500
- canonical/cisco nexus 3524
- canonical/cisco nexus 3524-x
- canonical/cisco nexus 3524-x\/xl
- canonical/cisco nexus 3524-xl
- canonical/cisco nexus 3548
- canonical/cisco nexus 3548-x
- canonical/cisco nexus 3548-x\/xl
- canonical/cisco nexus 3548-xl
- canonical/cisco nexus 3600
- canonical/cisco nexus 36180yc-r
- canonical/cisco nexus 3636c-r
- canonical/cisco nexus 9000v
- canonical/cisco nexus 9200
- canonical/cisco nexus 9200yc
- canonical/cisco nexus 92160yc-x
- canonical/cisco nexus 92160yc switch
- canonical/cisco nexus 9221c
- canonical/cisco nexus 92300yc
- canonical/cisco nexus 92300yc switch
- canonical/cisco nexus 92304qc
- canonical/cisco nexus 92304qc switch
- canonical/cisco nexus 9232e
- canonical/cisco nexus 92348gc-x
- canonical/cisco nexus 9236c
- canonical/cisco nexus 9236c switch
- canonical/cisco nexus 9272q
- canonical/cisco nexus 9272q switch
- canonical/cisco nexus 9300
- canonical/cisco nexus 93108tc-ex
- canonical/cisco nexus 93108tc-ex-24
- canonical/cisco nexus 93108tc-ex switch
- canonical/cisco nexus 93108tc-fx
- canonical/cisco nexus 93108tc-fx-24
- canonical/cisco nexus 93108tc-fx3h
- canonical/cisco nexus 93108tc-fx3p
- canonical/cisco nexus 93120tx
- canonical/cisco nexus 93120tx switch
- canonical/cisco nexus 93128
- canonical/cisco nexus 93128tx
- canonical/cisco nexus 93128tx switch
- canonical/cisco nexus 9316d-gx
- canonical/cisco nexus 93180lc-ex
- canonical/cisco nexus 93180lc-ex switch
- canonical/cisco nexus 93180tc-ex
- canonical/cisco nexus 93180yc-ex
- canonical/cisco nexus 93180yc-ex-24
- canonical/cisco nexus 93180yc-ex switch
- canonical/cisco nexus 93180yc-fx
- canonical/cisco nexus 93180yc-fx-24
- canonical/cisco nexus 93180yc-fx3
- canonical/cisco nexus 93180yc-fx3h
- canonical/cisco nexus 93180yc-fx3s
- canonical/cisco nexus 93216tc-fx2
- canonical/cisco nexus 93240tc-fx2
- canonical/cisco nexus 93240yc-fx2
- canonical/cisco nexus 9332c
- canonical/cisco nexus 9332d-gx2b
- canonical/cisco nexus 9332d-h2r
- canonical/cisco nexus 9332pq
- canonical/cisco nexus 9332pq switch
- canonical/cisco nexus 93360yc-fx2
- canonical/cisco nexus 9336c-fx2
- canonical/cisco nexus 9336c-fx2-e
- canonical/cisco nexus 9336pq
- canonical/cisco nexus 9336pq aci
- canonical/cisco nexus 9336pq aci spine
- canonical/cisco nexus 9336pq aci spine switch
- canonical/cisco nexus 9348d-gx2a
- canonical/cisco nexus 9348gc-fx3
- canonical/cisco nexus 9348gc-fxp
- canonical/cisco nexus 93600cd-gx
- canonical/cisco nexus 9364c
- canonical/cisco nexus 9364c-gx
- canonical/cisco nexus 9364d-gx2a
- canonical/cisco nexus 9372px
- canonical/cisco nexus 9372px-e
- canonical/cisco nexus 9372px-e switch
- canonical/cisco nexus 9372px switch
- canonical/cisco nexus 9372tx
- canonical/cisco nexus 9372tx-e
- canonical/cisco nexus 9372tx-e switch
- canonical/cisco nexus 9372tx switch
- canonical/cisco nexus 9396px
- canonical/cisco nexus 9396px switch
- canonical/cisco nexus 9396tx
- canonical/cisco nexus 9396tx switch
- canonical/cisco nexus 9408
- canonical/cisco nexus 9432pq
- canonical/cisco nexus 9500
- canonical/cisco nexus 9500 16-slot
- canonical/cisco nexus 9500 4-slot
- canonical/cisco nexus 9500 8-slot
- canonical/cisco nexus 9500 supervisor a
- canonical/cisco nexus 9500 supervisor a\+
- canonical/cisco nexus 9500 supervisor b
- canonical/cisco nexus 9500 supervisor b\+
- canonical/cisco nexus 9500r
- canonical/cisco nexus 9504
- canonical/cisco nexus 9504 switch
- canonical/cisco nexus 9508
- canonical/cisco nexus 9508 switch
- canonical/cisco nexus 9516
- canonical/cisco nexus 9516 switch
- canonical/cisco nexus 9536pq
- canonical/cisco nexus 9636pq
- canonical/cisco nexus 9716d-gx
- canonical/cisco nexus 9736pq
- canonical/cisco nexus 9800
- canonical/cisco nexus 9804
- canonical/cisco nexus 9808
- vendor/ibm
- canonical/ibm secure proxy
- version/ibm secure proxy/6.0.3
- version/ibm secure proxy/6.1.0
- package-manager/maven
- package-manager/swift
- package-manager/go
- package-manager/redhat
- package-manager/ubuntu
- vendor/fortinet
- canonical/fortinet fortios
- version/fortinet fortios/7.4.0
- version/fortinet fortios/7.4.1
- version/fortinet fortios/7.2.0
- version/fortinet fortios/7.2.6
- version/fortinet fortios/7.0.0
- version/fortinet fortios/7.0.13
- canonical/fortinet fortiproxy
- version/fortinet fortiproxy/7.4.0
- version/fortinet fortiproxy/7.4.1
- version/fortinet fortiproxy/7.2.0
- version/fortinet fortiproxy/7.2.7
- version/fortinet fortiproxy/7.0