https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 01:30:35 +0000 https://db.gcve.eu/vuln/ghsa-xpw8-rcwv-8f8p <p><strong>Affected:</strong> Maven: io.netty:netty-codec-http2</p> <p>A client might overload the server by issue frequent RST frames. This can cause a massive amount of load on the remote system and so cause a DDOS attack.</p> <p>### Impact This is a DDOS attack, any http2 server is affected and so you should update as soon as possible.</p> <p>### Patches This is patched in version 4.1.100.Final.</p> <p>### Workarounds A user can limit the amount of RST frames that are accepted per connection over a timeframe manually using either an own `Http2FrameListener` implementation or an `ChannelInboundHandler` implementation (depending which http2 API is used).</p> <p>### References - https://www.cve.org/CVERecord?id=CVE-2023-44487 - https://blog.cloudflare.com/technical-breakdown-http2-rapid-reset-ddos-attack/ - https://cloud.google.com/blog/products/identity-security/google-cloud-mitigated-largest-ddos-attack-peaking-above-398-million-rps/</p> <p><strong>Affected:</strong> Maven: io.netty:netty-codec-http2</p> <p>A client might overload the server by issue frequent RST frames. This can cause a massive amount of load on the remote system and so cause a DDOS attack.</p> <p>### Impact This is a DDOS attack, any http2 server is affected and so you should update as soon as possible.</p> <p>### Patches This is patched in version 4.1.100.Final.</p> <p>### Workarounds A user can limit the amount of RST frames that are accepted per connection over a timeframe manually using either an own `Http2FrameListener` implementation or an `ChannelInboundHandler` implementation (depending which http2 API is used).</p> <p>### References - https://www.cve.org/CVERecord?id=CVE-2023-44487 - https://blog.cloudflare.com/technical-breakdown-http2-rapid-reset-ddos-attack/ - https://cloud.google.com/blog/products/identity-security/google-cloud-mitigated-largest-ddos-attack-peaking-above-398-million-rps/</p> https://db.gcve.eu/vuln/ghsa-xpw8-rcwv-8f8p