Type	Vendor	Product	Version/Range	Vulnerable?
Application	ietf	http	2.0	Yes
Application	nghttp2	nghttp2	< 1.57.0	Yes
Application	netty	netty	< 4.1.100	Yes
Application	envoyproxy	envoy	1.24.10	Yes
Application	envoyproxy	envoy	1.25.9	Yes
Application	envoyproxy	envoy	1.26.4	Yes
Application	envoyproxy	envoy	1.27.0	Yes
Application	eclipse	jetty	< 9.4.53	Yes
Application	eclipse	jetty	< 10.0.17	Yes
Application	eclipse	jetty	< 11.0.17	Yes
Application	eclipse	jetty	< 12.0.2	Yes
Application	caddyserver	caddy	< 2.7.5	Yes
Application	golang	go	< 1.20.10	Yes
Application	golang	go	< 1.21.3	Yes
Application	golang	http2	< 0.17.0	Yes
Application	golang	networking	< 0.17.0	Yes
Application	f5	big-ip_access_policy_manager	≤ 13.1.5	Yes
Application	f5	big-ip_access_policy_manager	≤ 14.1.5	Yes
Application	f5	big-ip_access_policy_manager	≤ 15.1.10	Yes
Application	f5	big-ip_access_policy_manager	≤ 16.1.4	Yes
Application	f5	big-ip_access_policy_manager	17.1.0	Yes
Application	f5	big-ip_advanced_firewall_manager	≤ 13.1.5	Yes
Application	f5	big-ip_advanced_firewall_manager	≤ 14.1.5	Yes
Application	f5	big-ip_advanced_firewall_manager	≤ 15.1.10	Yes
Application	f5	big-ip_advanced_firewall_manager	≤ 16.1.4	Yes
Application	f5	big-ip_advanced_firewall_manager	17.1.0	Yes
Application	f5	big-ip_advanced_web_application_firewall	≤ 13.1.5	Yes
Application	f5	big-ip_advanced_web_application_firewall	≤ 14.1.5	Yes
Application	f5	big-ip_advanced_web_application_firewall	≤ 15.1.10	Yes
Application	f5	big-ip_advanced_web_application_firewall	≤ 16.1.4	Yes
Application	f5	big-ip_advanced_web_application_firewall	17.1.0	Yes
Application	f5	big-ip_analytics	≤ 13.1.5	Yes
Application	f5	big-ip_analytics	≤ 14.1.5	Yes
Application	f5	big-ip_analytics	≤ 15.1.10	Yes
Application	f5	big-ip_analytics	≤ 16.1.4	Yes
Application	f5	big-ip_analytics	17.1.0	Yes
Application	f5	big-ip_application_acceleration_manager	≤ 13.1.5	Yes
Application	f5	big-ip_application_acceleration_manager	≤ 14.1.5	Yes
Application	f5	big-ip_application_acceleration_manager	≤ 15.1.10	Yes
Application	f5	big-ip_application_acceleration_manager	≤ 16.1.4	Yes
Application	f5	big-ip_application_acceleration_manager	17.1.0	Yes
Application	f5	big-ip_application_security_manager	≤ 13.1.5	Yes
Application	f5	big-ip_application_security_manager	≤ 14.1.5	Yes
Application	f5	big-ip_application_security_manager	≤ 15.1.10	Yes
Application	f5	big-ip_application_security_manager	≤ 16.1.4	Yes
Application	f5	big-ip_application_security_manager	17.1.0	Yes
Application	f5	big-ip_application_visibility_and_reporting	≤ 13.1.5	Yes
Application	f5	big-ip_application_visibility_and_reporting	≤ 14.1.5	Yes
Application	f5	big-ip_application_visibility_and_reporting	≤ 15.1.10	Yes
Application	f5	big-ip_application_visibility_and_reporting	≤ 16.1.4	Yes
Application	f5	big-ip_application_visibility_and_reporting	17.1.0	Yes
Application	f5	big-ip_carrier-grade_nat	≤ 13.1.5	Yes
Application	f5	big-ip_carrier-grade_nat	≤ 14.1.5	Yes
Application	f5	big-ip_carrier-grade_nat	≤ 15.1.10	Yes
Application	f5	big-ip_carrier-grade_nat	≤ 16.1.4	Yes
Application	f5	big-ip_carrier-grade_nat	17.1.0	Yes
Application	f5	big-ip_ddos_hybrid_defender	≤ 13.1.5	Yes
Application	f5	big-ip_ddos_hybrid_defender	≤ 14.1.5	Yes
Application	f5	big-ip_ddos_hybrid_defender	≤ 15.1.10	Yes
Application	f5	big-ip_ddos_hybrid_defender	≤ 16.1.4	Yes
Application	f5	big-ip_ddos_hybrid_defender	17.1.0	Yes
Application	f5	big-ip_domain_name_system	≤ 13.1.5	Yes
Application	f5	big-ip_domain_name_system	≤ 14.1.5	Yes
Application	f5	big-ip_domain_name_system	≤ 15.1.10	Yes
Application	f5	big-ip_domain_name_system	≤ 16.1.4	Yes
Application	f5	big-ip_domain_name_system	17.1.0	Yes
Application	f5	big-ip_fraud_protection_service	≤ 13.1.5	Yes
Application	f5	big-ip_fraud_protection_service	≤ 14.1.5	Yes
Application	f5	big-ip_fraud_protection_service	≤ 15.1.10	Yes
Application	f5	big-ip_fraud_protection_service	≤ 16.1.4	Yes
Application	f5	big-ip_fraud_protection_service	17.1.0	Yes
Application	f5	big-ip_global_traffic_manager	≤ 13.1.5	Yes
Application	f5	big-ip_global_traffic_manager	≤ 14.1.5	Yes
Application	f5	big-ip_global_traffic_manager	≤ 15.1.10	Yes
Application	f5	big-ip_global_traffic_manager	≤ 16.1.4	Yes
Application	f5	big-ip_global_traffic_manager	17.1.0	Yes
Application	f5	big-ip_link_controller	≤ 13.1.5	Yes
Application	f5	big-ip_link_controller	≤ 14.1.5	Yes
Application	f5	big-ip_link_controller	≤ 15.1.10	Yes
Application	f5	big-ip_link_controller	≤ 16.1.4	Yes
Application	f5	big-ip_link_controller	17.1.0	Yes
Application	f5	big-ip_local_traffic_manager	≤ 13.1.5	Yes
Application	f5	big-ip_local_traffic_manager	≤ 14.1.5	Yes
Application	f5	big-ip_local_traffic_manager	≤ 15.1.10	Yes
Application	f5	big-ip_local_traffic_manager	≤ 16.1.4	Yes
Application	f5	big-ip_local_traffic_manager	17.1.0	Yes
Application	f5	big-ip_next	20.0.1	Yes
Application	f5	big-ip_next_service_proxy_for_kubernetes	≤ 1.8.2	Yes
Application	f5	big-ip_policy_enforcement_manager	≤ 13.1.5	Yes
Application	f5	big-ip_policy_enforcement_manager	≤ 14.1.5	Yes
Application	f5	big-ip_policy_enforcement_manager	≤ 15.1.10	Yes
Application	f5	big-ip_policy_enforcement_manager	≤ 16.1.4	Yes
Application	f5	big-ip_policy_enforcement_manager	17.1.0	Yes
Application	f5	big-ip_ssl_orchestrator	≤ 13.1.5	Yes
Application	f5	big-ip_ssl_orchestrator	≤ 14.1.5	Yes
Application	f5	big-ip_ssl_orchestrator	≤ 15.1.10	Yes
Application	f5	big-ip_ssl_orchestrator	≤ 16.1.4	Yes
Application	f5	big-ip_ssl_orchestrator	17.1.0	Yes
Application	f5	big-ip_webaccelerator	≤ 13.1.5	Yes
Application	f5	big-ip_webaccelerator	≤ 14.1.5	Yes
Application	f5	big-ip_webaccelerator	≤ 15.1.10	Yes
Application	f5	big-ip_webaccelerator	≤ 16.1.4	Yes
Application	f5	big-ip_webaccelerator	17.1.0	Yes
Application	f5	big-ip_websafe	≤ 13.1.5	Yes
Application	f5	big-ip_websafe	≤ 14.1.5	Yes
Application	f5	big-ip_websafe	≤ 15.1.10	Yes
Application	f5	big-ip_websafe	≤ 16.1.4	Yes
Application	f5	big-ip_websafe	17.1.0	Yes
Application	f5	nginx	≤ 1.25.2	Yes
Application	f5	nginx_ingress_controller	≤ 2.4.2	Yes
Application	f5	nginx_ingress_controller	≤ 3.3.0	Yes
Application	f5	nginx_plus	< r29	Yes
Application	f5	nginx_plus	r29	Yes
Application	f5	nginx_plus	r30	Yes
Application	apache	tomcat	≤ 8.5.93	Yes
Application	apache	tomcat	≤ 9.0.80	Yes
Application	apache	tomcat	≤ 10.1.13	Yes
Application	apache	tomcat	11.0.0	Yes
Application	apache	tomcat	11.0.0	Yes
Application	apache	tomcat	11.0.0	Yes
Application	apache	tomcat	11.0.0	Yes
Application	apache	tomcat	11.0.0	Yes
Application	apache	tomcat	11.0.0	Yes
Application	apache	tomcat	11.0.0	Yes
Application	apache	tomcat	11.0.0	Yes
Application	apache	tomcat	11.0.0	Yes
Application	apache	tomcat	11.0.0	Yes
Application	apache	tomcat	11.0.0	Yes
Application	apple	swiftnio_http\/2	< 1.28.0	Yes
Application	grpc	grpc	< 1.56.3	Yes
Application	grpc	grpc	≤ 1.59.2	Yes
Application	grpc	grpc	< 1.58.3	Yes
Application	grpc	grpc	1.57.0	Yes
Application	microsoft	.net	< 6.0.23	Yes
Application	microsoft	.net	< 7.0.12	Yes
Application	microsoft	asp.net_core	< 6.0.23	Yes
Application	microsoft	asp.net_core	< 7.0.12	Yes
Application	microsoft	azure_kubernetes_service	< 2023-10-08	Yes
Application	microsoft	visual_studio_2022	< 17.2.20	Yes
Application	microsoft	visual_studio_2022	< 17.4.12	Yes
Application	microsoft	visual_studio_2022	< 17.6.8	Yes
Application	microsoft	visual_studio_2022	< 17.7.5	Yes
Operating System	microsoft	windows_10_1607	< 10.0.14393.6351	Yes
Operating System	microsoft	windows_10_1607	< 10.0.14393.6351	Yes
Operating System	microsoft	windows_10_1809	< 10.0.17763.4974	Yes
Operating System	microsoft	windows_10_21h2	< 10.0.19044.3570	Yes
Operating System	microsoft	windows_10_22h2	< 10.0.19045.3570	Yes
Operating System	microsoft	windows_11_21h2	< 10.0.22000.2538	Yes
Operating System	microsoft	windows_11_22h2	< 10.0.22621.2428	Yes
Operating System	microsoft	windows_server_2016	-	Yes
Operating System	microsoft	windows_server_2019	-	Yes
Operating System	microsoft	windows_server_2022	-	Yes
Application	nodejs	node.js	< 18.18.2	Yes
Application	nodejs	node.js	< 20.8.1	Yes
Application	microsoft	cbl-mariner	< 2023-10-11	Yes
Application	dena	h2o	< 2023-10-10	Yes
Application	facebook	proxygen	< 2023.10.16.00	Yes
Application	apache	apisix	< 3.6.1	Yes
Application	apache	traffic_server	< 8.1.9	Yes
Application	apache	traffic_server	< 9.2.3	Yes
Application	amazon	opensearch_data_prepper	< 2.5.0	Yes
Operating System	debian	debian_linux	10.0	Yes
Operating System	debian	debian_linux	11.0	Yes
Operating System	debian	debian_linux	12.0	Yes
Application	kazu-yamamoto	http2	< 4.2.2	Yes
Application	istio	istio	< 1.17.6	Yes
Application	istio	istio	< 1.18.3	Yes
Application	istio	istio	< 1.19.1	Yes
Application	varnish_cache_project	varnish_cache	< 2023-10-10	Yes
Application	traefik	traefik	< 2.10.5	Yes
Application	traefik	traefik	3.0.0	Yes
Application	traefik	traefik	3.0.0	Yes
Application	traefik	traefik	3.0.0	Yes
Application	projectcontour	contour	< 2023-10-11	Yes
Application	linkerd	linkerd	≤ 2.12.5	Yes
Application	linkerd	linkerd	2.13.0	Yes
Application	linkerd	linkerd	2.13.1	Yes
Application	linkerd	linkerd	2.14.0	Yes
Application	linkerd	linkerd	2.14.1	Yes
Application	linecorp	armeria	< 1.26.0	Yes
Application	redhat	3scale_api_management_platform	2.0	Yes
Application	redhat	advanced_cluster_management_for_kubernetes	2.0	Yes
Application	redhat	advanced_cluster_security	3.0	Yes
Application	redhat	advanced_cluster_security	4.0	Yes
Application	redhat	ansible_automation_platform	2.0	Yes
Application	redhat	build_of_optaplanner	8.0	Yes
Application	redhat	build_of_quarkus	-	Yes
Application	redhat	ceph_storage	5.0	Yes
Application	redhat	cert-manager_operator_for_red_hat_openshift	-	Yes
Application	redhat	certification_for_red_hat_enterprise_linux	8.0	Yes
Application	redhat	certification_for_red_hat_enterprise_linux	9.0	Yes
Application	redhat	cost_management	-	Yes
Application	redhat	cryostat	2.0	Yes
Application	redhat	decision_manager	7.0	Yes
Application	redhat	fence_agents_remediation_operator	-	Yes
Application	redhat	integration_camel_for_spring_boot	-	Yes
Application	redhat	integration_camel_k	-	Yes
Application	redhat	integration_service_registry	-	Yes
Application	redhat	jboss_a-mq	7	Yes
Application	redhat	jboss_a-mq_streams	-	Yes
Application	redhat	jboss_core_services	-	Yes
Application	redhat	jboss_data_grid	7.0.0	Yes
Application	redhat	jboss_enterprise_application_platform	6.0.0	Yes
Application	redhat	jboss_enterprise_application_platform	7.0.0	Yes
Application	redhat	jboss_fuse	6.0.0	Yes
Application	redhat	jboss_fuse	7.0.0	Yes
Application	redhat	logging_subsystem_for_red_hat_openshift	-	Yes
Application	redhat	machine_deletion_remediation_operator	-	Yes
Application	redhat	migration_toolkit_for_applications	6.0	Yes
Application	redhat	migration_toolkit_for_containers	-	Yes
Application	redhat	migration_toolkit_for_virtualization	-	Yes
Application	redhat	network_observability_operator	-	Yes
Application	redhat	node_healthcheck_operator	-	Yes
Application	redhat	node_maintenance_operator	-	Yes
Application	redhat	openshift	-	Yes
Application	redhat	openshift_api_for_data_protection	-	Yes
Application	redhat	openshift_container_platform	4.0	Yes
Application	redhat	openshift_container_platform_assisted_installer	-	Yes
Application	redhat	openshift_data_science	-	Yes
Application	redhat	openshift_dev_spaces	-	Yes
Application	redhat	openshift_developer_tools_and_services	-	Yes
Application	redhat	openshift_distributed_tracing	-	Yes
Application	redhat	openshift_gitops	-	Yes
Application	redhat	openshift_pipelines	-	Yes
Application	redhat	openshift_sandboxed_containers	-	Yes
Application	redhat	openshift_secondary_scheduler_operator	-	Yes
Application	redhat	openshift_serverless	-	Yes
Application	redhat	openshift_service_mesh	2.0	Yes
Application	redhat	openshift_virtualization	4	Yes
Application	redhat	openstack_platform	16.1	Yes
Application	redhat	openstack_platform	16.2	Yes
Application	redhat	openstack_platform	17.1	Yes
Application	redhat	process_automation	7.0	Yes
Application	redhat	quay	3.0.0	Yes
Application	redhat	run_once_duration_override_operator	-	Yes
Application	redhat	satellite	6.0	Yes
Application	redhat	self_node_remediation_operator	-	Yes
Application	redhat	service_interconnect	1.0	Yes
Application	redhat	single_sign-on	7.0	Yes
Application	redhat	support_for_spring_boot	-	Yes
Application	redhat	web_terminal	-	Yes
Operating System	redhat	enterprise_linux	6.0	Yes
Operating System	redhat	enterprise_linux	8.0	Yes
Operating System	redhat	enterprise_linux	9.0	Yes
Application	redhat	service_telemetry_framework	1.5	Yes
Operating System	redhat	enterprise_linux	8.0	No
Operating System	fedoraproject	fedora	37	Yes
Operating System	fedoraproject	fedora	38	Yes
Application	netapp	astra_control_center	-	Yes
Application	netapp	oncommand_insight	-	Yes
Application	akka	http_server	< 10.5.3	Yes
Application	konghq	kong_gateway	< 3.4.2	Yes
Application	jenkins	jenkins	≤ 2.414.2	Yes
Application	jenkins	jenkins	≤ 2.427	Yes
Application	apache	solr	< 9.4.0	Yes
Application	openresty	openresty	< 1.21.4.3	Yes
Application	cisco	business_process_automation	< 3.2.003.009	Yes
Application	cisco	connected_mobile_experiences	< 11.1	Yes
Application	cisco	crosswork_data_gateway	< 4.1.3	Yes
Application	cisco	crosswork_data_gateway	< 5.0.2	Yes
Application	cisco	crosswork_situation_manager	-	Yes
Application	cisco	crosswork_zero_touch_provisioning	< 6.0.0	Yes
Application	cisco	data_center_network_manager	-	Yes
Application	cisco	enterprise_chat_and_email	-	Yes
Application	cisco	expressway	< x14.3.3	Yes
Application	cisco	firepower_threat_defense	< 7.4.2	Yes
Application	cisco	iot_field_network_director	< 4.11.0	Yes
Application	cisco	prime_access_registrar	< 9.3.3	Yes
Application	cisco	prime_cable_provisioning	< 7.2.1	Yes
Application	cisco	prime_infrastructure	< 3.10.4	Yes
Application	cisco	prime_network_registrar	< 11.2	Yes
Application	cisco	secure_dynamic_attributes_connector	< 2.2.0	Yes
Application	cisco	secure_malware_analytics	< 2.19.2	Yes
Application	cisco	telepresence_video_communication_server	< x14.3.3	Yes
Application	cisco	ultra_cloud_core_-_policy_control_function	< 2024.01.0	Yes
Application	cisco	ultra_cloud_core_-_policy_control_function	2024.01.0	Yes
Application	cisco	ultra_cloud_core_-_serving_gateway_function	< 2024.02.0	Yes
Application	cisco	ultra_cloud_core_-_session_management_function	< 2024.02.0	Yes
Application	cisco	unified_attendant_console_advanced	-	Yes
Application	cisco	unified_contact_center_domain_manager	-	Yes
Application	cisco	unified_contact_center_enterprise	-	Yes
Application	cisco	unified_contact_center_enterprise_-_live_data_server	< 12.6.2	Yes
Application	cisco	unified_contact_center_management_portal	-	Yes
Operating System	cisco	fog_director	< 1.22	Yes
Operating System	cisco	ios_xe	< 17.15.1	Yes
Operating System	cisco	ios_xr	< 7.11.2	Yes
Operating System	cisco	secure_web_appliance_firmware	< 15.1.0	Yes
Hardware	cisco	secure_web_appliance	-	No
Operating System	cisco	nx-os	< 10.2\(7\)	Yes
Operating System	cisco	nx-os	< 10.3\(5\)	Yes
Operating System	cisco	nx-os	< 10.4\(2\)	Yes
Hardware	cisco	nexus_3016	-	No
Hardware	cisco	nexus_3016q	-	No
Hardware	cisco	nexus_3048	-	No
Hardware	cisco	nexus_3064	-	No
Hardware	cisco	nexus_3064-32t	-	No
Hardware	cisco	nexus_3064-t	-	No
Hardware	cisco	nexus_3064-x	-	No
Hardware	cisco	nexus_3064t	-	No
Hardware	cisco	nexus_3064x	-	No
Hardware	cisco	nexus_3100	-	No
Hardware	cisco	nexus_3100-v	-	No
Hardware	cisco	nexus_3100-z	-	No
Hardware	cisco	nexus_3100v	-	No
Hardware	cisco	nexus_31108pc-v	-	No
Hardware	cisco	nexus_31108pv-v	-	No
Hardware	cisco	nexus_31108tc-v	-	No
Hardware	cisco	nexus_31128pq	-	No
Hardware	cisco	nexus_3132c-z	-	No
Hardware	cisco	nexus_3132q	-	No
Hardware	cisco	nexus_3132q-v	-	No
Hardware	cisco	nexus_3132q-x	-	No
Hardware	cisco	nexus_3132q-x\/3132q-xl	-	No
Hardware	cisco	nexus_3132q-xl	-	No
Hardware	cisco	nexus_3164q	-	No
Hardware	cisco	nexus_3172	-	No
Hardware	cisco	nexus_3172pq	-	No
Hardware	cisco	nexus_3172pq-xl	-	No
Hardware	cisco	nexus_3172pq\/pq-xl	-	No
Hardware	cisco	nexus_3172tq	-	No
Hardware	cisco	nexus_3172tq-32t	-	No
Hardware	cisco	nexus_3172tq-xl	-	No
Hardware	cisco	nexus_3200	-	No
Hardware	cisco	nexus_3232	-	No
Hardware	cisco	nexus_3232c	-	No
Hardware	cisco	nexus_3232c_	-	No
Hardware	cisco	nexus_3264c-e	-	No
Hardware	cisco	nexus_3264q	-	No
Hardware	cisco	nexus_3400	-	No
Hardware	cisco	nexus_3408-s	-	No
Hardware	cisco	nexus_34180yc	-	No
Hardware	cisco	nexus_34200yc-sm	-	No
Hardware	cisco	nexus_3432d-s	-	No
Hardware	cisco	nexus_3464c	-	No
Hardware	cisco	nexus_3500	-	No
Hardware	cisco	nexus_3524	-	No
Hardware	cisco	nexus_3524-x	-	No
Hardware	cisco	nexus_3524-x\/xl	-	No
Hardware	cisco	nexus_3524-xl	-	No
Hardware	cisco	nexus_3548	-	No
Hardware	cisco	nexus_3548-x	-	No
Hardware	cisco	nexus_3548-x\/xl	-	No
Hardware	cisco	nexus_3548-xl	-	No
Hardware	cisco	nexus_3600	-	No
Hardware	cisco	nexus_36180yc-r	-	No
Hardware	cisco	nexus_3636c-r	-	No
Operating System	cisco	nx-os	< 10.2\(7\)	Yes
Operating System	cisco	nx-os	< 10.3\(5\)	Yes
Operating System	cisco	nx-os	< 10.4\(2\)	Yes
Hardware	cisco	nexus_9000v	-	No
Hardware	cisco	nexus_9200	-	No
Hardware	cisco	nexus_9200yc	-	No
Hardware	cisco	nexus_92160yc-x	-	No
Hardware	cisco	nexus_92160yc_switch	-	No
Hardware	cisco	nexus_9221c	-	No
Hardware	cisco	nexus_92300yc	-	No
Hardware	cisco	nexus_92300yc_switch	-	No
Hardware	cisco	nexus_92304qc	-	No
Hardware	cisco	nexus_92304qc_switch	-	No
Hardware	cisco	nexus_9232e	-	No
Hardware	cisco	nexus_92348gc-x	-	No
Hardware	cisco	nexus_9236c	-	No
Hardware	cisco	nexus_9236c_switch	-	No
Hardware	cisco	nexus_9272q	-	No
Hardware	cisco	nexus_9272q_switch	-	No
Hardware	cisco	nexus_9300	-	No
Hardware	cisco	nexus_93108tc-ex	-	No
Hardware	cisco	nexus_93108tc-ex-24	-	No
Hardware	cisco	nexus_93108tc-ex_switch	-	No
Hardware	cisco	nexus_93108tc-fx	-	No
Hardware	cisco	nexus_93108tc-fx-24	-	No
Hardware	cisco	nexus_93108tc-fx3h	-	No
Hardware	cisco	nexus_93108tc-fx3p	-	No
Hardware	cisco	nexus_93120tx	-	No
Hardware	cisco	nexus_93120tx_switch	-	No
Hardware	cisco	nexus_93128	-	No
Hardware	cisco	nexus_93128tx	-	No
Hardware	cisco	nexus_93128tx_switch	-	No
Hardware	cisco	nexus_9316d-gx	-	No
Hardware	cisco	nexus_93180lc-ex	-	No
Hardware	cisco	nexus_93180lc-ex_switch	-	No
Hardware	cisco	nexus_93180tc-ex	-	No
Hardware	cisco	nexus_93180yc-ex	-	No
Hardware	cisco	nexus_93180yc-ex-24	-	No
Hardware	cisco	nexus_93180yc-ex_switch	-	No
Hardware	cisco	nexus_93180yc-fx	-	No
Hardware	cisco	nexus_93180yc-fx-24	-	No
Hardware	cisco	nexus_93180yc-fx3	-	No
Hardware	cisco	nexus_93180yc-fx3h	-	No
Hardware	cisco	nexus_93180yc-fx3s	-	No
Hardware	cisco	nexus_93216tc-fx2	-	No
Hardware	cisco	nexus_93240tc-fx2	-	No
Hardware	cisco	nexus_93240yc-fx2	-	No
Hardware	cisco	nexus_9332c	-	No
Hardware	cisco	nexus_9332d-gx2b	-	No
Hardware	cisco	nexus_9332d-h2r	-	No
Hardware	cisco	nexus_9332pq	-	No
Hardware	cisco	nexus_9332pq_switch	-	No
Hardware	cisco	nexus_93360yc-fx2	-	No
Hardware	cisco	nexus_9336c-fx2	-	No
Hardware	cisco	nexus_9336c-fx2-e	-	No
Hardware	cisco	nexus_9336pq	-	No
Hardware	cisco	nexus_9336pq_aci	-	No
Hardware	cisco	nexus_9336pq_aci_spine	-	No
Hardware	cisco	nexus_9336pq_aci_spine_switch	-	No
Hardware	cisco	nexus_9348d-gx2a	-	No
Hardware	cisco	nexus_9348gc-fx3	-	No
Hardware	cisco	nexus_9348gc-fxp	-	No
Hardware	cisco	nexus_93600cd-gx	-	No
Hardware	cisco	nexus_9364c	-	No
Hardware	cisco	nexus_9364c-gx	-	No
Hardware	cisco	nexus_9364d-gx2a	-	No
Hardware	cisco	nexus_9372px	-	No
Hardware	cisco	nexus_9372px-e	-	No
Hardware	cisco	nexus_9372px-e_switch	-	No
Hardware	cisco	nexus_9372px_switch	-	No
Hardware	cisco	nexus_9372tx	-	No
Hardware	cisco	nexus_9372tx-e	-	No
Hardware	cisco	nexus_9372tx-e_switch	-	No
Hardware	cisco	nexus_9372tx_switch	-	No
Hardware	cisco	nexus_9396px	-	No
Hardware	cisco	nexus_9396px_switch	-	No
Hardware	cisco	nexus_9396tx	-	No
Hardware	cisco	nexus_9396tx_switch	-	No
Hardware	cisco	nexus_9408	-	No
Hardware	cisco	nexus_9432pq	-	No
Hardware	cisco	nexus_9500	-	No
Hardware	cisco	nexus_9500_16-slot	-	No
Hardware	cisco	nexus_9500_4-slot	-	No
Hardware	cisco	nexus_9500_8-slot	-	No
Hardware	cisco	nexus_9500_supervisor_a	-	No
Hardware	cisco	nexus_9500_supervisor_a\+	-	No
Hardware	cisco	nexus_9500_supervisor_b	-	No
Hardware	cisco	nexus_9500_supervisor_b\+	-	No
Hardware	cisco	nexus_9500r	-	No
Hardware	cisco	nexus_9504	-	No
Hardware	cisco	nexus_9504_switch	-	No
Hardware	cisco	nexus_9508	-	No
Hardware	cisco	nexus_9508_switch	-	No
Hardware	cisco	nexus_9516	-	No
Hardware	cisco	nexus_9516_switch	-	No
Hardware	cisco	nexus_9536pq	-	No
Hardware	cisco	nexus_9636pq	-	No
Hardware	cisco	nexus_9716d-gx	-	No
Hardware	cisco	nexus_9736pq	-	No
Hardware	cisco	nexus_9800	-	No
Hardware	cisco	nexus_9804	-	No
Hardware	cisco	nexus_9808	-	No

• http://www.openwall.com/lists/oss-security/2023/10/10/6 Mailing List, Third Party Advisory ([email protected])
• http://www.openwall.com/lists/oss-security/2023/10/10/7 Mailing List, Third Party Advisory ([email protected])
• http://www.openwall.com/lists/oss-security/2023/10/13/4 Mailing List, Third Party Advisory ([email protected])
• http://www.openwall.com/lists/oss-security/2023/10/13/9 Mailing List, Third Party Advisory ([email protected])
• http://www.openwall.com/lists/oss-security/2023/10/18/4 Mailing List, Third Party Advisory ([email protected])
• http://www.openwall.com/lists/oss-security/2023/10/18/8 Mailing List, Third Party Advisory ([email protected])
• http://www.openwall.com/lists/oss-security/2023/10/19/6 Mailing List, Third Party Advisory ([email protected])
• http://www.openwall.com/lists/oss-security/2023/10/20/8 Mailing List, Third Party Advisory ([email protected])
• https://access.redhat.com/security/cve/cve-2023-44487 Vendor Advisory ([email protected])
• https://arstechnica.com/security/2023/10/how-ddosers-used-the-http-2-protocol-to-deliver-attacks-of-unprecedented-size/ Press/Media Coverage, Third Party Advisory ([email protected])
• https://aws.amazon.com/security/security-bulletins/AWS-2023-011/ Third Party Advisory ([email protected])
• https://blog.cloudflare.com/technical-breakdown-http2-rapid-reset-ddos-attack/ Technical Description, Vendor Advisory ([email protected])
• https://blog.cloudflare.com/zero-day-rapid-reset-http2-record-breaking-ddos-attack/ Third Party Advisory, Vendor Advisory ([email protected])
• https://blog.litespeedtech.com/2023/10/11/rapid-reset-http-2-vulnerablilty/ Vendor Advisory ([email protected])
• https://blog.qualys.com/vulnerabilities-threat-research/2023/10/10/cve-2023-44487-http-2-rapid-reset-attack Press/Media Coverage, Third Party Advisory ([email protected])
• https://blog.vespa.ai/cve-2023-44487/ Vendor Advisory ([email protected])
• https://bugzilla.proxmox.com/show_bug.cgi?id=4988 Issue Tracking, Third Party Advisory ([email protected])
• https://bugzilla.redhat.com/show_bug.cgi?id=2242803 Issue Tracking, Vendor Advisory ([email protected])
• https://bugzilla.suse.com/show_bug.cgi?id=1216123 Issue Tracking, Vendor Advisory ([email protected])
• https://cgit.freebsd.org/ports/commit/?id=c64c329c2c1752f46b73e3e6ce9f4329be6629f9 Mailing List, Patch, Vendor Advisory ([email protected])
• https://cloud.google.com/blog/products/identity-security/google-cloud-mitigated-largest-ddos-attack-peaking-above-398-million-rps/ Technical Description, Vendor Advisory ([email protected])
• https://cloud.google.com/blog/products/identity-security/how-it-works-the-novel-http2-rapid-reset-ddos-attack Technical Description, Vendor Advisory ([email protected])
• https://community.traefik.io/t/is-traefik-vulnerable-to-cve-2023-44487/20125 Vendor Advisory ([email protected])
• https://discuss.hashicorp.com/t/hcsec-2023-32-vault-consul-and-boundary-affected-by-http-2-rapid-reset-denial-of-service-vulnerability-cve-2023-44487/59715 Third Party Advisory ([email protected])
• https://edg.io/lp/blog/resets-leaks-ddos-and-the-tale-of-a-hidden-cve Broken Link ([email protected])
• https://forums.swift.org/t/swift-nio-http2-security-update-cve-2023-44487-http-2-dos/67764 Vendor Advisory ([email protected])
• https://gist.github.com/adulau/7c2bfb8e9cdbe4b35a5e131c66a0c088 Issue Tracking, Patch ([email protected])
• https://github.com/Azure/AKS/issues/3947 Issue Tracking ([email protected])
• https://github.com/Kong/kong/discussions/11741 Issue Tracking ([email protected])
• https://github.com/advisories/GHSA-qppj-fm5r-hxr3 Vendor Advisory ([email protected])
• https://github.com/advisories/GHSA-vx74-f528-fxqg Mitigation, Patch, Vendor Advisory ([email protected])
• https://github.com/advisories/GHSA-xpw8-rcwv-8f8p Patch, Vendor Advisory ([email protected])
• https://github.com/akka/akka-http/issues/4323 Issue Tracking ([email protected])
• https://github.com/alibaba/tengine/issues/1872 Issue Tracking ([email protected])
• https://github.com/apache/apisix/issues/10320 Issue Tracking ([email protected])
• https://github.com/apache/httpd-site/pull/10 Issue Tracking ([email protected])
• https://github.com/apache/httpd/blob/afcdbeebbff4b0c50ea26cdd16e178c0d1f24152/modules/http2/h2_mplx.c#L1101-L1113 Product ([email protected])
• https://github.com/apache/tomcat/tree/main/java/org/apache/coyote/http2 Product, Third Party Advisory ([email protected])
• https://github.com/apache/trafficserver/pull/10564 Issue Tracking, Patch ([email protected])
• https://github.com/arkrwn/PoC/tree/main/CVE-2023-44487 Vendor Advisory ([email protected])
• https://github.com/bcdannyboy/CVE-2023-44487 Third Party Advisory ([email protected])
• https://github.com/caddyserver/caddy/issues/5877 Issue Tracking, Vendor Advisory ([email protected])
• https://github.com/caddyserver/caddy/releases/tag/v2.7.5 Release Notes, Third Party Advisory ([email protected])
• https://github.com/dotnet/announcements/issues/277 Issue Tracking, Mitigation, Vendor Advisory ([email protected])
• https://github.com/dotnet/core/blob/e4613450ea0da7fd2fc6b61dfb2c1c1dec1ce9ec/release-notes/6.0/6.0.23/6.0.23.md?plain=1#L73 Product, Release Notes ([email protected])
• https://github.com/eclipse/jetty.project/issues/10679 Issue Tracking ([email protected])
• https://github.com/envoyproxy/envoy/pull/30055 Issue Tracking, Patch ([email protected])
• https://github.com/etcd-io/etcd/issues/16740 Issue Tracking, Patch ([email protected])
• https://github.com/facebook/proxygen/pull/466 Issue Tracking, Patch ([email protected])
• https://github.com/golang/go/issues/63417 Issue Tracking ([email protected])
• https://github.com/grpc/grpc-go/pull/6703 Issue Tracking, Patch ([email protected])
• https://github.com/grpc/grpc/releases/tag/v1.59.2 Mailing List ([email protected])
• https://github.com/h2o/h2o/pull/3291 Issue Tracking, Patch ([email protected])
• https://github.com/h2o/h2o/security/advisories/GHSA-2m7v-gc89-fjqf Vendor Advisory ([email protected])
• https://github.com/haproxy/haproxy/issues/2312 Issue Tracking ([email protected])
• https://github.com/icing/mod_h2/blob/0a864782af0a942aa2ad4ed960a6b32cd35bcf0a/mod_http2/README.md?plain=1#L239-L244 Product ([email protected])
• https://github.com/junkurihara/rust-rpxy/issues/97 Issue Tracking ([email protected])
• https://github.com/kazu-yamamoto/http2/commit/f61d41a502bd0f60eb24e1ce14edc7b6df6722a1 Patch ([email protected])
• https://github.com/kazu-yamamoto/http2/issues/93 Issue Tracking ([email protected])
• https://github.com/kubernetes/kubernetes/pull/121120 Issue Tracking, Patch ([email protected])
• https://github.com/line/armeria/pull/5232 Issue Tracking, Patch ([email protected])
• https://github.com/linkerd/website/pull/1695/commits/4b9c6836471bc8270ab48aae6fd2181bc73fd632 Patch ([email protected])
• https://github.com/micrictor/http2-rst-stream Exploit, Third Party Advisory ([email protected])
• https://github.com/microsoft/CBL-Mariner/pull/6381 Issue Tracking, Patch ([email protected])
• https://github.com/netty/netty/commit/58f75f665aa81a8cbcf6ffa74820042a285c5e61 Patch ([email protected])
• https://github.com/nghttp2/nghttp2/pull/1961 Issue Tracking, Patch ([email protected])
• https://github.com/nghttp2/nghttp2/releases/tag/v1.57.0 Release Notes ([email protected])
• https://github.com/ninenines/cowboy/issues/1615 Issue Tracking ([email protected])
• https://github.com/nodejs/node/pull/50121 Issue Tracking ([email protected])
• https://github.com/openresty/openresty/issues/930 Issue Tracking ([email protected])
• https://github.com/opensearch-project/data-prepper/issues/3474 Issue Tracking, Patch ([email protected])
• https://github.com/oqtane/oqtane.framework/discussions/3367 Issue Tracking ([email protected])
• https://github.com/projectcontour/contour/pull/5826 Issue Tracking, Patch ([email protected])
• https://github.com/tempesta-tech/tempesta/issues/1986 Issue Tracking ([email protected])
• https://github.com/varnishcache/varnish-cache/issues/3996 Issue Tracking ([email protected])
• https://groups.google.com/g/golang-announce/c/iNNxDTCjZvo Mailing List, Release Notes, Vendor Advisory ([email protected])
• https://istio.io/latest/news/security/istio-security-2023-004/ Vendor Advisory ([email protected])
• https://linkerd.io/2023/10/12/linkerd-cve-2023-44487/ Vendor Advisory ([email protected])
• https://lists.apache.org/thread/5py8h42mxfsn8l1wy6o41xwhsjlsd87q Mailing List ([email protected])
• https://lists.debian.org/debian-lts-announce/2023/10/msg00020.html Mailing List, Third Party Advisory ([email protected])
• https://lists.debian.org/debian-lts-announce/2023/10/msg00023.html Mailing List ([email protected])
• https://lists.debian.org/debian-lts-announce/2023/10/msg00024.html Mailing List ([email protected])
• https://lists.debian.org/debian-lts-announce/2023/10/msg00045.html Mailing List ([email protected])
• https://lists.debian.org/debian-lts-announce/2023/10/msg00047.html Mailing List ([email protected])
• https://lists.debian.org/debian-lts-announce/2023/11/msg00001.html Mailing List ([email protected])
• https://lists.debian.org/debian-lts-announce/2023/11/msg00012.html Mailing List ([email protected])
• https://lists.fedoraproject.org/archives/list/[email protected]/message/2MBEPPC36UBVOZZNAXFHKLFGSLCMN5LI/ Mailing List ([email protected])
• https://lists.fedoraproject.org/archives/list/[email protected]/message/3N4NJ7FR4X4FPZUGNTQAPSTVB2HB2Y4A/ Mailing List ([email protected])
• https://lists.fedoraproject.org/archives/list/[email protected]/message/BFQD3KUEMFBHPAPBGLWQC34L4OWL5HAZ/ Mailing List ([email protected])
• https://lists.fedoraproject.org/archives/list/[email protected]/message/CLB4TW7KALB3EEQWNWCN7OUIWWVWWCG2/ Mailing List ([email protected])
• https://lists.fedoraproject.org/archives/list/[email protected]/message/E72T67UPDRXHIDLO3OROR25YAMN4GGW5/ Mailing List ([email protected])
• https://lists.fedoraproject.org/archives/list/[email protected]/message/FNA62Q767CFAFHBCDKYNPBMZWB7TWYVU/ Mailing List ([email protected])
• https://lists.fedoraproject.org/archives/list/[email protected]/message/HT7T2R4MQKLIF4ODV4BDLPARWFPCJ5CZ/ Mailing List ([email protected])
• https://lists.fedoraproject.org/archives/list/[email protected]/message/JIZSEFC3YKCGABA2BZW6ZJRMDZJMB7PJ/ Mailing List ([email protected])
• https://lists.fedoraproject.org/archives/list/[email protected]/message/JMEXY22BFG5Q64HQCM5CK2Q7KDKVV4TY/ Mailing List ([email protected])
• https://lists.fedoraproject.org/archives/list/[email protected]/message/KSEGD2IWKNUO3DWY4KQGUQM5BISRWHQE/ Mailing List ([email protected])
• https://lists.fedoraproject.org/archives/list/[email protected]/message/LKYHSZQFDNR7RSA7LHVLLIAQMVYCUGBG/ Mailing List ([email protected])
• https://lists.fedoraproject.org/archives/list/[email protected]/message/LNMZJCDHGLJJLXO4OXWJMTVQRNWOC7UL/ Mailing List ([email protected])
• https://lists.fedoraproject.org/archives/list/[email protected]/message/VHUHTSXLXGXS7JYKBXTA3VINUPHTNGVU/ Mailing List ([email protected])
• https://lists.fedoraproject.org/archives/list/[email protected]/message/VSRDIV77HNKUSM7SJC5BKE5JSHLHU2NK/ Mailing List ([email protected])
• https://lists.fedoraproject.org/archives/list/[email protected]/message/WE2I52RHNNU42PX6NZ2RBUHSFFJ2LVZX/ Mailing List ([email protected])
• https://lists.fedoraproject.org/archives/list/[email protected]/message/WLPRQ5TWUQQXYWBJM7ECYDAIL2YVKIUH/ Mailing List ([email protected])
• https://lists.fedoraproject.org/archives/list/[email protected]/message/X6QXN4ORIVF6XBW4WWFE7VNPVC74S45Y/ Mailing List ([email protected])
• https://lists.fedoraproject.org/archives/list/[email protected]/message/XFOIBB4YFICHDM7IBOP7PWXW3FX4HLL2/ Mailing List ([email protected])
• https://lists.fedoraproject.org/archives/list/[email protected]/message/ZB43REMKRQR62NJEI7I5NQ4FSXNLBKRT/ Mailing List ([email protected])
• https://lists.fedoraproject.org/archives/list/[email protected]/message/ZKQSIKIAT5TJ3WSLU3RDBQ35YX4GY4V3/ Mailing List ([email protected])
• https://lists.fedoraproject.org/archives/list/[email protected]/message/ZLU6U2R2IC2K64NDPNMV55AUAO65MAF4/ Mailing List ([email protected])
• https://lists.w3.org/Archives/Public/ietf-http-wg/2023OctDec/0025.html Mailing List, Third Party Advisory ([email protected])
• https://mailman.nginx.org/pipermail/nginx-devel/2023-October/S36Q5HBXR7CAIMPLLPRSSSYR4PCMWILK.html Mailing List, Patch, Third Party Advisory ([email protected])
• https://martinthomson.github.io/h2-stream-limits/draft-thomson-httpbis-h2-stream-limits.html Third Party Advisory ([email protected])
• https://msrc.microsoft.com/blog/2023/10/microsoft-response-to-distributed-denial-of-service-ddos-attacks-against-http/2/ Patch, Vendor Advisory ([email protected])
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-44487 Mitigation, Patch, Vendor Advisory ([email protected])
• https://my.f5.com/manage/s/article/K000137106 Vendor Advisory ([email protected])
• https://netty.io/news/2023/10/10/4-1-100-Final.html Release Notes, Vendor Advisory ([email protected])
• https://news.ycombinator.com/item?id=37830987 Issue Tracking ([email protected])
• https://news.ycombinator.com/item?id=37830998 Issue Tracking, Press/Media Coverage ([email protected])
• https://news.ycombinator.com/item?id=37831062 Issue Tracking ([email protected])
• https://news.ycombinator.com/item?id=37837043 Issue Tracking ([email protected])
• https://openssf.org/blog/2023/10/10/http-2-rapid-reset-vulnerability-highlights-need-for-rapid-response/ Third Party Advisory ([email protected])
• https://seanmonstar.com/post/730794151136935936/hyper-http2-rapid-reset-unaffected Third Party Advisory ([email protected])
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-http2-reset-d8Kf32vZ Vendor Advisory ([email protected])
• https://security.gentoo.org/glsa/202311-09 Third Party Advisory ([email protected])
• https://security.netapp.com/advisory/ntap-20231016-0001/ Third Party Advisory ([email protected])
• https://security.netapp.com/advisory/ntap-20240426-0007/ Third Party Advisory ([email protected])
• https://security.netapp.com/advisory/ntap-20240621-0006/ Exploit, Third Party Advisory ([email protected])
• https://security.netapp.com/advisory/ntap-20240621-0007/ Third Party Advisory ([email protected])
• https://security.paloaltonetworks.com/CVE-2023-44487 Vendor Advisory ([email protected])
• https://tomcat.apache.org/security-10.html#Fixed_in_Apache_Tomcat_10.1.14 Release Notes ([email protected])
• https://ubuntu.com/security/CVE-2023-44487 Vendor Advisory ([email protected])
• https://www.bleepingcomputer.com/news/security/new-http-2-rapid-reset-zero-day-attack-breaks-ddos-records/ Third Party Advisory ([email protected])
• https://www.cisa.gov/news-events/alerts/2023/10/10/http2-rapid-reset-vulnerability-cve-2023-44487 Third Party Advisory, US Government Resource ([email protected])
• https://www.darkreading.com/cloud/internet-wide-zero-day-bug-fuels-largest-ever-ddos-event Press/Media Coverage, Third Party Advisory ([email protected])
• https://www.debian.org/security/2023/dsa-5521 Mailing List, Vendor Advisory ([email protected])
• https://www.debian.org/security/2023/dsa-5522 Mailing List, Vendor Advisory ([email protected])
• https://www.debian.org/security/2023/dsa-5540 Mailing List, Third Party Advisory ([email protected])
• https://www.debian.org/security/2023/dsa-5549 Mailing List, Third Party Advisory ([email protected])
• https://www.debian.org/security/2023/dsa-5558 Mailing List, Third Party Advisory ([email protected])
• https://www.debian.org/security/2023/dsa-5570 Third Party Advisory ([email protected])
• https://www.haproxy.com/blog/haproxy-is-not-affected-by-the-http-2-rapid-reset-attack-cve-2023-44487 Third Party Advisory, Vendor Advisory ([email protected])
• https://www.netlify.com/blog/netlify-successfully-mitigates-cve-2023-44487/ Vendor Advisory ([email protected])
• https://www.nginx.com/blog/http-2-rapid-reset-attack-impacting-f5-nginx-products/ Mitigation, Vendor Advisory ([email protected])
• https://www.openwall.com/lists/oss-security/2023/10/10/6 Mailing List, Third Party Advisory ([email protected])
• https://www.phoronix.com/news/HTTP2-Rapid-Reset-Attack Press/Media Coverage ([email protected])
• https://www.theregister.com/2023/10/10/http2_rapid_reset_zeroday/ Press/Media Coverage, Third Party Advisory ([email protected])
• http://www.openwall.com/lists/oss-security/2023/10/13/4 Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
• http://www.openwall.com/lists/oss-security/2023/10/13/9 Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
• http://www.openwall.com/lists/oss-security/2023/10/18/4 Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
• http://www.openwall.com/lists/oss-security/2023/10/18/8 Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
• http://www.openwall.com/lists/oss-security/2023/10/19/6 Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
• http://www.openwall.com/lists/oss-security/2023/10/20/8 Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
• https://access.redhat.com/security/cve/cve-2023-44487 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
• https://arstechnica.com/security/2023/10/how-ddosers-used-the-http-2-protocol-to-deliver-attacks-of-unprecedented-size/ Press/Media Coverage, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
• https://aws.amazon.com/security/security-bulletins/AWS-2023-011/ Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
• https://blog.cloudflare.com/technical-breakdown-http2-rapid-reset-ddos-attack/ Technical Description, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
• https://blog.cloudflare.com/zero-day-rapid-reset-http2-record-breaking-ddos-attack/ Third Party Advisory, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
• https://blog.litespeedtech.com/2023/10/11/rapid-reset-http-2-vulnerablilty/ Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
• https://blog.qualys.com/vulnerabilities-threat-research/2023/10/10/cve-2023-44487-http-2-rapid-reset-attack Press/Media Coverage, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
• https://blog.vespa.ai/cve-2023-44487/ Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
• https://bugzilla.proxmox.com/show_bug.cgi?id=4988 Issue Tracking, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
• https://bugzilla.redhat.com/show_bug.cgi?id=2242803 Issue Tracking, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
• https://bugzilla.suse.com/show_bug.cgi?id=1216123 Issue Tracking, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
• https://cgit.freebsd.org/ports/commit/?id=c64c329c2c1752f46b73e3e6ce9f4329be6629f9 Mailing List, Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
• https://cloud.google.com/blog/products/identity-security/google-cloud-mitigated-largest-ddos-attack-peaking-above-398-million-rps/ Technical Description, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
• https://cloud.google.com/blog/products/identity-security/how-it-works-the-novel-http2-rapid-reset-ddos-attack Technical Description, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
• https://community.traefik.io/t/is-traefik-vulnerable-to-cve-2023-44487/20125 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
• https://discuss.hashicorp.com/t/hcsec-2023-32-vault-consul-and-boundary-affected-by-http-2-rapid-reset-denial-of-service-vulnerability-cve-2023-44487/59715 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
• https://edg.io/lp/blog/resets-leaks-ddos-and-the-tale-of-a-hidden-cve Broken Link (af854a3a-2127-422b-91ae-364da2661108)
• https://forums.swift.org/t/swift-nio-http2-security-update-cve-2023-44487-http-2-dos/67764 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
• https://gist.github.com/adulau/7c2bfb8e9cdbe4b35a5e131c66a0c088 Issue Tracking, Patch (af854a3a-2127-422b-91ae-364da2661108)
• https://github.com/Azure/AKS/issues/3947 Issue Tracking (af854a3a-2127-422b-91ae-364da2661108)
• https://github.com/Kong/kong/discussions/11741 Issue Tracking (af854a3a-2127-422b-91ae-364da2661108)
• https://github.com/advisories/GHSA-qppj-fm5r-hxr3 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
• https://github.com/advisories/GHSA-vx74-f528-fxqg Mitigation, Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
• https://github.com/advisories/GHSA-xpw8-rcwv-8f8p Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
• https://github.com/akka/akka-http/issues/4323 Issue Tracking (af854a3a-2127-422b-91ae-364da2661108)
• https://github.com/alibaba/tengine/issues/1872 Issue Tracking (af854a3a-2127-422b-91ae-364da2661108)
• https://github.com/apache/apisix/issues/10320 Issue Tracking (af854a3a-2127-422b-91ae-364da2661108)
• https://github.com/apache/httpd-site/pull/10 Issue Tracking (af854a3a-2127-422b-91ae-364da2661108)
• https://github.com/apache/httpd/blob/afcdbeebbff4b0c50ea26cdd16e178c0d1f24152/modules/http2/h2_mplx.c#L1101-L1113 Product (af854a3a-2127-422b-91ae-364da2661108)
• https://github.com/apache/tomcat/tree/main/java/org/apache/coyote/http2 Product, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
• https://github.com/apache/trafficserver/pull/10564 Issue Tracking, Patch (af854a3a-2127-422b-91ae-364da2661108)
• https://github.com/arkrwn/PoC/tree/main/CVE-2023-44487 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
• https://github.com/bcdannyboy/CVE-2023-44487 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
• https://github.com/caddyserver/caddy/issues/5877 Issue Tracking, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
• https://github.com/caddyserver/caddy/releases/tag/v2.7.5 Release Notes, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
• https://github.com/dotnet/announcements/issues/277 Issue Tracking, Mitigation, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
• https://github.com/dotnet/core/blob/e4613450ea0da7fd2fc6b61dfb2c1c1dec1ce9ec/release-notes/6.0/6.0.23/6.0.23.md?plain=1#L73 Product, Release Notes (af854a3a-2127-422b-91ae-364da2661108)
• https://github.com/eclipse/jetty.project/issues/10679 Issue Tracking (af854a3a-2127-422b-91ae-364da2661108)
• https://github.com/envoyproxy/envoy/pull/30055 Issue Tracking, Patch (af854a3a-2127-422b-91ae-364da2661108)
• https://github.com/etcd-io/etcd/issues/16740 Issue Tracking, Patch (af854a3a-2127-422b-91ae-364da2661108)
• https://github.com/facebook/proxygen/pull/466 Issue Tracking, Patch (af854a3a-2127-422b-91ae-364da2661108)
• https://github.com/golang/go/issues/63417 Issue Tracking (af854a3a-2127-422b-91ae-364da2661108)
• https://github.com/grpc/grpc-go/pull/6703 Issue Tracking, Patch (af854a3a-2127-422b-91ae-364da2661108)
• https://github.com/h2o/h2o/pull/3291 Issue Tracking, Patch (af854a3a-2127-422b-91ae-364da2661108)
• https://github.com/h2o/h2o/security/advisories/GHSA-2m7v-gc89-fjqf Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
• https://github.com/haproxy/haproxy/issues/2312 Issue Tracking (af854a3a-2127-422b-91ae-364da2661108)
• https://github.com/icing/mod_h2/blob/0a864782af0a942aa2ad4ed960a6b32cd35bcf0a/mod_http2/README.md?plain=1#L239-L244 Product (af854a3a-2127-422b-91ae-364da2661108)
• https://github.com/junkurihara/rust-rpxy/issues/97 Issue Tracking (af854a3a-2127-422b-91ae-364da2661108)
• https://github.com/kazu-yamamoto/http2/commit/f61d41a502bd0f60eb24e1ce14edc7b6df6722a1 Patch (af854a3a-2127-422b-91ae-364da2661108)
• https://github.com/kazu-yamamoto/http2/issues/93 Issue Tracking (af854a3a-2127-422b-91ae-364da2661108)
• https://github.com/kubernetes/kubernetes/pull/121120 Issue Tracking, Patch (af854a3a-2127-422b-91ae-364da2661108)
• https://github.com/line/armeria/pull/5232 Issue Tracking, Patch (af854a3a-2127-422b-91ae-364da2661108)
• https://github.com/linkerd/website/pull/1695/commits/4b9c6836471bc8270ab48aae6fd2181bc73fd632 Patch (af854a3a-2127-422b-91ae-364da2661108)
• https://github.com/micrictor/http2-rst-stream Exploit, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
• https://github.com/microsoft/CBL-Mariner/pull/6381 Issue Tracking, Patch (af854a3a-2127-422b-91ae-364da2661108)
• https://github.com/netty/netty/commit/58f75f665aa81a8cbcf6ffa74820042a285c5e61 Patch (af854a3a-2127-422b-91ae-364da2661108)
• https://github.com/nghttp2/nghttp2/pull/1961 Issue Tracking, Patch (af854a3a-2127-422b-91ae-364da2661108)
• https://github.com/nghttp2/nghttp2/releases/tag/v1.57.0 Release Notes (af854a3a-2127-422b-91ae-364da2661108)
• https://github.com/ninenines/cowboy/issues/1615 Issue Tracking (af854a3a-2127-422b-91ae-364da2661108)
• https://github.com/nodejs/node/pull/50121 Issue Tracking (af854a3a-2127-422b-91ae-364da2661108)
• https://github.com/openresty/openresty/issues/930 Issue Tracking (af854a3a-2127-422b-91ae-364da2661108)
• https://github.com/opensearch-project/data-prepper/issues/3474 Issue Tracking, Patch (af854a3a-2127-422b-91ae-364da2661108)
• https://github.com/oqtane/oqtane.framework/discussions/3367 Issue Tracking (af854a3a-2127-422b-91ae-364da2661108)
• https://github.com/projectcontour/contour/pull/5826 Issue Tracking, Patch (af854a3a-2127-422b-91ae-364da2661108)
• https://github.com/tempesta-tech/tempesta/issues/1986 Issue Tracking (af854a3a-2127-422b-91ae-364da2661108)
• https://github.com/varnishcache/varnish-cache/issues/3996 Issue Tracking (af854a3a-2127-422b-91ae-364da2661108)
• https://groups.google.com/g/golang-announce/c/iNNxDTCjZvo Mailing List, Release Notes, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
• https://istio.io/latest/news/security/istio-security-2023-004/ Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
• https://linkerd.io/2023/10/12/linkerd-cve-2023-44487/ Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
• https://lists.apache.org/thread/5py8h42mxfsn8l1wy6o41xwhsjlsd87q Mailing List (af854a3a-2127-422b-91ae-364da2661108)
• https://lists.debian.org/debian-lts-announce/2023/10/msg00020.html Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
• https://lists.debian.org/debian-lts-announce/2023/10/msg00023.html Mailing List (af854a3a-2127-422b-91ae-364da2661108)
• https://lists.debian.org/debian-lts-announce/2023/10/msg00024.html Mailing List (af854a3a-2127-422b-91ae-364da2661108)
• https://lists.debian.org/debian-lts-announce/2023/10/msg00045.html Mailing List (af854a3a-2127-422b-91ae-364da2661108)
• https://lists.debian.org/debian-lts-announce/2023/10/msg00047.html Mailing List (af854a3a-2127-422b-91ae-364da2661108)
• https://lists.debian.org/debian-lts-announce/2023/11/msg00001.html Mailing List (af854a3a-2127-422b-91ae-364da2661108)
• https://lists.debian.org/debian-lts-announce/2023/11/msg00012.html Mailing List (af854a3a-2127-422b-91ae-364da2661108)
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2MBEPPC36UBVOZZNAXFHKLFGSLCMN5LI/ Mailing List (af854a3a-2127-422b-91ae-364da2661108)
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3N4NJ7FR4X4FPZUGNTQAPSTVB2HB2Y4A/ Mailing List (af854a3a-2127-422b-91ae-364da2661108)
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BFQD3KUEMFBHPAPBGLWQC34L4OWL5HAZ/ Mailing List (af854a3a-2127-422b-91ae-364da2661108)
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CLB4TW7KALB3EEQWNWCN7OUIWWVWWCG2/ Mailing List (af854a3a-2127-422b-91ae-364da2661108)
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E72T67UPDRXHIDLO3OROR25YAMN4GGW5/ Mailing List (af854a3a-2127-422b-91ae-364da2661108)
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FNA62Q767CFAFHBCDKYNPBMZWB7TWYVU/ Mailing List (af854a3a-2127-422b-91ae-364da2661108)
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HT7T2R4MQKLIF4ODV4BDLPARWFPCJ5CZ/ Mailing List (af854a3a-2127-422b-91ae-364da2661108)
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JIZSEFC3YKCGABA2BZW6ZJRMDZJMB7PJ/ Mailing List (af854a3a-2127-422b-91ae-364da2661108)
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JMEXY22BFG5Q64HQCM5CK2Q7KDKVV4TY/ Mailing List (af854a3a-2127-422b-91ae-364da2661108)
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KSEGD2IWKNUO3DWY4KQGUQM5BISRWHQE/ Mailing List (af854a3a-2127-422b-91ae-364da2661108)
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LKYHSZQFDNR7RSA7LHVLLIAQMVYCUGBG/ Mailing List (af854a3a-2127-422b-91ae-364da2661108)
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LNMZJCDHGLJJLXO4OXWJMTVQRNWOC7UL/ Mailing List (af854a3a-2127-422b-91ae-364da2661108)
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VHUHTSXLXGXS7JYKBXTA3VINUPHTNGVU/ Mailing List (af854a3a-2127-422b-91ae-364da2661108)
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VSRDIV77HNKUSM7SJC5BKE5JSHLHU2NK/ Mailing List (af854a3a-2127-422b-91ae-364da2661108)
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WE2I52RHNNU42PX6NZ2RBUHSFFJ2LVZX/ Mailing List (af854a3a-2127-422b-91ae-364da2661108)
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WLPRQ5TWUQQXYWBJM7ECYDAIL2YVKIUH/ Mailing List (af854a3a-2127-422b-91ae-364da2661108)
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X6QXN4ORIVF6XBW4WWFE7VNPVC74S45Y/ Mailing List (af854a3a-2127-422b-91ae-364da2661108)
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XFOIBB4YFICHDM7IBOP7PWXW3FX4HLL2/ Mailing List (af854a3a-2127-422b-91ae-364da2661108)
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZB43REMKRQR62NJEI7I5NQ4FSXNLBKRT/ Mailing List (af854a3a-2127-422b-91ae-364da2661108)
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZKQSIKIAT5TJ3WSLU3RDBQ35YX4GY4V3/ Mailing List (af854a3a-2127-422b-91ae-364da2661108)
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZLU6U2R2IC2K64NDPNMV55AUAO65MAF4/ Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
• https://lists.w3.org/Archives/Public/ietf-http-wg/2023OctDec/0025.html Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
• https://mailman.nginx.org/pipermail/nginx-devel/2023-October/S36Q5HBXR7CAIMPLLPRSSSYR4PCMWILK.html Mailing List, Patch, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
• https://martinthomson.github.io/h2-stream-limits/draft-thomson-httpbis-h2-stream-limits.html Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
• https://msrc.microsoft.com/blog/2023/10/microsoft-response-to-distributed-denial-of-service-ddos-attacks-against-http/2/ Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-44487 Mitigation, Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
• https://my.f5.com/manage/s/article/K000137106 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
• https://netty.io/news/2023/10/10/4-1-100-Final.html Release Notes, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
• https://news.ycombinator.com/item?id=37830987 Issue Tracking (af854a3a-2127-422b-91ae-364da2661108)
• https://news.ycombinator.com/item?id=37830998 Issue Tracking, Press/Media Coverage (af854a3a-2127-422b-91ae-364da2661108)
• https://news.ycombinator.com/item?id=37831062 Issue Tracking (af854a3a-2127-422b-91ae-364da2661108)
• https://news.ycombinator.com/item?id=37837043 Issue Tracking (af854a3a-2127-422b-91ae-364da2661108)
• https://openssf.org/blog/2023/10/10/http-2-rapid-reset-vulnerability-highlights-need-for-rapid-response/ Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
• https://seanmonstar.com/post/730794151136935936/hyper-http2-rapid-reset-unaffected Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
• https://security.gentoo.org/glsa/202311-09 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
• https://security.netapp.com/advisory/ntap-20231016-0001/ Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
• https://security.netapp.com/advisory/ntap-20240426-0007/ Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
• https://security.netapp.com/advisory/ntap-20240621-0006/ Exploit, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
• https://security.netapp.com/advisory/ntap-20240621-0007/ Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
• https://security.paloaltonetworks.com/CVE-2023-44487 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
• https://tomcat.apache.org/security-10.html#Fixed_in_Apache_Tomcat_10.1.14 Release Notes (af854a3a-2127-422b-91ae-364da2661108)
• https://ubuntu.com/security/CVE-2023-44487 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
• https://www.bleepingcomputer.com/news/security/new-http-2-rapid-reset-zero-day-attack-breaks-ddos-records/ Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
• https://www.cisa.gov/news-events/alerts/2023/10/10/http2-rapid-reset-vulnerability-cve-2023-44487 Third Party Advisory, US Government Resource (af854a3a-2127-422b-91ae-364da2661108)
• https://www.darkreading.com/cloud/internet-wide-zero-day-bug-fuels-largest-ever-ddos-event Press/Media Coverage, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
• https://www.debian.org/security/2023/dsa-5521 Mailing List, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
• https://www.debian.org/security/2023/dsa-5522 Mailing List, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
• https://www.debian.org/security/2023/dsa-5540 Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
• https://www.debian.org/security/2023/dsa-5549 Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
• https://www.debian.org/security/2023/dsa-5558 Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
• https://www.debian.org/security/2023/dsa-5570 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
• https://www.haproxy.com/blog/haproxy-is-not-affected-by-the-http-2-rapid-reset-attack-cve-2023-44487 Third Party Advisory, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
• https://www.netlify.com/blog/netlify-successfully-mitigates-cve-2023-44487/ Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
• https://www.nginx.com/blog/http-2-rapid-reset-attack-impacting-f5-nginx-products/ Mitigation, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
• https://www.openwall.com/lists/oss-security/2023/10/10/6 Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
• https://www.phoronix.com/news/HTTP2-Rapid-Reset-Attack Press/Media Coverage (af854a3a-2127-422b-91ae-364da2661108)
• https://www.theregister.com/2023/10/10/http2_rapid_reset_zeroday/ Press/Media Coverage, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
• https://www.vicarius.io/vsociety/posts/rapid-reset-cve-2023-44487-dos-in-http2-understanding-the-root-cause Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)