Vulnerabilities

CVSS

7.5 High

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Risk score

100.0

Known exploited

CISA KEV

Published

2023-10-10

Status

Analyzed

The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

Weaknesses

CWE-400

Coverage 2

threat-intel

Multiples vulnérabilités dans les produits IBM (21 août 2026)

Multiple vulnerabilities have been discovered in IBM products, including remote code execution, privilege escalation, and denial-of-service vulnerabilities. Several CVEs have been assigned, covering a wide range of IBM s…

CERT-FR · Aug 21, 2026 High

CVE-2023-44487CVE-2025-12817CVE-2025-12818vulnerabilityremote code executiondata breach

vulnerability

Multiples vulnérabilités dans les produits IBM (14 août 2026)

Multiple vulnerabilities have been discovered in IBM products, including remote code execution, privilege escalation, and denial-of-service attacks. These vulnerabilities affect a wide range of IBM products, including Db…

CERT-FR · Aug 14, 2026 High

CVE-2021-23337CVE-2023-44487CVE-2024-3651vulnerabilitysecuritypatch

All articles mentioning it

Advisories and references

• openwall.com/lists/oss-security/2023/10/10/6
• openwall.com/lists/oss-security/2023/10/10/7
• openwall.com/lists/oss-security/2023/10/13/4
• openwall.com/lists/oss-security/2023/10/13/9
• openwall.com/lists/oss-security/2023/10/18/4
• openwall.com/lists/oss-security/2023/10/18/8
• openwall.com/lists/oss-security/2023/10/19/6
• openwall.com/lists/oss-security/2023/10/20/8
• access.redhat.com/security/cve/cve-2023-44487
• arstechnica.com/security/2023/10/how-ddosers-used-the-http-2-protoco...