1. Home
  2. Security Advisories
  3. Fedora
  4. FEDORA-2023-ed2642fd58

[FEDORA-2023-ed2642fd58] Fedora 38: nghttp2

Severity High
Affected Packages 1
CVEs 1
Info Packages References Vulnerabilities
  • fix HTTP/2 Rapid Reset (CVE-2023-44487)
Package Affected Version
pkg:rpm/fedora/nghttp2?distro=fedora-38 < 1.52.0.2.fc38
ID
FEDORA-2023-ed2642fd58
Severity
high
Severity from
CVE-2023-44487
URL
https://bodhi.fedoraproject.org/updates/FEDORA-2023-ed2642fd58
Published
2023-10-15T01:44:28
(11 months ago)
Modified
2023-10-15T01:44:28
(11 months ago)
Rights
Copyright 2023 Red Hat, Inc.
Other Advisories
Source # ID Name URL
Bugzilla 2242803 Bug #2242803 - CVE-2023-44487 HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) https://bugzilla.redhat.com/show_bug.cgi?id=2242803
Type Package URL Namespace Name / Product Version Distribution / Platform Arch Patch / Fix
Affected pkg:rpm/fedora/nghttp2?distro=fedora-38 fedora nghttp2 < 1.52.0.2.fc38 fedora-38
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories Exploits PoC Pubblication Date Modification Date
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories PoC Pubblication Date Modification Date