CVE-2023-44487

HighCVSS 7.5/10Known exploited (CISA KEV)Last modified Aug 11, 2026

Description

The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-400

Affected software

No affected versions have been published.

Timeline

Published: Oct 10, 2023
Last modified: Aug 11, 2026
Added to CISA KEV: Oct 10, 2023
NVD status: Analyzed

Related CVEs from 2023

CVE-2023-444887.5VP9 in libvpx before 1.13.1 mishandles widths, leading to a crash related to encoding.CVE-2023-44498.8A vulnerability was found in SourceCodester Free and Open Source Inventory Management System 1.0. It has been classified as critical. Affect CVE-2023-44509.8A vulnerability was found in jeecgboot JimuReport up to 1.6.0. It has been declared as critical. Affected by this vulnerability is an unknow CVE-2023-44516.1Cross-site Scripting (XSS) - Reflected in GitHub repository cockpit-hq/cockpit prior to 2.6.4.CVE-2023-44527.5A vulnerability has been identified in the EDR-810, EDR-G902, and EDR-G903 Series, making them vulnerable to the denial-of-service vulnerab CVE-2023-44535.4Cross-site Scripting (XSS) - Reflected in GitHub repository pimcore/pimcore prior to 10.6.8.CVE-2023-44545.7Cross-Site Request Forgery (CSRF) in GitHub repository wallabag/wallabag prior to 2.6.3.CVE-2023-44556.5Cross-Site Request Forgery (CSRF) in GitHub repository wallabag/wallabag prior to 2.6.3.CVE-2023-44566.5A flaw was found in openshift-logging LokiStack. The key used for caching is just the token, which is too broad. This issue allows a user wi CVE-2023-44577.5Grafana is an open-source platform for monitoring and observability. The Google Sheets data source plugin for Grafana, versions 0.9.0 to 1.CVE-2023-44587.5A flaw was found within the parsing of extended attributes in the kernel ksmbd module. The issue results from the lack of proper validation CVE-2023-44595.5A NULL pointer dereference flaw was found in vmxnet3_rq_cleanup in drivers/net/vmxnet3/vmxnet3_drv.c in the networking sub-component in vmxn