https://aws.amazon.com/security/security-bulletins/AWS-2023-011/
https://news.ycombinator.com/item?id=37831062
https://www.phoronix.com/news/HTTP2-Rapid-Reset-Attack
https://blog.cloudflare.com/zero-day-rapid-reset-http2-record-breaking-ddos-attack/
https://cloud.google.com/blog/products/identity-security/how-it-works-the-novel-http2-rapid-reset-ddos-attack
https://cloud.google.com/blog/products/identity-security/google-cloud-mitigated-largest-ddos-attack-peaking-above-398-million-rps/
https://www.nginx.com/blog/http-2-rapid-reset-attack-impacting-f5-nginx-products/
https://blog.cloudflare.com/technical-breakdown-http2-rapid-reset-ddos-attack/
https://github.com/bcdannyboy/CVE-2023-44487
https://www.bleepingcomputer.com/news/security/new-http-2-rapid-reset-zero-day-attack-breaks-ddos-records/
https://github.com/eclipse/jetty.project/issues/10679
https://github.com/alibaba/tengine/issues/1872
https://forums.swift.org/t/swift-nio-http2-security-update-cve-2023-44487-http-2-dos/67764
https://github.com/netty/netty/commit/58f75f665aa81a8cbcf6ffa74820042a285c5e61
https://github.com/nghttp2/nghttp2/pull/1961
https://news.ycombinator.com/item?id=37830987
https://news.ycombinator.com/item?id=37830998
https://github.com/envoyproxy/envoy/pull/30055
https://github.com/apache/tomcat/tree/main/java/org/apache/coyote/http2
https://github.com/caddyserver/caddy/issues/5877
https://github.com/haproxy/haproxy/issues/2312
https://github.com/hyperium/hyper/issues/3337
https://chaos.social/@icing/111210915918780532
|