What to know about the HTTP/2 Rapid Reset DDoS attacks

Cisco Talos is actively tracking the novel distributed denial-of-service (DDoS) attacks cloud services provider Cloudflare disclosed earlier this week. The techniques described in Cloudflare’s blog post resulted in a record-breaking DDoS attack and could facilitate much larger attacks in the future. 

CVE-2023-44487

CVE-2023-44487, a vulnerability in the HTTP/2 protocol, was recently used to launch intensive DDoS attacks against several targets. The problem lies in the way that HTTP/2 protocol handles request cancellations or resets. When a client issues a …

2 rapid reset attack attacks blog blog post breaking cisco cisco talos cloud cloudflare cloud services cloud services provider cve ddos ddos attack ddos attacks distributed future http novel protocol rapid rapid reset record reset service services talos techniques tracking vulnerability week