VDB
ALSA-2023%3A6746
ALSA-2023%3A6746
PUBLISHED
libnghttp2 is a library implementing the Hypertext Transfer Protocol version 2 (HTTP/2) protocol in C. Security Fix(es): * HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| AlmaLinux:9 | libnghttp2 | 0, 0 |
| AlmaLinux:9 | libnghttp2-devel | 0, 0 |
| AlmaLinux:9 | nghttp2 | 0, 0 |
Timeline
- Nov 7, 2023 CVE Published
- Nov 14, 2023 CVE Updated
- Mar 12, 2026 Distribution Patch
- Mar 12, 2026 Distribution Patch
- Mar 12, 2026 Security Advisory