p PatchFirst

ALPINE-CVE-2023-44487

ALPINE-CVE-2023-44487

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This page shows selected source facts. See the linked advisories for the complete description and affected versions.

The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

CVSS 7.5 · High · Fix available

Published
Updated

Stack: system · web

Affected products and versions

  • lighttpd Alpine:v3.15

    Affected ranges
    • ECOSYSTEM: < 1.4.73-r0

    Update to 1.4.73-r0

  • lighttpd Alpine:v3.16

    Affected ranges
    • ECOSYSTEM: < 1.4.73-r0

    Update to 1.4.73-r0

  • lighttpd Alpine:v3.17

    Affected ranges
    • ECOSYSTEM: < 1.4.73-r0

    Update to 1.4.73-r0

  • nghttp2 Alpine:v3.15

    Affected ranges
    • ECOSYSTEM: < 1.46.0-r2

    Update to 1.46.0-r2

  • nghttp2 Alpine:v3.16

    Affected ranges
    • ECOSYSTEM: < 1.47.0-r2

    Update to 1.47.0-r2

  • nghttp2 Alpine:v3.17

    Affected ranges
    • ECOSYSTEM: < 1.51.0-r2

    Update to 1.51.0-r2

  • nghttp2 Alpine:v3.18

    Affected ranges
    • ECOSYSTEM: < 1.57.0-r0

    Update to 1.57.0-r0

  • nghttp2 Alpine:v3.19

    Affected ranges
    • ECOSYSTEM: < 1.57.0-r0

    Update to 1.57.0-r0

  • nghttp2 Alpine:v3.20

    Affected ranges
    • ECOSYSTEM: < 1.57.0-r0

    Update to 1.57.0-r0

  • nghttp2 Alpine:v3.21

    Affected ranges
    • ECOSYSTEM: < 1.57.0-r0

    Update to 1.57.0-r0

  • nghttp2 Alpine:v3.22

    Affected ranges
    • ECOSYSTEM: < 1.57.0-r0

    Update to 1.57.0-r0

  • nghttp2 Alpine:v3.23

    Affected ranges
    • ECOSYSTEM: < 1.57.0-r0

    Update to 1.57.0-r0

  • nghttp2 Alpine:v3.24

    Affected ranges
    • ECOSYSTEM: < 1.57.0-r0

    Update to 1.57.0-r0

  • nginx Alpine:v3.15

    Affected ranges
    • ECOSYSTEM: ≥ 1.9.5, < 1.20.2-r2

    Update to 1.20.2-r2

  • nginx Alpine:v3.16

    Affected ranges
    • ECOSYSTEM: ≥ 1.9.5, < 1.22.1-r1

    Update to 1.22.1-r1

  • nginx Alpine:v3.17

    Affected ranges
    • ECOSYSTEM: ≥ 1.9.5, < 1.22.1-r1

    Update to 1.22.1-r1

  • nginx Alpine:v3.18

    Affected ranges
    • ECOSYSTEM: ≥ 1.9.5, < 1.24.0-r7

    Update to 1.24.0-r7

  • nginx Alpine:v3.19

    Affected ranges
    • ECOSYSTEM: ≥ 1.9.5, < 1.24.0-r12

    Update to 1.24.0-r12

  • nginx Alpine:v3.20

    Affected ranges
    • ECOSYSTEM: ≥ 1.9.5, < 1.24.0-r12

    Update to 1.24.0-r12

  • nginx Alpine:v3.21

    Affected ranges
    • ECOSYSTEM: ≥ 1.9.5, < 1.24.0-r12

    Update to 1.24.0-r12

  • nginx Alpine:v3.22

    Affected ranges
    • ECOSYSTEM: ≥ 1.9.5, < 1.24.0-r12

    Update to 1.24.0-r12

  • nginx Alpine:v3.23

    Affected ranges
    • ECOSYSTEM: ≥ 1.9.5, < 1.24.0-r12

    Update to 1.24.0-r12

  • nginx Alpine:v3.24

    Affected ranges
    • ECOSYSTEM: ≥ 1.9.5, < 1.24.0-r12

    Update to 1.24.0-r12

  • varnish Alpine:v3.17

    Affected ranges
    • ECOSYSTEM: < 7.3.2-r0

    Update to 7.3.2-r0

Original sources

Check your server →