CVE-2023-44487: HTTP/2 Rapid Reset DDoS
What is the HTTP/2 Rapid Reset attack?
A novel DDoS attack vector exploiting the HTTP/2 RST_STREAM frame. Attackers rapidly open and cancel streams, consuming server resources while minimizing bandwidth usage. Enabled attacks exceeding 398 million requests per second.
Impact & Exploitation
Used in the largest DDoS attacks in history (Google reported 398M rps). Affected every major HTTP/2 implementation including Nginx, Apache, and cloud load balancers.
Precogs Research
This vulnerability intelligence report was analyzed and enriched by the Precogs AI Security Team. Our researchers continuously monitor emerging threats across AI code, LLM pipelines, and binary architectures to ensure accurate real-time remediation guidance.