{"id":7372,"date":"2023-10-11T23:24:12","date_gmt":"2023-10-11T23:24:12","guid":{"rendered":"https:\/\/sekuritasit.com\/index.php\/2023\/10\/11\/http-2-rapid-reset-attack\/"},"modified":"2023-10-11T23:24:12","modified_gmt":"2023-10-11T23:24:12","slug":"http-2-rapid-reset-attack","status":"publish","type":"post","link":"https:\/\/sekuritasit.com\/index.php\/2023\/10\/11\/http-2-rapid-reset-attack\/","title":{"rendered":"HTTP\/2 Rapid Reset Attack"},"content":{"rendered":"

What is HTTP\/2?
\n HTTP\/2 is a network protocol used by the World Wide Web that
\nreduces latency by allowing multiple concurrent exchanges on the same
\nconnection.
\n What is the Attack?
\n A newly identified Distributed Denial-of-Service (DDoS)
\nattack technique is used in the wild. This DDoS attack, known as ‘HTTP\/2 Rapid
\nReset’, leverages a flaw in the implementation of protocol HTTP\/2.This HTTP\/2 vulnerability allows malicious actors to launch
\na DDoS attack targeting HTTP\/2 servers. The attack sends a set number of HTTP
\nrequests, to generate a high volume of traffic on the targeted HTTP\/2 servers.
\nAttackers can cause a significant increase in the request per second and high
\nCPU utilization on the servers that eventually can cause resource exhaustion.
\n Why is this Significant?
\n According to a Google blog post on Oct 10, 2023, the largest
\nattack reached up to 398 million requests per second. CISA has also released an
\nadvisory for this DDoS attack on the same day.
\nhttps:\/\/www.cisa.gov\/news-events\/alerts\/2023\/10\/10\/http2-rapid-reset-vulnerability-cve-2023-44487
\n What is the Vendor Solution?
\n The web services deployed with HTTP\/2 should check if there
\nare available patches and other mitigations.
\n What FortiGuard Coverage is available?
\nFortiGuard recommends using
\napplication layer protection service such as Web Application Firewall (WAF) to
\nprotect web applications against network attacks. Also, recommends using
\nApplication Delivery service for load balancing and generally improving
\nsecurity posture.FortiGuard also recommends
\nrestricting Internet access to specific sources as needed and applicable.
\nhttps:\/\/www.fortinet.com\/products\/web-application-firewall\/fortiweb
\nhttps:\/\/www.fortinet.com\/products\/application-delivery-controller\/fortiadcRead More<\/a>\u00a0<\/p>","protected":false},"excerpt":{"rendered":"

What is HTTP\/2? HTTP\/2 is a network protocol used by the World Wide Web that reduces latency by allowing multiple concurrent exchanges on the same connection. What is the Attack? A newly identified Distributed Denial-of-Service (DDoS) attack technique is used in the wild. This DDoS attack, known as ‘HTTP\/2 Rapid Reset’, leverages a flaw in […]<\/p>\n","protected":false},"author":0,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"footnotes":""},"categories":[1],"tags":[],"class_list":["post-7372","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t