A vulnerability in HTTP/2 protocol implementations that simplifies the execution of DoS attacks
A new type of attack against HTTP/2 protocol implementations has been introduced, simplifying the execution of denial of service attacks through server resource exhaustion. The vulnerability has been codenamed MadeYouReset and allows the flooding of the server with a large number of requests circumventing established limits through manipulation of HTTP/2 control frames. The essence of the problem is that a client can create a very large number of simultaneously processed streams, […]
