CVE-2023-44487Vulnerability
HTTP/2 Rapid Reset Attack Vulnerability
Exploited in the wildCISA added it to its Known Exploited Vulnerabilities list on .
Reported by 2 independent sources · first reported by GuidePoint Security · last reported
Last reported yesterday
CISA KEVAdded 10 Oct 2023
Fix due 31 Oct 2023
Used by ransomware: not knownCISA KEV catalogue
Fix due 31 Oct 2023
Used by ransomware: not knownCISA KEV catalogue
EPSS100.0%
higher than 99% of CVEsFIRST EPSS, as of 20 Oct 2026
higher than 99% of CVEsFIRST EPSS, as of 20 Oct 2026
What the reports say
4 reports, newest first · the exact sentence from each-
Multiples vulnérabilités dans les produits IBM (23 octobre 2026)“Référence CVE CVE-2023-44487”
-
Multiples vulnérabilités dans les produits IBM (18 septembre 2026)“Référence CVE CVE-2023-44487”
-
EtherHiding Exposed: Inside a Blockchain-powered Malware Campaign Hiding in Plain Sight“…ncluding CVE-2023-4911 (“Looney Tunables,” a glibc privilege-escalation flaw), CVE-2023-0386 (an OverlayFS privilege escalation) and CVE-2023-44487 (the HTTP/2 “Rapid Reset” denial-of-service flaw).”
-
EtherHiding Exposed: What Security Leaders Need to Know“→ origin server confirmed running 7 CISA KEV-listed CVEs (CVE-2023-4911, CVE-2023-0386, CVE-2022-2586, CVE-2023-44487, plus 2 recent 2026 entries); also carries CVE-2024-6387 (regreSSHion) in the broader vulnerability list”
Indicators reported together
named in the same reports- 1rpc[.]ioin 2 reports
- onemm[.]netin 2 reports
- hivinest[.]onlinein 2 reports
- 3262d48df5d75e34[.]shopin 2 reports
- ddcd62e16a428c8e[.]shopin 2 reports
- 45a3158594d6ba76[.]funin 2 reports
- 82d35f9b891c987a[.]funin 2 reports
- 9082b2a18f2e00fe[.]funin 2 reports
- 67b3ac3e45812153[.]funin 2 reports
- truieparth[.]onlinein 2 reports
- cleearpeyak[.]onlinein 2 reports
- veruisuealx[.]xyzin 2 reports
- folfdighdd[.]xyzin 2 reports
- 37.27.52[.]152in 2 reports
- additionalver[.]comin 2 reports
- promo-chatgpt[.]comin 2 reports
- pleasewaitcenter[.]topin 2 reports
Copy these 17 indicators · defanged
Also named with it: CVE-2023-4911, CVE-2023-0386, CVE-2024-6387
Thanks — we review every report.