writeups.xyz / HTTP/2 CONTINUATION Flood: Technical Details

Submitter : c2a

Date: 3 April 2024

Bounty : undisclosed

Vulnerabilities :

• HTTP/2 CONTINUATION Flood
• DDoS

Programs :

• Golang
• Node.js
• Apache Tomcat
• Apache HTTP Server
• Apache Traffic Server
• IBM (WebSphere)
• Mozilla (Thunderbird)
• Envoy
• Tempesta FW
• H2 (Rust Crate)
• CERT/CC

Authors :

• Bartek Nowotarski

Link :
https://nowotarski.info/http2-continuation-flood-technical-details/