writeups.xyz / HTTP Chunk Extension Processing Vulnerabilities

Submitter : c2a

Date: 8 January 2024

Bounty : undisclosed

Vulnerabilities :

• HTTP/2 CONTINUATION Flood
• DoS

Programs :

• Golang
• Node.js
• Hyper (Rust HTTP Library)
• Puma (Rails HTTP Library)

Authors :

• Bartek Nowotarski

Link :
https://nowotarski.info/http-chunk-extensions/