New HTTP/2 Bomb Vulnerability Allows Remote DoS on NGINX, Apache, IIS, Envoy & Cloudflare
Researchers at Calif discovered a remote denial-of-service exploit codenamed HTTP/2 Bomb affecting NGINX, Apache HTTPD, Microsoft IIS, Envoy, and Cloudflare Pingora, present in each server's default HTTP/2 configuration and found using OpenAI Codex by...