New HTTP/2 'Made YouReset' Vulnerability Enables Large-Scale DoS Attacks
Researchers Gal Bar Nahum, Anat Bremler-Barr, and Yaniv Harel found that MadeYouReset bypasses the typical server-imposed limit of 100 concurrent HTTP/2 requests per TCP connection, letting an attacker send many thousands of requests and, in some vendor...