Skip to content
The Nexus
DossierENTITY

HPACK compression bomb

Coverage of HPACK compression bomb in the Nexus archive.

Earliest in view: Jun 4 · 19:08 UTCMost recent: Jun 4 · 19:08 UTC
Co-mentioned in this coverage
OpenAIorganization1Codextopic1Quang Luongperson1HTTP/2 Bombtopic1Slowloris-style holdtopic1Cloudflareorganization1Microsoftorganization1Apache HTTP Serverorganization1nginxorganization1
Recent coverage
  • SECURITYJun 4 · 19:08 UTCTHE REGISTER
    OpenAI's agent chained decade-old DoS attacks to crash web servers in seconds

    OpenAI's Codex agent discovered a new denial-of-service (DoS) attack named HTTP/2 Bomb, which combines two decade-old techniques to crash vulnerable web servers in seconds. The exploit affects default HTTP/2 configurations on servers like nginx, Apache, and Microsoft IIS, with some vendors having released patches while others dispute the findings.