Security Vulnerabilities issues

0
Hello there! thank you in advance I am working in a project we have deployed the project on aws cloud during the security testing we found some vulnerabilities like "A client might overload the server by issue frequent RST frames. This can cause a massive amount of load on the remote system and so cause a DDOS attack. ### ImpactThis is a DDOS attack, any http2 server is affected and so you should update as soon as possible.### PatchesThis is patched in version 4.1.100.Final.### WorkaroundsA user can limit the amount of RST frames that are accepted per connection over a timeframe manually using either an own `Http2FrameListener` implementation or an `ChannelInboundHandler` implementation (depending which http2 API is used).### References- https://www.cve.org/CVERecord?id=CVE-2023-44487- https://blog.cloudflare.com/technical-breakdown-http2-rapid-reset-ddos-attack/- https://cloud.google.com/blog/products/identity-security/google-cloud-mitigated-largest-ddos-attack-peaking-above-398-million-rps/ "   This is the Package "io.netty:netty-codec-http2" that i have updated and even after I have upgraded the version the vulnerability still remains is there any way i can resolve the issue.
asked
0 answers