CVE-2025-8671
HIGHSUSE Linux Enterprise Module for Development Tools - Denial of Service via HTTP/2 Stream Reset
Title source: llmExploitation Summary
EIP tracks 6 public exploits for CVE-2025-8671. PoCs published by moften, ayushghatkar8080, adminlove520.
AI-analyzed exploit summary This repository contains a functional Python-based tool for testing HTTP/2 DDoS vulnerabilities, specifically targeting CVE-2023-44487 (Rapid Reset) and CVE-2025-8671 (MadeYouReset). The tool includes interactive and CLI modes, supports multiple targets, and exports results in JSON/CSV formats.
Description
A mismatch caused by client-triggered server-sent stream resets between HTTP/2 specifications and the internal architectures of some HTTP/2 implementations may result in excessive server resource consumption leading to denial-of-service (DoS). By opening streams and then rapidly triggering the server to reset them—using malformed frames or flow control errors—an attacker can exploit incorrect stream accounting. Streams reset by the server are considered closed at the protocol level, even though backend processing continues. This allows a client to cause the server to handle an unbounded number of concurrent streams on a single connection. This CVE will be updated as affected product details are released.
Exploits (6)
This repository contains a functional Python-based tool for testing HTTP/2 DDoS vulnerabilities, specifically targeting CVE-2023-44487 (Rapid Reset) and CVE-2025-8671 (MadeYouReset). The tool includes interactive and CLI modes, supports multiple targets, and exports results in JSON/CSV formats.
This repository contains a Python-based scanner that checks for the MadeYouReset (CVE-2025-8671) HTTP/2 DoS vulnerability by sending a malformed WINDOW_UPDATE frame and analyzing the server's response. It does not exploit the vulnerability but detects potential susceptibility.
The repository contains functional exploit code for multiple CVEs, including authentication bypass vulnerabilities in TOTOLINK devices and a scanner for Fortinet SSL VPN (CVE-2024-21762). The PoCs demonstrate the vulnerabilities with clear technical details and executable scripts.
This repository contains a functional Python-based PoC for CVE-2025-8671, which targets HTTP/2 implementations by sending malformed frames to trigger potential DoS conditions. The script tests multiple attack vectors, including invalid WINDOW_UPDATE, DATA after END_STREAM, and malformed HEADERS/PRIORITY frames, while logging server responses.
The repository contains a Python-based scanner for CVE-2025-8671, which exploits HTTP/2 stream accounting vulnerabilities by forcing RST_STREAM frames while backend processing continues. It includes statistical analysis for detecting anomalies but does not contain functional exploit code for achieving RCE or other offensive outcomes.
This repository contains a functional PoC for CVE-2025-8671, a DoS vulnerability in lighttpd's HTTP/2 implementation. The script checks for vulnerable versions and can trigger a DoS by sending malformed HTTP/2 streams.
References (17)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H