CVE-2024-27983 PoC — Node.js 安全漏洞

Source

https://github.com/lirantal/CVE-2024-27983-nodejs-http2

Associated Vulnerability

Title:Node.js 安全漏洞 (CVE-2024-27983)
Description:An attacker can make the Node.js HTTP/2 server completely unavailable by sending a small amount of HTTP/2 frames packets with a few HTTP/2 frames inside. It is possible to leave some data in nghttp2 memory after reset when headers with HTTP/2 CONTINUATION frame are sent to the server and then a TCP connection is abruptly closed by the client triggering the Http2Session destructor while header frames are still being processed (and stored in memory) causing a race condition.

Description

CVE-2024-27983 this repository builds up a vulnerable HTTP2 Node.js server (`server-nossl.js`) based on CVE-2024-27983 which exploits a continuation flood vulnerability in HTTP2 servers.

Readme

This repository builds up a vulnerable HTTP2 Node.js server (`server-nossl.js`) based on CVE-2024-27983 which exploits a continuation flood vulnerability in HTTP2 servers.

Notes:

- `server.js` is found not vulnerable due to the use of SSL certificates.
- `server-nossl.js` is vulnerable to the continuation flood attack.
- `client.js` is a small client script to test the HTTP2 server.
- `exploits/` contains the exploit code for the vulnerability based on the [HackerOne report](https://hackerone.com/reports/2319584).

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!