Ietf vulnerabilities1 known to be exploited.
Ietf has 16 published vulnerabilities across 11 products in our catalogue. 1 of them is on the list of flaws known to be exploited, so criminals are using them now. The most affected product is Ipv6, with 4. If you run Ietf software, patch the exploited flaws first.
The most recent Ietf flaw added to the known-exploited list is CVE-2023-44487, on 10 October 2023. We keep watching the known-exploited list.
Which Ietf products have the most vulnerabilities?
Ipv6 leads with 4 published vulnerabilities. Open a product to see its versions and which of its flaws criminals are already using.
Which Ietf vulnerabilities are being exploited?
1 flaw is on the government list of vulnerabilities known to be exploited. These are the ones criminals are using now, so they go first, whatever their severity score says.
- 7.5HTTP/2 Rapid Reset Attack Vulnerability
HTTP/2 contains a rapid reset vulnerability that allows for a distributed denial-of-service attack (DDoS).
Which Ietf flaws are most likely to be used?
Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.
- >99%
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
- 9.9%CVE-2004-2761Critical
The MD5 Message-Digest Algorithm is not collision resistant, which makes it easier for context-dependent attackers to conduct spoofing attacks, as demonstrated by attacks on the use of MD5 in the signature algorithm...
- 5.0%CVE-2007-2242High
The IPv6 protocol allows remote attackers to cause a denial of service via crafted IPv6 type 0 route headers (IPV6_RTHDR_TYPE_0) that create network amplification between two routers.
- 3.0%CVE-2018-5389Medium
The Internet Key Exchange v1 main mode is vulnerable to offline dictionary or brute force attacks.
- 2.8%CVE-2016-10142High
An issue was discovered in the IPv6 protocol specification, related to ICMP Packet Too Big (PTB) messages.
- 1.9%CVE-2015-8960High
The TLS protocol 1.2 and earlier supports the rsa_fixed_dh, dss_fixed_dh, rsa_fixed_ecdh, and ecdsa_fixed_ecdh values for ClientCertificateType but does not directly document the ability to compute the master secret...
- 1.6%CVE-2024-7595Medium
GRE and GRE6 Protocols (RFC2784) do not validate or verify the source of a network packet allowing an attacker to spoof and route arbitrary traffic via an exposed network interface that can lead to spoofing, access...
- 1.0%CVE-2025-23018Medium
IPv4-in-IPv6 and IPv6-in-IPv6 tunneling (RFC 2473) do not require the validation or verification of the source of a network packet, allowing an attacker to spoof and route arbitrary traffic via an exposed network...
- 1.0%CVE-2025-23019Medium
IPv6-in-IPv4 tunneling (RFC 4213) allows an attacker to spoof and route traffic via an exposed network interface.
- 0.9%CVE-2020-20949Medium
Bleichenbacher's attack on PKCS #1 v1.5 padding for RSA in STM32 cryptographic firmware library software expansion for STM32Cube (UM1924).
All Ietf products we track.
5 products, most vulnerabilities first. Find the ones you run, then open a product to see its versions and exploited flaws.
- P802.1qp802.1q4 vulnerabilities1 version
- Public Key Cryptography Standards #1public_key_cryptography_standards_\#12 vulnerabilities1 version
- HTTPhttp1 vulnerability1 version
- Internet Key Exchangeinternet_key_exchange1 vulnerability1 version
- Transport Layer Securitytransport_layer_security1 vulnerability4 versions
This directory lists the 5 Ietf products with at least one tracked version, of 11 in our catalogue.
Running Ietf? We'll keep checking.
Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.
- Tell us what you runPick your software from a list, or let us work it out from your website.
- We match it to every flawOver 400,000 published flaws, checked against your list.
- Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
- Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.
Free plan, no card needed. Nothing to install.
1 flaw being exploited affects software Acme tracks
HTTP/2 contains a rapid reset vulnerability that allows for a distributed denial-of-service attack (DDoS).
- Matched to
- HTTP on Acme's software list
- What to do
- Patch first, then check for signs of use
Sent to the alert recipients Acme chose. Also in the app and to Acme's webhook.
Our catalogue lists 16 published vulnerabilities across 11 products and 8 versions from Ietf. The most recent Ietf flaw added to the known-exploited list is CVE-2023-44487, on 10 October 2023.
1 Ietf vulnerability is on the list of flaws known to be exploited. The most recently added is CVE-2023-44487. The full list is on this page.
Ipv6, with 4 published vulnerabilities. Its own page lists the ones known to be exploited.
Create a Precursor Intelligence account and track the Ietf products you run. We match them against every published flaw, give each one a risk score from 0 to 100 and tell you as soon as we spot one that affects you, by email, in the app or by webhook.