Collected research

HTTP/2: In-depth analysis of the top four flaws

Imperva Defense Center · Imperva

Analyzes HTTP/2 implementation failures across five servers: stream reuse, slow reads, dependency cycles and HPACK decompression bombs. Multiplexing amplifies resource exhaustion, while repeated references to a large compressed header consume memory. The report details affected implementations, traces vulnerable code paths, and explains how shared libraries also expose Wireshark.

Record

Researcher

Imperva Defense Center

Published by

Imperva

Format

Whitepaper

Topic

HTTP

In the archive

• Collected in the 2016–17 research round

Tags

• http2
• dos
• algorithmic-complexity
• cve
• owasp-a04-2021

This page is the archive's own catalogue record. The research is the work of Imperva Defense Center, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on 10 September 2026.