Description (CNA)
Quicly, an IETF QUIC protocol implementation, is susceptible to a denial-of-service attack prior to commit d9d3df6a8530a102b57d840e39b0311ce5c9e14e. A remote attacker can exploit these bugs to trigger an assertion failure that crashes process using Quicly. Commit d9d3df6a8530a102b57d840e39b0311ce5c9e14e fixes the issue.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| h2o / quicly | affected < d9d3df6 |
CWE
CWE-20
References
- https://github.com/h2o/quicly/security/advisories/GHSA-wr3c-345m-43v9
- https://github.com/h2o/quicly/commit/d9d3df6a8530a102b57d840e39b0311ce5c9e14e
ADP enrichment
No English description supplied.
No references supplied.