CVE-2023-46239

quic-go is an implementation of the QUIC protocol in Go. Starting in version 0.37.0 and prior to version 0.37.3, by serializing an ACK frame after the CRYTPO that allows a node to complete the handshake, a remote node could trigger a nil pointer dereference leading to a panic when the node...

CVE-2023-46239

creationtimestamp| type| source ---|---|--- 2023-10-31 19:22:22+00:00| seen| https://t.me/cibsecurity/73255...

CVE-2023-46239

Summary: CVE-2023-46239 affects quic-go (Go implementation of QUIC). From 0.37.0 up to, but not including, 0.37.3, an attacker could trigger a nil pointer dereference by serializing an ACK frame after cryptographic processing that completes the handshake, causing the node to panic when dropping t...