QUIC-attacks

QUIC-attacks CVE-2022-30591 本仓库用于分享我们在教育用途中使用的脚本。这些攻击是我们研究的一部分（参见此处），并针对 6 个支持 QUIC 的服务器（IIS、NGINX、LiteSpeed、Cloudflare、H2O 和 Caddy）进行了测试。quic-loris 脚本是利用影响 quic-go 库的 CVE-2022-30591 问题的漏洞利用脚本。该脚本也可用于攻击 Caddy 服务器。 安装步骤 为了实施这些攻击，我们使用了 Ubuntu 18.04 客户端，并借助 aioquic Python 库进行 QUIC-loris 和...

Linux Distros Unpatched Vulnerability : CVE-2022-30591

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - quic-go through 0.27.0 allows remote attackers to cause a denial of service CPU consumption via a Slowloris variant in which incomplete QUIC or HTTP/3 requests...

CVE-2022-30591

quic-go through 0.27.0 allows remote attackers to cause a denial of service CPU consumption via a Slowloris variant in which incomplete QUIC or HTTP/3 requests are sent. This occurs because mtudiscoverer.go misparses the MTU Discovery service and consequently overflows the probe timer. NOTE: the...

CVE-2022-30591

creationtimestamp| type| source ---|---|--- 2022-07-06 16:20:58+00:00| seen| https://t.me/cibsecurity/45649...

CVE-2022-30591

CVE-2022-30591 affects quic-go up to version 0.27.0. The issue is a denial of service via a Slowloris-like workload, caused by mtu_discoverer.go misparsing the MTU Discovery service, leading to an overflow of the probe timer. Exploitation details are not provided in the documents; no patch/versio...

Exploit for Uncontrolled Resource Consumption in Quic-Go_Project Quic-Go

QUIC-attacks CVE-2022-30591 The current repository serves t...