6 matches found
QUIC-attacks
QUIC 공격 CVE-2022-30591 이 저장소는 교육 목적으로 사용한 스크립트를 공유하기 위해 제공됩니다. 이러한 공격은 우리 연구의 일부였으며여기 참조, 6개의 QUIC 지원 서버IIS, NGINX, LiteSpeed, Cloudflare, H2O, Caddy에 대해 테스트되었습니다. quic-loris 스크립트는 quic-go 라이브러리에 영향을 미친 CVE-2022-30591 문제의 익스플로잇입니다. 이 스크립트는 Caddy 서버에 대해서도 악용될 수 있습니다. 설치 절차 이러한 공격을 수행하기 위해 Ubuntu...
Linux Distros Unpatched Vulnerability : CVE-2022-30591
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - quic-go through 0.27.0 allows remote attackers to cause a denial of service CPU consumption via a Slowloris variant in which incomplete QUIC or HTTP/3 requests...
CVE-2022-30591
quic-go through 0.27.0 allows remote attackers to cause a denial of service CPU consumption via a Slowloris variant in which incomplete QUIC or HTTP/3 requests are sent. This occurs because mtudiscoverer.go misparses the MTU Discovery service and consequently overflows the probe timer. NOTE: the...
CVE-2022-30591
creationtimestamp| type| source ---|---|--- 2022-07-06 16:20:58+00:00| seen| https://t.me/cibsecurity/45649...
CVE-2022-30591
CVE-2022-30591 affects quic-go up to version 0.27.0. The issue is a denial of service via a Slowloris-like workload, caused by mtu_discoverer.go misparsing the MTU Discovery service, leading to an overflow of the probe timer. Exploitation details are not provided in the documents; no patch/versio...