8 matches found
CVE-2026-18798
CVE-2026-18798 is a double free (CWE-415) in the OpenSSL QUIC stack. When a QUIC server processes an INITIAL packet carrying a DCID shorter than 8 bytes , port_bind_channel() fails after enrolling the DCID and frees the QRX object. The caller port_default_packet_handler() then frees the same QRX ...
CVE-2024-25678
In LiteSpeed QUIC LSQUIC Library before 4.0.4, DCID validation is mishandled...
CVE-2024-25678
In LiteSpeed QUIC LSQUIC Library before 4.0.4, DCID validation is mishandled...
Design/Logic Flaw
In LiteSpeed QUIC LSQUIC Library before 4.0.4, DCID validation is mishandled...
CVE-2024-25678
In LiteSpeed QUIC LSQUIC Library before 4.0.4, DCID validation is mishandled...
CVE-2024-25678
In LiteSpeed QUIC LSQUIC Library before 4.0.4, DCID validation is mishandled...
PT-2024-21086 · Litespeed · Lsquic
Name of the Vulnerable Software and Affected Versions: LiteSpeed QUIC LSQUIC Library versions prior to 4.0.4 Description: The issue is related to mishandled DCID validation. Recommendations: For versions prior to 4.0.4, update to version 4.0.4 or later to resolve the issue...
