CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

5 matches found

CVE•added 2025/08/01 12:0 a.m.•41 views

CVE-2025-54939

CVE-2025-54939 affects the LiteSpeed QUIC (LSQUIC) Library prior to 4.3.1, where a memory leak in the lsquic_engine_packet_in path can cause linear memory growth and potential DoS. The vulnerability is triggered by mis-handling coalesced QUIC Initial packets before a handshake, leading to memory ...

7.5CVSS7.2AI score0.00766EPSS

Exploits1References4Affected Software4

Vulnrichment•added 2025/08/01 12:0 a.m.•4 views

CVE-2025-54939

LiteSpeed QUIC LSQUIC Library before 4.3.1 has an lsquicenginepacketin memory leak...

5.3CVSS6.5AI score0.00766EPSS

Exploits1References4

RedhatCVE•added 2025/05/23 9:45 a.m.•9 views

CVE-2024-25678

In LiteSpeed QUIC LSQUIC Library before 4.0.4, DCID validation is mishandled...

9.8CVSS7AI score0.00353EPSS

Exploits0References1

Positive Technologies•added 2024/02/09 12:0 a.m.•11 views

PT-2024-21086 · Litespeed · Lsquic

Name of the Vulnerable Software and Affected Versions: LiteSpeed QUIC LSQUIC Library versions prior to 4.0.4 Description: The issue is related to mishandled DCID validation. Recommendations: For versions prior to 4.0.4, update to version 4.0.4 or later to resolve the issue...

9.8CVSS9.3AI score0.00353EPSS

Exploits0References8