2233 matches found
msquic:fuzz: Stack-buffer-overflow in QuicSettingsGlobalSettingsToInternal
Project: https://github.com/microsoft/msquic.git Detailed Report: https://oss-fuzz.com/testcase?key=5679956525187072 Project: msquic Fuzzing Engine: libFuzzer Fuzz Target: fuzz Job Type: libfuzzerasanmsquic Platform Id: linux Crash Type: Stack-buffer-overflow READ 2 Crash Address: 0x7fffbbc3bf48...
Google Chrome 输入验证错误漏洞
Google Chrome is a web browser from Google, Inc. in the United States. A security vulnerability previously existed in Google Chrome version 97.0.4692.71, which stemmed from insufficient input validation in the QUIC Quick UDP Internet Connections protocol...
Google Adds Support for DNS-over-HTTP/3 in Android to Keep DNS Queries Private — The Hacker News
Google on Tuesday officially announced support for DNS-over-HTTP/3 DoH3 for Android devices as part of a Google Play system update designed to keep DNS queries private. To that end, Android smartphones running Android 11 and higher are expected to use DoH3 instead of DNS-over-TLS DoT, which was...
CVE-2022-30591
quic-go through 0.27.0 allows remote attackers to cause a denial of service CPU consumption via a Slowloris variant in which incomplete QUIC or HTTP/3 requests are sent. This occurs because mtudiscoverer.go misparses the MTU Discovery service and consequently overflows the probe timer. NOTE: the...
CVE-2022-30591
quic-go through 0.27.0 allows remote attackers to cause a denial of service CPU consumption via a Slowloris variant in which incomplete QUIC or HTTP/3 requests are sent. This occurs because mtudiscoverer.go misparses the MTU Discovery service and consequently overflows the probe timer. NOTE: the...
DEBIAN-CVE-2022-30591
quic-go through 0.27.0 allows remote attackers to cause a denial of service CPU consumption via a Slowloris variant in which incomplete QUIC or HTTP/3 requests are sent. This occurs because mtudiscoverer.go misparses the MTU Discovery service and consequently overflows the probe timer. NOTE: the...
CVE-2022-30591
quic-go through 0.27.0 allows remote attackers to cause a denial of service CPU consumption via a Slowloris variant in which incomplete QUIC or HTTP/3 requests are sent. This occurs because mtudiscoverer.go misparses the MTU Discovery service and consequently overflows the probe timer. NOTE: the...
UBUNTU-CVE-2022-30591
DISPUTED quic-go through 0.27.0 allows remote attackers to cause a denial of service CPU consumption via a Slowloris variant in which incomplete QUIC or HTTP/3 requests are sent. This occurs because mtudiscoverer.go misparses the MTU Discovery service and consequently overflows the probe timer...
Design/Logic Flaw
DISPUTED quic-go through 0.27.0 allows remote attackers to cause a denial of service CPU consumption via a Slowloris variant in which incomplete QUIC or HTTP/3 requests are sent. This occurs because mtudiscoverer.go misparses the MTU Discovery service and consequently overflows the probe timer...
CVE-2022-30591
quic-go through 0.27.0 allows remote attackers to cause a denial of service CPU consumption via a Slowloris variant in which incomplete QUIC or HTTP/3 requests are sent. This occurs because mtudiscoverer.go misparses the MTU Discovery service and consequently overflows the probe timer. NOTE: the...
CVE-2022-30591
CVE-2022-30591 affects quic-go up to version 0.27.0. The issue is a denial of service via a Slowloris-like workload, caused by mtu_discoverer.go misparsing the MTU Discovery service, leading to an overflow of the probe timer. Exploitation details are not provided in the documents; no patch/versio...
CVE-2022-30591
quic-go through 0.27.0 allows remote attackers to cause a denial of service CPU consumption via a Slowloris variant in which incomplete QUIC or HTTP/3 requests are sent. This occurs because mtudiscoverer.go misparses the MTU Discovery service and consequently overflows the probe timer. NOTE: the...
CVE-2022-30591
quic-go through 0.27.0 allows remote attackers to cause a denial of service CPU consumption via a Slowloris variant in which incomplete QUIC or HTTP/3 requests are sent. This occurs because mtudiscoverer.go misparses the MTU Discovery service and consequently overflows the probe timer. NOTE: the...
PT-2022-20194 · Quic-Go +1 · Quic-Go +1
Name of the Vulnerable Software and Affected Versions: quic-go versions through 0.27.0 Description: The issue allows remote attackers to cause a denial of service CPU consumption via a Slowloris variant in which incomplete QUIC or HTTP/3 requests are sent. This occurs because mtu discoverer.go...
CVE-2022-30591: Uncontrolled Resource Consumption
quic-go through 0.27.0 allows remote attackers to cause a denial of service CPU consumption via a Slowloris variant in which incomplete QUIC or HTTP/3 requests are sent. This occurs because mtudiscoverer.go misparses the MTU Discovery service and consequently overflows the probe timer. NOTE: the...
quic-go 资源管理错误漏洞
quic-go is an implementation of the QUIC protocol, RFC 9000 protocol in Go by Lucas Clemente, a personal developer. A resource management error vulnerability exists in quic-go version 0.27.0 and earlier. A remote attacker can cause a denial of service by sending a Slowloris variant of an incomple...
Exploit for Uncontrolled Resource Consumption in Quic-Go_Project Quic-Go
QUIC-attacks CVE-2022-30591 The current repository serves t...
[SECURITY] Fedora 36 Update: golang-github-lucas-clemente-quic-0.27.2-1.fc36
A QUIC implementation in pure go...
Fedora: Security Advisory for golang-github-lucas-clemente-quic (FEDORA-2022-c0f780ecf1)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
