CVE-2020-24944

picoquic before 3rd of July 2020 allows attackers to cause a denial of service infinite loop via a crafted QUIC frame, related to the picoquicdecodeframes and picoquicdecodestreamframe functions and epoch==3...

CVE-2020-24944

Picoquic (before 2020-07-03) contains a denial-of-service vulnerability where a crafted QUIC frame triggers an infinite loop. The issue is tied to the decode logic in picoquic_decode_frames and picoquic_decode_stream_frame when epoch==3. The confirmed impact is partial availability (per CVSSv2/v3...