CVE-2024-22590

The Kwik QUIC protocol implementation (version 745fd4e2 ) contains a vulnerability in its TLS engine due to a failure to track the current state of the connection. This incomplete internal state distinction allows Client Hello messages to be overwritten at any time, even after a connection has be...

CVE-2024-22590

The TLS engine in Kwik commit 745fd4e2 does not track the current state of the connection. This vulnerability can allow Client Hello messages to be overwritten at any time, including after a connection has been established...