30 matches found
GHSA-5HQ8-QHWW-JM7Q libp2p-quic: Remote panic via certificate expiry race during QUIC handshake
Summary libp2p-quic can panic on an inbound QUIC handshake if a malicious peer presents a valid, short lived libp2p TLS certificate and delays the final TLS 1.3 handshake fragment until the certificate expires. This is remotely reachable by a network peer and can crash applications exposing a...
8.2CVSS5.7AI score0.00231EPSS
SaveExploits0References5
20