Denial Of Service (DoS)

github.com/quic-go/quic-go is vulnerable to Denial Of Service (DoS). The vulnerability is a result of the mishandling of ACK frames that are serialized after CRYPTO frames in connection.go during the node handshake process. This flaw allows a malicious remote node to trigger a null pointer dereference when the node attempts to drop the Handshake packet number space, ultimately leading to an application crash.