ICMP Packet Too Large Injection Attack on Linux in github.com/quic-go/quic-go
ICMP Packet Too Large Injection Attack on Linux in github.com/quic-go/quic-go
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-53259US | —OT elevated | Exploit | ||
quic-go is an implementation of the QUIC protocol in Go. An off-path attacker can inject an ICMP Packet Too Large packet. Since affected quic-go versions used IP_PMTUDISC_DO, the k… | ||||
02
references
External citations — patches, advisories, analysis.
- https://datatracker.ietf.org/doc/draft-seemann-tsvwg-udp-fragmentation/REPORT
- https://github.com/quic-go/quic-go/commit/ca31dd355cbe5fc6c5807992d9d1149c66c96a50FIX
- https://github.com/quic-go/quic-go/pull/4729FIX
- https://github.com/quic-go/quic-go/releases/tag/v0.48.2WEB
- https://github.com/quic-go/quic-go/security/advisories/GHSA-px8v-pp82-rcvrADVISORY
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan