Panic occurs when queuing undecryptable packets after handshake completion in github.com/quic-go/quic-go
Panic occurs when queuing undecryptable packets after handshake completion in github.com/quic-go/quic-go
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-59530US | — | — | ||
quic-go is an implementation of the QUIC protocol in Go. In versions prior to 0.49.0, 0.54.1, and 0.55.0, a misbehaving or malicious server can cause a denial-of-service (DoS) atta… | ||||
02
references
External citations — patches, advisories, analysis.
- https://github.com/quic-go/quic-go/blob/v0.55.0/connection.go#L2682-L2685WEB
- https://github.com/quic-go/quic-go/commit/bc5bccf10fd02728eef150683eb4dfaa5c0e749cFIX
- https://github.com/quic-go/quic-go/commit/ce7c9ea8834b9d2ed79efa9269467f02c0895d42FIX
- https://github.com/quic-go/quic-go/pull/5354FIX
- https://github.com/quic-go/quic-go/security/advisories/GHSA-47m2-4cr7-mhcwADVISORY
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan