Beveiligingsadvies

CVE-2023-39322

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2023-09-08 16:13:32
Laatst bijgewerkt 2025-02-13 17:02:49
Toegewezen door Go
CVSS-score geen score
Status PUBLISHED

Beschrijving

QUIC connections do not set an upper bound on the amount of data buffered when reading post-handshake messages, allowing a malicious QUIC connection to cause unbounded memory growth. With fix, connections now consistently reject messages larger than 65KiB in size.