Security Advisory
CVE-2023-39322
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
QUIC connections do not set an upper bound on the amount of data buffered when reading post-handshake messages, allowing a malicious QUIC connection to cause unbounded memory growth. With fix, connections now consistently reject messages larger than 65KiB in size.