Beveiligingsadvies

CVE-2024-25679

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-02-09 00:00:00
Laatst bijgewerkt 2025-06-16 18:18:14
Toegewezen door mitre
CVSS-score 6.5
Status PUBLISHED

Beschrijving

In PQUIC before 5bde5bb, retention of unused initial encryption keys allows attackers to disrupt a connection with a PSK configuration by sending a CONNECTION_CLOSE frame that is encrypted via the initial key computed. Network traffic sniffing is needed as part of exploitation.