PT-2021-11091
CVE-2020-24944
·
تاريخ النشر
2021-02-08
·
تاريخ التحديث
2021-02-11
الوصف من
CVSS 3.1
7.5
عاليةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions:
picoquic versions prior to July 3, 2020
Description:
The issue allows attackers to cause a denial of service, resulting in an infinite loop, via a crafted QUIC frame. This is related to the
picoquic decode frames and picoquic decode stream frame functions when epoch equals 3.Recommendations:
For versions prior to July 3, 2020, consider updating to a version released after this date to resolve the issue. As a temporary workaround, consider restricting the handling of crafted QUIC frames to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾