PT-2024-21087
CVE-2024-25679
·
تاريخ النشر
2024-02-09
·
تاريخ التحديث
2024-02-15
الوصف من
CVSS 3.1
6.5
متوسطةالمقاييسAV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:L
Name of the Vulnerable Software and Affected Versions
PQUIC versions prior to 5bde5bb
Description
The issue allows attackers to disrupt a connection with a PSK configuration by sending a CONNECTION CLOSE frame that is encrypted via the initial key computed. Network traffic sniffing is needed as part of exploitation.
Recommendations
For versions prior to 5bde5bb, update to a version after 5bde5bb to resolve the issue. As a temporary workaround, consider restricting the use of the initial encryption key to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾