CVE-2024-25679

Name of the Vulnerable Software and Affected Versions PQUIC versions prior to 5bde5bb

Description The issue allows attackers to disrupt a connection with a PSK configuration by sending a CONNECTION CLOSE frame that is encrypted via the initial key computed. Network traffic sniffing is needed as part of exploitation.

Recommendations For versions prior to 5bde5bb, update to a version after 5bde5bb to resolve the issue. As a temporary workaround, consider restricting the use of the initial encryption key to minimize the risk of exploitation.