Tag
#QUIC
2 stories taggedQUIC.

Vulnerabilities
OpenSSL Ships a Pile of Fixes, and a DTLS Bug That Can Spill Memory to the Wrong Side of the Wire
A dozen CVEs land in Ubuntu and Debian's OpenSSL packages at once. The one worth reading first is a DTLS handshake bug that can leak heap memory across a connection.
4 min read

Vulnerabilities
Unpatched Flaw in Alibaba's XQUIC Lets Anyone Crash HTTP/3 Servers With 260 Bytes
FoxIO researcher Sébastien Féry disclosed the bug on 8 July. There's no fix, no login required, and no malformed packets involved.
3 min read