Threats tagged 'ghsa-9x89-v382-mjh7'

A vulnerability in OpenSSL's QUIC server implementation allows an attacker to cause unbounded memory allocation by sending many valid QUIC Initial packets with unknown destination connection IDs. This can lead to denial of service by exhausting memory resources on the server. The issue exists since OpenSSL 3.5 and is fixed by introducing a limit of 256 pending connections by default.