QUIC Protocol Implementation Vulnerable to Denial-of-Service Attack

CVE-2024-45396

Summary

Quicly, an IETF QUIC protocol implementation developed by H2O, exhibits a vulnerability that is susceptible to denial-of-service attacks. Hackers can exploit this flaw to trigger assert failures, resulting in crashes for processes utilizing Quicly. This renders the service temporarily inoperable, impacting users and clients relying on its functionality. The issue has been addressed in the code with commit 2a95896104901589c495bc41460262e64ffcad5c, which rectifies the underlying causes of the vulnerability.

References