Security update for LiteSpeed’s QUIC and HTTP/3 Library (LSQUIC)

johannes

Verified User
Joined
Feb 18, 2007
Messages
1,005

UDP packets, crafted in a particular way and sent to the HTTP/QUIC service port, can cause an unbounded memory leak. This has the potential to cause the process or the server to run out of memory, eventually leading to a Denial of Service.
This vulnerability in the LSQUIC Library affects all server products and may be easily exploited.
 
Back
Top