Aller au contenu
Se connecter
7.5 Élevée

CVE-2026-94450 Improper validation of the Destination Connection ID length in s2n-quic 1.88.0 and earlier may allow an…

Description

Improper validation of the Destination Connection ID length in s2n-quic 1.88.0 and earlier may allow an unauthenticated remote user to cause a denial of service by shutting down a server endpoint via a single crafted UDP datagram. Only server endpoints specifically configured to send Retry packets are affected. To remediate this issue, users should upgrade to version v1.89.0 or later.

Produits et versions touchés

Produit Versions touchées Corrigé en
s2n-quic 1.88 premières → 1.88.0 Pas de correctif indiqué

Autres CVE de s2n-quic

Les 2 CVE de s2n-quic →
CVE-2026-10740 Unbounded memory allocation in the CRYPTO frame reassembler in s2n-quic before 1.8.2 may allow an unauthenticated remote… 5.3 Moyenne
Suivre cette CVE