CERT24New QPACK Flaws Can Crash HTTP/3 Servers and Trigger Up to 4,000-Fold Memory AmplificationLoading data…
CERT24Threat Observatory
Period

New QPACK Flaws Can Crash HTTP/3 Servers and Trigger Up to 4,000-Fold Memory Amplification

FoxIO disclosed QPACK flaws that may allow an unauthenticated remote attacker to crash many HTTP/3 web servers through a single connection or cause denial of service. The source states that there is no evidence of data theft or code execution and no public reports of attacks in the wild.

← Back to intelligence

New QPACK Flaws Can Crash HTTP/3 Servers and Trigger Up to 4,000-Fold Memory Amplification

FoxIO disclosed QPACK flaws that may allow an unauthenticated remote attacker to crash many HTTP/3 web servers through a single connection or cause denial of service. The source states that there is no evidence of data theft or code execution and no public reports of attacks in the wild.