CVE-2020-24944 - picoquic (before 3rd of July 2020) allows attackers to cause a denial of service (infinite loop) via a crafted QUIC frame, related to the picoquic_decode_frames and picoquic_decode_stream_frame functions and epoch==3

Back Back to CVE browser

HIGH

picoquic (before 3rd of July 2020) allows attackers to cause a denial of service (infinite loop) via a crafted QUIC frame, related to the picoquic_decode_frames and picoquic_decode_stream_frame functions and epoch==3

Published Feb 8, 2021

7.5

HIGH

CVSS 3.1

EPSS 1.46%

Description

picoquic (before 3rd of July 2020) allows attackers to cause a denial of service (infinite loop) via a crafted QUIC frame, related to the picoquic_decode_frames and picoquic_decode_stream_frame functions and epoch==3.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-835

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-17645
Advisory
https://github.com/private-octopus/picoquic/issues/969
x_refsource_MISCExploitThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-17645		Advisory
https://github.com/private-octopus/picoquic/issues/969		x_refsource_MISCExploitThird Party Advisory