Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:libp2p:libp2p-Quic:*:*:*:*:*:*:*:*

1 brief RSS
medium advisory

Remote Denial of Service in libp2p-quic via Certificate Expiry Race

A malicious peer can trigger an application crash in libp2p-quic (< 0.13.1) by initiating a QUIC handshake and delaying the final TLS fragment until the peer certificate expires, causing an unhandled panic.

libp2p-quic denial-of-service libp2p rust
1t 1c