Skip to content
Threat Feed
Subscribe

Product

Libp2p-Quic (< 0.13.1)

1 brief RSS
medium advisory

Remote Denial of Service in libp2p-quic via Certificate Expiry Race

A malicious peer can trigger an application crash in libp2p-quic (< 0.13.1) by initiating a QUIC handshake and delaying the final TLS fragment until the peer certificate expires, causing an unhandled panic.

libp2p-quic denial-of-service libp2p rust
1t 1c