litespeedtech lsquic Schwachstellen (CVE)

Für litespeedtech lsquic veröffentlichte CVE-Einträge, neueste zuerst. Folgen Sie, um bei neuen Einträgen eine E-Mail zu erhalten.

3 Ergebnisse
7.5Hoch
CVE-2026-115482
litespeedtech lsquic

In lsquic before 4.9.0, the HTTP/3 implementation can use an excessive amount of memory because the number of buffered header sets is not limited, as demonstrated by a QPACK amplification attack. This is related to header_out_dynamic_entry and es_max_header_l…

5.3Mittel
CVE-2025-54939
litespeedtech LSQUIC

LiteSpeed QUIC (LSQUIC) Library before 4.3.1 has an lsquic_engine_packet_in memory leak.

5.3Mittel
CVE-2025-24947
litespeedtech LSQUIC

A hash collision vulnerability (in the hash table used to manage connections) in LSQUIC (aka LiteSpeed QUIC) before 4.2.0 allows remote attackers to cause a considerable CPU load on the server (a Hash DoS attack) by initiating connections with colliding Sourc…