QPACK bugs let attackers OOM many HTTP/3 servers
A single unauthenticated connection can force tens to thousands of times more memory use than the traffic it sends.
By tarpitA single unauthenticated connection can force tens to thousands of times more memory use than the traffic it sends.
By tarpitXin Long's 15-part series adds sockets, crypto, paths, and congestion control so Linux can run QUIC natively over UDP.
By kexecXin Long’s v16 series adds sockets, streams, paths, crypto, and congestion control so kernel services and user space can speak QUIC without a userspace transport.
By kexecA netdev series from Xin Long adds core socket, stream, path, and crypto building blocks so subsystems and apps can use QUIC without userspace protocol stacks.
By kexecA single DNS-over-QUIC connection could overflow a heap buffer; the flaw is fixed in 6.4.1.
By tarpit