#lsquic

QPACK flaws let a single connection crash many HTTP/3 servers

FoxIO found header-compression flaws in seven of ten HTTP/3 stacks it tested, enabling memory amplification of up to 4,000 times. Some stacks remain unpatched.

2h ago