https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 12:12:11 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-245142 EUVD-2026-245142 https://cve.radiocsirt.org/vuln/euvd-2026-245142 https://cve.radiocsirt.org/vuln/fkie_cve-2025-4820 <p>Impact</p> <p>Cloudflare quiche was discovered to be vulnerable to incorrect congestion window growth, which could cause it to send data at a rate faster than the path might actually support.</p> <p>An unauthenticated remote attacker can exploit the vulnerability by first completing a handshake and initiating a congestion-controlled data transfer towards itself. Then, it could manipulate the victim&#39;s congestion control state by sending ACK frames exercising an opportunistic ACK attack; see RFC 9000 Section 21.4. The victim could grow the congestion window beyond typical expectations and allow more bytes in flight than the path might really support.</p> <p>Patches</p> <p>quiche 0.24.4 is the earliest version containing the fix for this issue.</p> <p>Impact</p> <p>Cloudflare quiche was discovered to be vulnerable to incorrect congestion window growth, which could cause it to send data at a rate faster than the path might actually support.</p> <p>An unauthenticated remote attacker can exploit the vulnerability by first completing a handshake and initiating a congestion-controlled data transfer towards itself. Then, it could manipulate the victim&#39;s congestion control state by sending ACK frames exercising an opportunistic ACK attack; see RFC 9000 Section 21.4. The victim could grow the congestion window beyond typical expectations and allow more bytes in flight than the path might really support.</p> <p>Patches</p> <p>quiche 0.24.4 is the earliest version containing the fix for this issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-4820