Vulnerabilidades do Litespeedtech Lsquic
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Litespeedtech Lsquic: 1 registro(s), com versões afetadas e correções.
CVE-2026-115482
Alta · 7.5
CWE-770 22/10/2026
Allocation of Resources Without Limits or Throttling em Litespeedtech Lsquic
In lsquic before 4.9.0, the HTTP/3 implementation can use an excessive amount of memory because the number of buffered header sets is not limited, as demonstrated by a QPACK amplification attack. This is related to header_out_dynamic_entry and es_max_header_list_size.