CVE-2024-25679

In PQUIC before 5bde5bb, retention of unused initial encryption keys allows attackers to disrupt a connection with a PSK configuration by sending a CONNECTION_CLOSE frame that is encrypted via the initial key computed. Network traffic sniffing is needed as part of exploitation.

In PQUIC before 5bde5bb, retention of unused initial encryption keys allows attackers to disrupt a connection with a PSK configuration by sending a CONNECTION_CLOSE frame that is encrypted via the initial key computed. Network traffic sniffing is needed as part of exploitation.

En PQUIC anterior a 5bde5bb, la retención de claves de cifrado iniciales no utilizadas permite a los atacantes interrumpir una conexión con una configuración PSK enviando una trama CONNECTION_CLOSE cifrada mediante la clave inicial calculada. La detección del tráfico de red es necesaria como parte de la explotación.