Patched:
0-Day vuln in QUIC that allows anyone to remotely turn off a server running these libraries
Cloudflare quiche
quic-go
lsquic
Wireshark
Unpatched (0-Day):
Bun 1.4.3
h3 (hyperium)
aioquic / mitmproxy
Vuln notifications started a year ago, some responded, some didn't.
https://foxio.io/blog/header-accordions-qpack-amplification-attacks-against-http-3-servers
foxio.ioHeader Accordions: QPACK amplification attacks against HTTP/3 servers - FoxIO | Cyber InnovationWe solve the world’s toughest cyber challenges—creating breakthrough technology and embedding it into the systems that run everything.
commit 72af8bb