maskit opened a new issue, #12046:
URL: https://github.com/apache/trafficserver/issues/12046

   QUIC connection table is a hash table and the key is a QUIC connection ID. 
Because the initial ID for a connection is generated on the client side, it is 
possible to cause hash collisions intentionally. The hash algorithm needs to be 
improved.
   
   We don't have a CVE number for this because our QUIC implementation is still 
experimental. We need to address this before we call our QUIC support 
production-ready.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to