UNKNOWNGo →
Panic occurs when queuing undecryptable packets after handshake completion in github.com/quic-go/quic-go
Panic occurs when queuing undecryptable packets after handshake completion in github.com/quic-go/quic-go
Affected packages
- github.com/quic-go/quic-go
Exploit signal
- Known exploited (CISA KEV)
- No
- EPSS score
- —
- EPSS percentile
- —
EPSS is the probability a CVE is exploited in the wild; percentile is its rank among all CVEs.
Sources
- https://github.com/quic-go/quic-go/security/advisories/GHSA-47m2-4cr7-mhcw
- https://github.com/quic-go/quic-go/commit/bc5bccf10fd02728eef150683eb4dfaa5c0e749c
- https://github.com/quic-go/quic-go/commit/ce7c9ea8834b9d2ed79efa9269467f02c0895d42
- https://github.com/quic-go/quic-go/pull/5354
- https://github.com/quic-go/quic-go/blob/v0.55.0/connection.go#L2682-L2685
Structured record: https://osv.dev/vulnerability/GO-2025-4017
Recommended response stack
Some links are affiliate links — HackTribune may earn a commission at no extra cost to you.
Get incidents like this as alerts for your stack.
Join the beta