DevThe Hacker Newsabout 3 hours ago
XRING Flaw Lets Clients Crash HTTP/3 Servers
1 min read
An unpatched bug in Alibaba's XQUIC library, named XRING, lets remote clients crash HTTP/3 servers with 260 bytes of legal QPACK traffic. The flaw affects all releases through v1.9.4. Operators can disable QPACK's dynamic table or drop HTTP/3 until a fix ships.
Level
Hype check
Tap to vote and see what everyone thinks.
