Skip to content
The Nexus
DossierENTITY

XQUIC

Coverage of XQUIC in the Nexus archive.

Earliest in view: Jul 10 · 11:47 UTCMost recent: Jul 10 · 11:47 UTC
Co-mentioned in this coverage
Alibabaorganization1FoxIOorganization1Sébastien Féryperson1XRINGtopic1HTTP/3topic1QPACKtopic1
Recent coverage
  • SECURITYJul 10 · 11:47 UTCTHE HACKER NEWS
    Unpatched XRING Flaw in XQUIC Lets Remote Clients Crash HTTP/3 Servers

    An unpatched vulnerability in XQUIC, Alibaba's QUIC and HTTP/3 library, allows remote clients to crash servers using standard QPACK traffic. The flaw, dubbed XRING by FoxIO researcher Sébastien Féry, requires no authentication or malformed packets and remains unaddressed.

XQUIC · Dossier · The Nexus