An issue was discovered in Kwik before 0.10.1. A hash collision vulnerability (in the hash table used to manage connections) allows remote attackers to cause a considerable CPU load on the server (a Hash DoS attack) by initiating connections with colliding Source Connection IDs (...
Product
tech.kwik/kwik vulnerabilities
2 published CVES affecting tech.kwik/kwik, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 2
- Critical
- 0
- High
- 0
- Medium
- 2
- Low
- 0
- Unscored
- 0
- CISA KEV
- 0
Latest tech.kwik/kwik CVEs
Newest publication first
-
MediumCVSS 5.3 EPSS 0.58%
-
MediumCVSS 6.5 EPSS 0.32%
Kwik commit 745fd4e2 does not discard unused encryption keys.
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.