← Back to feed

Qpack amplification attacks against HTTP/3 servers

IT · 2026-10-21 22:32

研究发现，远程未认证客户端可利用 QPACK 头部压缩缺陷，让 HTTP/3 服务器分配远超其发送量的内存，单连接即可耗尽资源，十款实现中七款受影响。

Source: foxio.io

Auto-generated summary for reference only. RSS