Skip to content
OpenAdvisories

Package · Go

github.com/apernet/hysteria

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    GHSA-jqc5-2p7q-fqfc

    Hysteria: http large header with sniff cause server DoS

    ### Summary Sending an excessively large header by an attacker could lead to a server-side DoS attack. ### Details The current sniff implementation does not explicitly specify the upper limit for HTTP headers. Attackers can continuously send excessively large…

    github.com/apernet/hysteria Go
  • High 7.5
    GHSA-qh5x-rfwf-rvfv

    Hysteria vulnerable to server crash when max_datagram_frame_size very small

    ### Summary An authenticated client can crash the Hysteria server by advertising a very small QUIC `max_datagram_frame_size` and then triggering a UDP response from the server. When the server tries to send the UDP response back via QUIC DATAGRAM, quic-go ret…

    github.com/apernet/hysteria Go