Approved changes feed: RSS · Atom
cpe:2.3:a:ptrd:kwik:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Ptrd (789ebf93-204d-59e7-8a56-1892517302d3) |
|---|---|
| Product | Kwik (70827cec-0361-5fb8-b68d-a5411afea0e7) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-23020 |
vulnerable | 2026-06-08 07:10:55.091795 |
Details available
MEDIUM (5.3)
An issue was discovered in Kwik before 0.10.1. A hash collision vulnerability (in the hash table used to manage connections) allows remote attackers to cause a considerable CPU load on the server (a Hash DoS attack) by initiating connections with colliding Source Connection IDs (SCIDs).
Published: 2025-02-20T00:00:00.000Z
Updated: 2025-02-20T17:26:01.482Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-22590 |
vulnerable | 2026-06-08 06:29:35.932482 |
Details available
The TLS engine in Kwik commit 745fd4e2 does not track the current state of the connection. This vulnerability can allow Client Hello messages to be overwritten at any time, including after a connection has been established.
Published: 2024-05-28T16:07:49.749Z
Updated: 2025-02-13T15:47:02.992Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-22588 |
vulnerable | 2026-06-08 06:29:35.931793 |
Details available
Kwik commit 745fd4e2 does not discard unused encryption keys.
Published: 2024-05-24T14:55:55.079Z
Updated: 2025-02-13T15:47:02.303Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.