GO-2025-4017
Panic occurs when queuing undecryptable packets after handshake completion in github.com/quic-go/quic-go
At a glance
- Published
- Updated
- CVE
- CVE-2025-59530
- Aliases
- GHSA-47m2-4cr7-mhcw
Description
Panic occurs when queuing undecryptable packets after handshake completion in github.com/quic-go/quic-go
Affected packages
| Package | Versions |
|---|---|
| Go · github.com/quic-go/quic-go | introduced 0, fixed 0.49.1, introduced 0.50.0, fixed 0.54.1 |
References
- https://github.com/quic-go/quic-go/security/advisories/GHSA-47m2-4cr7-mhcw ADVISORY
- https://github.com/quic-go/quic-go/commit/bc5bccf10fd02728eef150683eb4dfaa5c0e749c FIX
- https://github.com/quic-go/quic-go/commit/ce7c9ea8834b9d2ed79efa9269467f02c0895d42 FIX
- https://github.com/quic-go/quic-go/pull/5354 FIX
- https://github.com/quic-go/quic-go/blob/v0.55.0/connection.go#L2682-L2685 WEB
Sources
| Source | Licence |
|---|---|
| OSV.dev | CC-BY 4.0 — Go Vulnerability Database |