Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Review Slic potential security issues #3317

Open
bentoi opened this issue Jun 7, 2023 · 1 comment
Open

Review Slic potential security issues #3317

bentoi opened this issue Jun 7, 2023 · 1 comment
Labels
slic Slic Transport
Milestone
Future

Comments

@bentoi
Copy link
Contributor

bentoi commented Jun 7, 2023

See dotnet/runtime#30600

I believe of these apply to Slic and in particular the PING flood attack (GHSA-hgr8-6h9x-f7q9) if we keep the PONG frame. See also #3273

I'm targeting this for 0.2, please change if you prefer to look into this for 0.1.
@bentoi bentoi added the slic Slic Transport label Jun 7, 2023
@bentoi bentoi added this to the 0.2 milestone Jun 7, 2023
@bentoi
Copy link
Contributor Author

bentoi commented Jun 13, 2023

See also https://www.bleepingcomputer.com/news/security/new-http-2-flaws-expose-unpatched-web-servers-to-dos-attacks/

@bentoi bentoi mentioned this issue Jun 13, 2023
Open
@bernardnormier bernardnormier modified the milestones: Future, 0.2.0 Sep 19, 2023
@pepone pepone modified the milestones: 0.2.0, Future Nov 23, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
slic Slic Transport
Projects
None yet
Milestone
Future
Development

No branches or pull requests
3 participants
@pepone @bentoi @bernardnormier