Tag: web infrastructure

HTTP/3 Servers Vulnerable to Crashing via QPACK Flaws

A single malicious connection can crash many HTTP/3 servers due to flaws in QPACK header compression, which allows attackers to send a small batch of compressed headers that expand into a much larger set, overwhelming the server's memory. This vulnerability can be exploited with a relatively simple attack, and experts warn that the impact could be significant.