CVE-2025-4820: falha de média gravidade em Cloudflare quiche
Incorrect congestion window growth by optimistic ACK
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 5.3epss 0.9%
Impact
Cloudflare quiche was discovered to be vulnerable to incorrect congestion window growth, which could cause it to send data at a rate faster than the path might actually support.
An unauthenticated remote attacker can exploit the vulnerability by first completing a handshake and initiating a congestion-controlled data transfer towards itself. Then, it could manipulate the victim's congestion control state by sending ACK frames exercising an opportunistic ACK attack; see RFC 9000 Section 21.4. The victim could grow the congestion window beyond typical expectations and allow more bytes in flight than the path might really support.
Patches
quiche 0.24.4 is the earliest version containing the fix for this issue.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Produtos afetados
Cloudflare · quicheCVEs relacionadas — Cloudflare quiche
No mesmo produto, das mais perigosas para as menos.
CVE-2024-1765MEDIUMUnlimited resource allocation by QUIC CRYPTO frames flooding in quicheEPSS 1.1%CVE-2025-4821HIGHIncorrect congestion window growth by invalid ACK rangesEPSS 1.0%CVE-2023-6193MEDIUMUnbounded queuing of path validation messages in cloudflare-quicheEPSS 0.8%CVE-2024-1410LOWUnbounded storage of information related to connection ID retirement, in quiche EPSS 0.7%CVE-2026-12523HIGHResource exhaustion in quiche HTTP/3 and QPACK layersEPSS 0.5%CVE-2025-7054HIGHInfinite loop triggered by connection ID retirementEPSS 0.5%