Quicly, an IETF QUIC protocol implementation, is susceptible to a denial-of-service attack prior to commit d9d3df6a8530a102b57d840e39b0311ce5c9e14e. A remote at…

Quicly, an IETF QUIC protocol implementation, contains a vulnerability that allows remote attackers to perform denial-of-service attacks. The vulnerability exists in versions prior to commit d9d3df6a8530a102b57d840e39b0311ce5c9e14e. Attackers can exploit this flaw to trigger assertion failures that crash processes using the Quicly library. The issue has been resolved in the specified commit. This affects any application or service that implements the QUIC protocol using the vulnerable Quicly library.