Description
In lsquic before 4.9.0, the HTTP/3 implementation can use an excessive amount of memory because the number of buffered header sets is not limited, as demonstrated by a QPACK amplification attack. This is related to header_out_dynamic_entry and es_max_header_list_size.
Published: 2026-10-22
Score: 7.5 High
EPSS: n/a
KEV: No
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

No solution or workaround provided in the CVE record.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Thu, 22 Oct 2026 16:45:00 +0000

Type Values Removed Values Added
Title Unbounded Header Buffers in LiteSpeed HTTP/3 Allow Memory Exhaustion via QPACK Amplification

Thu, 22 Oct 2026 15:30:00 +0000

Type Values Removed Values Added
Description In lsquic before 4.9.0, the HTTP/3 implementation can use an excessive amount of memory because the number of buffered header sets is not limited, as demonstrated by a QPACK amplification attack. This is related to header_out_dynamic_entry and es_max_header_list_size.
First Time appeared Litespeedtech
Litespeedtech lsquic
Weaknesses CWE-770
CPEs cpe:2.3:a:litespeedtech:lsquic:*:*:*:*:*:*:*:*
Vendors & Products Litespeedtech
Litespeedtech lsquic
References
Metrics cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'}

Subscriptions

Litespeedtech Lsquic
cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2026-10-22T15:07:30.961Z

Reserved: 2026-10-22T15:07:30.097Z

Link: CVE-2026-115482

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Deferred

Published: 2026-10-22T16:17:35.490

Modified: 2026-10-22T17:40:46.877

Link: CVE-2026-115482

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-22T16:30:08Z

Weaknesses
  • CWE-770

    Allocation of Resources Without Limits or Throttling