CVE-2022-30591

quic-go through 0.27.0 allows remote attackers to cause a denial of service (CPU consumption) via a Slowloris variant in which incomplete QUIC or HTTP/3 requests are sent. This occurs because mtu_discoverer.go misparses the MTU Discovery service and consequently overflows the probe timer. NOTE: the vendor's position is that this behavior should not be listed as a vulnerability on the CVE List

• CWE-400

• https://github.com/lucas-clemente/quic-go/blob/84e03e59760ceee37359688871bb0688fcc4e98f/mtu_discoverer.goExploit, Third Party Advisory
• https://github.com/lucas-clemente/quic-go/blob/84e03e59760ceee37359688871bb0688fcc4e98f/mtu_discoverer.goExploit, Third Party Advisory

Published

Jul 6, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-30580Code injection in Cmd.Start in os/exec before Go 1.17.11 and…7.8
• CVE-2022-30584Archer Platform 6.3 before 6.11 (6.11.0.0) contains an Impro…8.8
• CVE-2022-30585The REST API in Archer Platform 6.x before 6.11 (6.11.0.0) c…6.5
• CVE-2022-30586Gradle Enterprise through 2022.2.2 has Incorrect Access Cont…7.2
• CVE-2022-30587Gradle Enterprise through 2022.2.2 has Incorrect Access Cont…7.5
• CVE-2022-3059 The application was vulnerable to multiple instances of SQL…7.5
• CVE-2022-30592liblsquic/lsquic_qenc_hdl.c in LiteSpeed QUIC (aka LSQUIC) b…9.8
• CVE-2022-30594The Linux kernel before 5.17.2 mishandles seccomp permission…7.8
• CVE-2022-30595libImaging/TgaRleDecode.c in Pillow 9.1.0 has a heap buffer …9.8
• CVE-2022-30596A flaw was found in moodle where ID numbers displayed when b…5.4
• CVE-2022-30597A flaw was found in moodle where the description user field …5.3
• CVE-2022-30598A flaw was found in moodle where global search results could…4.3