private-octopus / picoquic

Minimal implementation of the QUIC protocol
MIT License
523 stars 153 forks source link

ICMP unreachable code opens avenue to DOS attack #1562

Open huitema opened 9 months ago

huitema commented 9 months ago

The current processing of ICMP unreachable causes an immediate disconnect if the last path is considered unreachable. This means that an attacker could kill a connection by forging an ICMP unreachable message, something that a "man on the side" could easily do.