Lsquic

3 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2025-54939 Aug 01, 06:15 MEDIUM POC This Month

LiteSpeed QUIC (LSQUIC) Library before 4.3.1 has an lsquic_engine_packet_in memory leak. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Denial Of Service Openlitespeed Litespeed Web Adc Litespeed Web Server Lsquic +1

NVD GitHub

CVSS 3.1

5.3

EPSS

0.1%

CVE-2024-25678 Feb 09, 10:15 CRITICAL PATCH Act Now

In LiteSpeed QUIC (LSQUIC) Library before 4.0.4, DCID validation is mishandled. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure Lsquic Litespeedtech

NVD GitHub

CVSS 3.1

9.8

EPSS

0.4%

CVE-2022-30592 May 11, 23:15 CRITICAL PATCH Act Now

liblsquic/lsquic_qenc_hdl.c in LiteSpeed QUIC (aka LSQUIC) before 3.1.0 mishandles MAX_TABLE_CAPACITY. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This NULL Pointer Dereference vulnerability could allow attackers to crash the application by dereferencing a null pointer.

Denial Of Service Null Pointer Dereference Lsquic Litespeedtech

NVD GitHub

CVSS 3.1

9.8

EPSS

3.2%

CVE-2025-54939

EPSS 0% CVSS 5.3

MEDIUM POC This Month

Denial Of Service Openlitespeed Litespeed Web Adc +3

NVD GitHub

CVE-2024-25678

EPSS 0% CVSS 9.8

CRITICAL PATCH Act Now

Information Disclosure Lsquic Litespeedtech

NVD GitHub

CVE-2022-30592

EPSS 3% CVSS 9.8

CRITICAL PATCH Act Now

Denial Of Service Null Pointer Dereference Lsquic +1

NVD GitHub