Litespeedtech Lsquic vulnerabilities

4 vulnerabilities

Known vulnerabilities in Litespeedtech Lsquic, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.5CVE-2025-54939litespeedtechlitespeed_web_adc+3
EPSS score
0.80%
LiteSpeed QUIC (LSQUIC) Library before 4.3.1 has an lsquic_engine_packet_in memory leak.5.3CVE-2025-24947litespeedtechlsquic
EPSS score
0.68%
A hash collision vulnerability (in the hash table used to manage connections) in LSQUIC (aka LiteSpeed QUIC) before 4.2.0 allows remote attackers to cause a considerable CPU load on the server (a Hash DoS attack) by initiating connections with colliding Source Connection IDs (SCIDs). This is caused by XXH32 usage.9.8CVE-2022-30592litespeedtechlsquic
EPSS score
3.26%
liblsquic/lsquic_qenc_hdl.c in LiteSpeed QUIC (aka LSQUIC) before 3.1.0 mishandles MAX_TABLE_CAPACITY.9.8CVE-2024-25678litespeedtechlsquic
EPSS score
0.35%
In LiteSpeed QUIC (LSQUIC) Library before 4.0.4, DCID validation is mishandled.