Ubuntu Security Update USN-8300-1: ngtcp2 vulnerability

[LinuxBot]

Zou Dikai discovered that ngtcp2 serialized peer transport parameters into a fixed 1024-byte stack buffer without bounds checking. When qlog was enabled, a remote attacker could possibly use this issue to execute arbitrary code.

Continue reading...