QUIC - node & validator attack techniques
19 techniques with a reproduced instance on QUIC
NRDAX-T0023 - Coalesced Packet Buffer Leak (memory_amp) active NRDAX-T0042 - Crypto Frame Reassembly Buffer Exhaustion (memory_amp) active NRDAX-T0046 - Decompression Bomb Resource Exhaustion (memory_amp) active NRDAX-T0059 - Duplicate Transport Parameter Memory Leak (memory_amp) active NRDAX-T0182 - Optimistic ACK Congestion Window Manipulation (response_amp) active NRDAX-T0185 - Out-Of-Order Stream Reassembly OOM (memory_amp) active NRDAX-T0195 - Path Challenge Response Memory Exhaustion (memory_amp) active NRDAX-T0196 - Path Migration Challenge Queue Exhaustion (memory_amp) active NRDAX-T0225 - QUIC Control Frame Flood (connection_exhaustion) active NRDAX-T0320 - Unbounded Connection Flood (connection_exhaustion) active NRDAX-T0321 - Unbounded Connection ID Storage (memory_amp) active NRDAX-T0332 - Unbounded Stream Resource Exhaustion () active NRDAX-T0338 - Unhandled Enum Variant Panic () active NRDAX-T0349 - Unseeded Hash Collision DoS (compute_amp) active NRDAX-T0352 - Unvalidated Field Length Panic (fault_termination) active NRDAX-T0382 - Error-Response Connection-State Leak (memory_amp) active NRDAX-T0392 - Invalid UTF-8 Decode Panic (fault_termination) active NRDAX-T0394 - Connection ID Retirement Infinite Loop (compute_amp) active NRDAX-T0400 - Unsigned Integer Underflow Accounting Panic (fault_termination) active
from the CLI
List or export QUIC techniques with the NRDAX CLI:
nrdax list --chain quic nrdax export --chain quic --format json