VDB
GO-2025-4017
GO-2025-4017
PUBLISHED
Panic occurs when queuing undecryptable packets after handshake completion in github.com/quic-go/quic-go
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| chainguard | teleport-18 | 0, 0, 0 |
| chainguard | k8s_gateway | 0, 0, 0 |
| chainguard | eks-distro-fips-1.31 | 0, 0, 0 |
| chainguard | eks-distro-fips-1.33 | 0, 0, 0 |
| chainguard | caddy-fips | 0, 0, 0 |
| wolfi | kargo | 0, 0, 0 |
| chainguard | eks-distro-1.33 | 0, 0, 0 |
| chainguard | eks-distro-1.34 | 0, 0, 0 |
| wolfi | dkron | 0, 0, 0 |
| wolfi | frp | 0, 0, 0 |
| chainguard | kyverno-policy-reporter-ui | 0, 0, 0 |
| chainguard | eks-distro-1.31 | 0, 0, 0 |
| chainguard | k3s | 0, 0, 0 |
| chainguard | kyverno-policy-reporter-ui-fips | 0, 0, 0 |
| wolfi | kyverno-policy-reporter-ui | 0, 0, 0 |
| wolfi | caddy | 0, 0, 0 |
| chainguard | eks-distro-fips-1.32 | 0, 0, 0 |
| chainguard | kubo | 0, 0, 0 |
| wolfi | q | 0, 0, 0 |
| wolfi | kubo | 0, 0, 0 |
…and 49 more
Timeline
- Nov 5, 2025 CVE Published
- Aug 7, 2026 CVE Updated
References
- https://github.com/quic-go/quic-go/security/advisories/GHSA-47m2-4cr7-mhcw advisory
- https://github.com/quic-go/quic-go/commit/bc5bccf10fd02728eef150683eb4dfaa5c0e749c patch
- https://github.com/quic-go/quic-go/commit/ce7c9ea8834b9d2ed79efa9269467f02c0895d42 patch
- https://github.com/quic-go/quic-go/pull/5354 patch
- https://github.com/quic-go/quic-go/blob/v0.55.0/connection.go#L2682-L2685 url