Bun HTTP/3 server header counter overflow DoS (inbound QUIC then process hang)

ills3c Intel&Coffee@Ills3C

•updated 4 days ago•0•0•1

Detects an inbound QUIC/UDP port 443 burst targeting a Bun process (bun.exe or bun) from external IP addresses, followed by the process going completely silent on the network within a short time window. This pattern correlates with potential exploitation or denial-of-service conditions involving network parsing anomalies.