HTTP/3 server process crash after inbound QUIC traffic (QPACK amplification DoS)

ills3c Intel&Coffee@Ills3C

•updated 4 days ago•0•0•2

Detects inbound UDP traffic on port 443 (QUIC) targeting known HTTP/3-capable server processes (such as Caddy, Traefik, Cloudflared) followed closely by the termination or crash of that process, which may indicate an exploit attempt or vulnerability leading to denial of service.