CVE-2025-23020: Ptrd Kwik

Medium severity, CVSS 5.3. EPSS: 0.6% chance of exploitation in the next 30 days.

An issue was discovered in Kwik before 0.10.1. A hash collision vulnerability (in the hash table used to manage connections) allows remote attackers to cause a considerable CPU load on the server (a Hash DoS attack) by initiating connections with colliding Source Connection IDs (SCIDs).

Affected products

• Ptrd Kwik: before 0.10.1 (fixed in 0.10.1)

Published 2025-02-20. Last modified 2026-06-17.