PT-2023-5942

CVE-2023-36435

·

Publicado

2023-10-10

·

Atualizado

2024-12-13

Descrição por

CVSS 2.0
7.8
Alta
MétricasAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions Microsoft QUIC (affected versions not specified)
Description The issue is related to insufficient input validation in the implementation of the QUIC network protocol in the Windows operating system. This can be exploited by a remote attacker to cause a denial of service. The MsQuic server may continue to leak memory until no more is available, resulting in a denial of service.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Explorabilidade
Exploit
Impactos
Pesquisadores
Fornecedores
Produtos afetados
Identificadores relacionados
GHSA-FR44-546P-7XCP
ALT-PU-2024-1065
ALT-PU-2024-1066
ALT-PU-2024-1067
ALT-PU-2024-16796
ALT-PU-2024-16939
ALT-PU-2024-2765
ALT-PU-2024-2767
BIT-DOTNET-2023-36435
BIT-DOTNET-SDK-2023-36435
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾