PT-2023-5942

CVE-2023-36435

·

Published

2023-10-10

·

Updated

2024-12-13

Description by

CVSS 2.0
7.8
High
MetricsAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions Microsoft QUIC (affected versions not specified)
Description The issue is related to insufficient input validation in the implementation of the QUIC network protocol in the Windows operating system. This can be exploited by a remote attacker to cause a denial of service. The MsQuic server may continue to leak memory until no more is available, resulting in a denial of service.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Researchers
Vendors
Affected products
Related identifiers
GHSA-FR44-546P-7XCP
ALT-PU-2024-1065
ALT-PU-2024-1066
ALT-PU-2024-1067
ALT-PU-2024-16796
ALT-PU-2024-16939
ALT-PU-2024-2765
ALT-PU-2024-2767
BIT-DOTNET-2023-36435
BIT-DOTNET-SDK-2023-36435
Found an issue in the description? Have something to add? Feel free to write us 👾