CVE-2023-39321

Panic when processing post-handshake message on QUIC connections in crypto/tls

Published Sep 8, 2023 CVSS 3.1 · 7.5 High EPSS 1.3% KEV · Not listed
Description
Processing an incomplete post-handshake message for a QUIC connection can cause a panic.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2023-43053 Processing an incomplete post-handshake message for a QUIC connection can cause a panic.
History
Type Values Removed Values Added
Metrics epss

{'score': 0.00035}

epss

{'score': 0.00042}

Type Values Removed Values Added
Weaknesses CWE-400
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Type Values Removed Values Added
First Time appeared Redhat openshift Distributed Tracing
CPEs cpe:/a:redhat:acm:2.6::el8
cpe:/a:redhat:multicluster_engine:2.1::el8
cpe:/a:redhat:openshift_distributed_tracing:2.9::el8
Vendors & Products Redhat openshift Distributed Tracing
Type Values Removed Values Added
CPEs cpe:/a:redhat:acm:2.6::el8
cpe:/a:redhat:multicluster_engine:2.1::el8
cpe:/a:redhat:openshift_distributed_tracing:2.9::el8
Vendors & Products Redhat openshift Distributed Tracing