CVE-2023-39322

Memory exhaustion in QUIC connection handling in crypto/tls

Published Sep 8, 2023 CVSS 3.1 · 7.5 High EPSS 1.3% KEV · Not listed
Description
QUIC connections do not set an upper bound on the amount of data buffered when reading post-handshake messages, allowing a malicious QUIC connection to cause unbounded memory growth. With fix, connections now consistently reject messages larger than 65KiB in size.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2023-43054 QUIC connections do not set an upper bound on the amount of data buffered when reading post-handshake messages, allowing a malicious QUIC connection to cause unbounded memory growth. With fix, connections now consistently reject messages larger than 65KiB in size.
History
Type Values Removed Values Added
Metrics epss

{'score': 0.00035}

epss

{'score': 0.00042}

Type Values Removed Values Added
First Time appeared Go Standard Library
Go Standard Library crypto Tls
CPEs cpe:2.3:a:go_standard_library:crypto_tls:*:*:*:*:*:*:*:*
Vendors & Products Go Standard Library
Go Standard Library crypto Tls
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Type Values Removed Values Added
First Time appeared Redhat openshift Distributed Tracing
CPEs cpe:/a:redhat:acm:2.6::el8
cpe:/a:redhat:multicluster_engine:2.1::el8
cpe:/a:redhat:openshift_distributed_tracing:2.9::el8
Vendors & Products Redhat openshift Distributed Tracing
Type Values Removed Values Added
CPEs cpe:/a:redhat:acm:2.6::el8
cpe:/a:redhat:multicluster_engine:2.1::el8
cpe:/a:redhat:openshift_distributed_tracing:2.9::el8
Vendors & Products Redhat openshift Distributed Tracing