Headline
GHSA-fr44-546p-7xcp: MsQuic Remote Denial of Service Vulnerability
Impact
The MsQuic server will continue to leak memory until no more is available, resulting in a denial of service.
Patches
The following patch was made:
- Fix Memory Leak from Multiple Decodes of TP - https://github.com/microsoft/msquic/commit/d364feeda0dd8b729eca6fef149c1ef98630f0cb
Workarounds
Beyond upgrading to the patched versions, there is no other workaround.
MsQuic Remote Denial of Service Vulnerability
High severity GitHub Reviewed Published Oct 10, 2023 in microsoft/msquic • Updated Oct 10, 2023
Related news
CVE-2023-36435
Microsoft QUIC Denial of Service Vulnerability