Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2023-38171

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-xh5m-8qqp-c5x7

Remote Denial of Service Vulnerability in Microsoft.Native.Quic.MsQuic.Schannel ### Impact The MsQuic server application or process will crash, resulting in a denial of service. ### Patches The following patch was made: - Don't Allow Version Negotiation Packets for Server Connections - https://github.com/microsoft/msquic/commit/3226cff07d22662f16fc98d605656860e64cd343 ### Workarounds Beyond upgrading to the patched versions, there is no other workaround. You must upgrade or disable MsQuic functionality.

gitlab/nuget/Microsoft.Native.Quic.MsQuic.OpenSSL/CVE-2023-38171

Remote Denial of Service Vulnerability in Microsoft.Native.Quic.MsQuic.Schannel Microsoft QUIC Denial of Service Vulnerability

gitlab/nuget/Microsoft.Native.Quic.MsQuic.Schannel/CVE-2023-38171

Remote Denial of Service Vulnerability in Microsoft.Native.Quic.MsQuic.Schannel Microsoft QUIC Denial of Service Vulnerability