Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-a755-1t2h-j3d9
Vulnerability ID VCID-a755-1t2h-j3d9
Aliases CVE-2024-1765
GHSA-78wx-jg4j-5j6g
Summary Cloudflare Quiche (through version 0.19.1/0.20.0) was affected by an unlimited resource allocation vulnerability causing rapid increase of memory usage of the system running quiche server or client. A remote attacker could take advantage of this vulnerability by repeatedly sending an unlimited number of 1-RTT CRYPTO frames after previously completing the QUIC handshake. Exploitation was possible for the duration of the connection which could be extended by the attacker.  quiche 0.19.2 and 0.20.1 are the earliest versions containing the fix for this issue.
Status Published
Exploitability 0.5
Weighted Severity 6.2
Risk 3.1
Affected and Fixed Packages Package Details
Weaknesses (2)
CWE-400 Uncontrolled Resource Consumption
CWE-770 Allocation of Resources Without Limits or Throttling
System Score Found at
epss 0.05489 https://api.first.org/data/v1/epss?cve=CVE-2024-1765
epss 0.05489 https://api.first.org/data/v1/epss?cve=CVE-2024-1765
epss 0.05489 https://api.first.org/data/v1/epss?cve=CVE-2024-1765
cvssv3.1_qr MODERATE https://github.com/advisories/GHSA-78wx-jg4j-5j6g
cvssv3.1 5.9 https://github.com/cloudflare/quiche
generic_textual MODERATE https://github.com/cloudflare/quiche
cvssv3.1 5.9 https://github.com/cloudflare/quiche/commit/1017466c143fc93a82b286a1ba35e53334cdf8e2
generic_textual MODERATE https://github.com/cloudflare/quiche/commit/1017466c143fc93a82b286a1ba35e53334cdf8e2
cvssv3.1 5.9 https://github.com/cloudflare/quiche/commit/11dbf5461ab657bbc02e466d719070124b27ef3c
generic_textual MODERATE https://github.com/cloudflare/quiche/commit/11dbf5461ab657bbc02e466d719070124b27ef3c
cvssv3.1 5.9 https://github.com/cloudflare/quiche/releases/tag/0.19.2
generic_textual MODERATE https://github.com/cloudflare/quiche/releases/tag/0.19.2
cvssv3.1 5.9 https://github.com/cloudflare/quiche/releases/tag/0.20.1
generic_textual MODERATE https://github.com/cloudflare/quiche/releases/tag/0.20.1
cvssv3.1 5.9 https://github.com/cloudflare/quiche/security/advisories/GHSA-78wx-jg4j-5j6g
cvssv3.1_qr MODERATE https://github.com/cloudflare/quiche/security/advisories/GHSA-78wx-jg4j-5j6g
generic_textual MODERATE https://github.com/cloudflare/quiche/security/advisories/GHSA-78wx-jg4j-5j6g
ssvc Track https://github.com/cloudflare/quiche/security/advisories/GHSA-78wx-jg4j-5j6g
cvssv3.1 5.9 https://nvd.nist.gov/vuln/detail/CVE-2024-1765
generic_textual MODERATE https://nvd.nist.gov/vuln/detail/CVE-2024-1765
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2024-1765
https://github.com/cloudflare/quiche
https://github.com/cloudflare/quiche/commit/1017466c143fc93a82b286a1ba35e53334cdf8e2
https://github.com/cloudflare/quiche/commit/11dbf5461ab657bbc02e466d719070124b27ef3c
https://github.com/cloudflare/quiche/releases/tag/0.19.2
https://github.com/cloudflare/quiche/releases/tag/0.20.1
CVE-2024-1765 https://nvd.nist.gov/vuln/detail/CVE-2024-1765
GHSA-78wx-jg4j-5j6g https://github.com/advisories/GHSA-78wx-jg4j-5j6g
GHSA-78wx-jg4j-5j6g https://github.com/cloudflare/quiche/security/advisories/GHSA-78wx-jg4j-5j6g
No exploits are available.
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H Found at https://github.com/cloudflare/quiche
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H Found at https://github.com/cloudflare/quiche/commit/1017466c143fc93a82b286a1ba35e53334cdf8e2
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H Found at https://github.com/cloudflare/quiche/commit/11dbf5461ab657bbc02e466d719070124b27ef3c
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H Found at https://github.com/cloudflare/quiche/releases/tag/0.19.2
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H Found at https://github.com/cloudflare/quiche/releases/tag/0.20.1
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H Found at https://github.com/cloudflare/quiche/security/advisories/GHSA-78wx-jg4j-5j6g
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-03-13T14:44:18Z/ Found at https://github.com/cloudflare/quiche/security/advisories/GHSA-78wx-jg4j-5j6g
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H Found at https://nvd.nist.gov/vuln/detail/CVE-2024-1765
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.90425
EPSS Score 0.05489
Published At June 11, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-06-10T18:42:58.683165+00:00 Vulnrichment Import https://github.com/cisagov/vulnrichment/blob/develop/2024/1xxx/CVE-2024-1765.json 38.6.0