CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-49295

quic-go is an implementation of the QUIC protocol (RFC 9000, RFC 9001, RFC 9002) in Go. An attacker can cause its peer to run out of memory sending a large number of PATH_CHALLENGE frames. The receiver is supposed to respond to each PATH_CHALLENGE frame with a PATH_RESPONSE frame. The attacker can prevent the receiver from sending out (the vast majority of) these PATH_RESPONSE frames by collapsing the peers congestion window (by selectively acknowledging received packets) and by manipulating the peer's RTT estimate. This vulnerability has been patched in versions 0.37.7, 0.38.2 and 0.39.4.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.011

EPSS Ranking 76.5%

CVSS Severity

CVSS v3 Score 6.4

References

Products affected by CVE-2023-49295

Quic-Go Project » Quic-Go » Version: N/A

cpe:2.3:a:quic-go_project:quic-go:-
Quic-Go Project » Quic-Go » Version: 0.10.0

cpe:2.3:a:quic-go_project:quic-go:0.10.0
Quic-Go Project » Quic-Go » Version: 0.10.1

cpe:2.3:a:quic-go_project:quic-go:0.10.1
Quic-Go Project » Quic-Go » Version: 0.10.2

cpe:2.3:a:quic-go_project:quic-go:0.10.2
Quic-Go Project » Quic-Go » Version: 0.11.0

cpe:2.3:a:quic-go_project:quic-go:0.11.0
Quic-Go Project » Quic-Go » Version: 0.11.1

cpe:2.3:a:quic-go_project:quic-go:0.11.1
Quic-Go Project » Quic-Go » Version: 0.11.2

cpe:2.3:a:quic-go_project:quic-go:0.11.2
Quic-Go Project » Quic-Go » Version: 0.12.0

cpe:2.3:a:quic-go_project:quic-go:0.12.0
Quic-Go Project » Quic-Go » Version: 0.12.1

cpe:2.3:a:quic-go_project:quic-go:0.12.1
Quic-Go Project » Quic-Go » Version: 0.13.0

cpe:2.3:a:quic-go_project:quic-go:0.13.0
Quic-Go Project » Quic-Go » Version: 0.13.1

cpe:2.3:a:quic-go_project:quic-go:0.13.1
Quic-Go Project » Quic-Go » Version: 0.14.0

cpe:2.3:a:quic-go_project:quic-go:0.14.0
Quic-Go Project » Quic-Go » Version: 0.14.1

cpe:2.3:a:quic-go_project:quic-go:0.14.1
Quic-Go Project » Quic-Go » Version: 0.14.2

cpe:2.3:a:quic-go_project:quic-go:0.14.2
Quic-Go Project » Quic-Go » Version: 0.14.3

cpe:2.3:a:quic-go_project:quic-go:0.14.3
Quic-Go Project » Quic-Go » Version: 0.14.4

cpe:2.3:a:quic-go_project:quic-go:0.14.4
Quic-Go Project » Quic-Go » Version: 0.15.0

cpe:2.3:a:quic-go_project:quic-go:0.15.0
Quic-Go Project » Quic-Go » Version: 0.15.1

cpe:2.3:a:quic-go_project:quic-go:0.15.1
Quic-Go Project » Quic-Go » Version: 0.15.2

cpe:2.3:a:quic-go_project:quic-go:0.15.2
Quic-Go Project » Quic-Go » Version: 0.15.3

cpe:2.3:a:quic-go_project:quic-go:0.15.3
Quic-Go Project » Quic-Go » Version: 0.15.4

cpe:2.3:a:quic-go_project:quic-go:0.15.4
Quic-Go Project » Quic-Go » Version: 0.15.5

cpe:2.3:a:quic-go_project:quic-go:0.15.5
Quic-Go Project » Quic-Go » Version: 0.15.6

cpe:2.3:a:quic-go_project:quic-go:0.15.6
Quic-Go Project » Quic-Go » Version: 0.15.7

cpe:2.3:a:quic-go_project:quic-go:0.15.7
Quic-Go Project » Quic-Go » Version: 0.15.8

cpe:2.3:a:quic-go_project:quic-go:0.15.8
Quic-Go Project » Quic-Go » Version: 0.16.0

cpe:2.3:a:quic-go_project:quic-go:0.16.0
Quic-Go Project » Quic-Go » Version: 0.16.1

cpe:2.3:a:quic-go_project:quic-go:0.16.1
Quic-Go Project » Quic-Go » Version: 0.16.2

cpe:2.3:a:quic-go_project:quic-go:0.16.2
Quic-Go Project » Quic-Go » Version: 0.17.0

cpe:2.3:a:quic-go_project:quic-go:0.17.0
Quic-Go Project » Quic-Go » Version: 0.17.1

cpe:2.3:a:quic-go_project:quic-go:0.17.1
Quic-Go Project » Quic-Go » Version: 0.17.2

cpe:2.3:a:quic-go_project:quic-go:0.17.2
Quic-Go Project » Quic-Go » Version: 0.17.3

cpe:2.3:a:quic-go_project:quic-go:0.17.3
Quic-Go Project » Quic-Go » Version: 0.18.0

cpe:2.3:a:quic-go_project:quic-go:0.18.0
Quic-Go Project » Quic-Go » Version: 0.18.1

cpe:2.3:a:quic-go_project:quic-go:0.18.1
Quic-Go Project » Quic-Go » Version: 0.19.0

cpe:2.3:a:quic-go_project:quic-go:0.19.0
Quic-Go Project » Quic-Go » Version: 0.19.1

cpe:2.3:a:quic-go_project:quic-go:0.19.1
Quic-Go Project » Quic-Go » Version: 0.19.2

cpe:2.3:a:quic-go_project:quic-go:0.19.2
Quic-Go Project » Quic-Go » Version: 0.19.3

cpe:2.3:a:quic-go_project:quic-go:0.19.3
Quic-Go Project » Quic-Go » Version: 0.20.0

cpe:2.3:a:quic-go_project:quic-go:0.20.0
Quic-Go Project » Quic-Go » Version: 0.20.1

cpe:2.3:a:quic-go_project:quic-go:0.20.1
Quic-Go Project » Quic-Go » Version: 0.21

cpe:2.3:a:quic-go_project:quic-go:0.21
Quic-Go Project » Quic-Go » Version: 0.21.0

cpe:2.3:a:quic-go_project:quic-go:0.21.0
Quic-Go Project » Quic-Go » Version: 0.21.1

cpe:2.3:a:quic-go_project:quic-go:0.21.1
Quic-Go Project » Quic-Go » Version: 0.21.2

cpe:2.3:a:quic-go_project:quic-go:0.21.2
Quic-Go Project » Quic-Go » Version: 0.22.0

cpe:2.3:a:quic-go_project:quic-go:0.22.0
Quic-Go Project » Quic-Go » Version: 0.22.1

cpe:2.3:a:quic-go_project:quic-go:0.22.1
Quic-Go Project » Quic-Go » Version: 0.23.0

cpe:2.3:a:quic-go_project:quic-go:0.23.0
Quic-Go Project » Quic-Go » Version: 0.24.0

cpe:2.3:a:quic-go_project:quic-go:0.24.0
Quic-Go Project » Quic-Go » Version: 0.25.0

cpe:2.3:a:quic-go_project:quic-go:0.25.0
Quic-Go Project » Quic-Go » Version: 0.26.0

cpe:2.3:a:quic-go_project:quic-go:0.26.0
Quic-Go Project » Quic-Go » Version: 0.27.0

cpe:2.3:a:quic-go_project:quic-go:0.27.0
Quic-Go Project » Quic-Go » Version: 0.27.1

cpe:2.3:a:quic-go_project:quic-go:0.27.1
Quic-Go Project » Quic-Go » Version: 0.27.2

cpe:2.3:a:quic-go_project:quic-go:0.27.2
Quic-Go Project » Quic-Go » Version: 0.28.0

cpe:2.3:a:quic-go_project:quic-go:0.28.0
Quic-Go Project » Quic-Go » Version: 0.28.1

cpe:2.3:a:quic-go_project:quic-go:0.28.1
Quic-Go Project » Quic-Go » Version: 0.29.0

cpe:2.3:a:quic-go_project:quic-go:0.29.0
Quic-Go Project » Quic-Go » Version: 0.29.1

cpe:2.3:a:quic-go_project:quic-go:0.29.1
Quic-Go Project » Quic-Go » Version: 0.29.2

cpe:2.3:a:quic-go_project:quic-go:0.29.2
Quic-Go Project » Quic-Go » Version: 0.30.0

cpe:2.3:a:quic-go_project:quic-go:0.30.0
Quic-Go Project » Quic-Go » Version: 0.31.0

cpe:2.3:a:quic-go_project:quic-go:0.31.0
Quic-Go Project » Quic-Go » Version: 0.31.1

cpe:2.3:a:quic-go_project:quic-go:0.31.1
Quic-Go Project » Quic-Go » Version: 0.32.0

cpe:2.3:a:quic-go_project:quic-go:0.32.0
Quic-Go Project » Quic-Go » Version: 0.33.0

cpe:2.3:a:quic-go_project:quic-go:0.33.0
Quic-Go Project » Quic-Go » Version: 0.33.1

cpe:2.3:a:quic-go_project:quic-go:0.33.1
Quic-Go Project » Quic-Go » Version: 0.34.0

cpe:2.3:a:quic-go_project:quic-go:0.34.0
Quic-Go Project » Quic-Go » Version: 0.35.0

cpe:2.3:a:quic-go_project:quic-go:0.35.0
Quic-Go Project » Quic-Go » Version: 0.35.1

cpe:2.3:a:quic-go_project:quic-go:0.35.1
Quic-Go Project » Quic-Go » Version: 0.36.0

cpe:2.3:a:quic-go_project:quic-go:0.36.0
Quic-Go Project » Quic-Go » Version: 0.36.1

cpe:2.3:a:quic-go_project:quic-go:0.36.1
Quic-Go Project » Quic-Go » Version: 0.36.2

cpe:2.3:a:quic-go_project:quic-go:0.36.2
Quic-Go Project » Quic-Go » Version: 0.36.3

cpe:2.3:a:quic-go_project:quic-go:0.36.3
Quic-Go Project » Quic-Go » Version: 0.36.4

cpe:2.3:a:quic-go_project:quic-go:0.36.4
Quic-Go Project » Quic-Go » Version: 0.37.0

cpe:2.3:a:quic-go_project:quic-go:0.37.0
Quic-Go Project » Quic-Go » Version: 0.37.1

cpe:2.3:a:quic-go_project:quic-go:0.37.1
Quic-Go Project » Quic-Go » Version: 0.37.2

cpe:2.3:a:quic-go_project:quic-go:0.37.2
Quic-Go Project » Quic-Go » Version: 0.37.3

cpe:2.3:a:quic-go_project:quic-go:0.37.3
Quic-Go Project » Quic-Go » Version: 0.37.4

cpe:2.3:a:quic-go_project:quic-go:0.37.4
Quic-Go Project » Quic-Go » Version: 0.37.5

cpe:2.3:a:quic-go_project:quic-go:0.37.5
Quic-Go Project » Quic-Go » Version: 0.37.6

cpe:2.3:a:quic-go_project:quic-go:0.37.6
Quic-Go Project » Quic-Go » Version: 0.38.0

cpe:2.3:a:quic-go_project:quic-go:0.38.0
Quic-Go Project » Quic-Go » Version: 0.38.1

cpe:2.3:a:quic-go_project:quic-go:0.38.1
Quic-Go Project » Quic-Go » Version: 0.39.0

cpe:2.3:a:quic-go_project:quic-go:0.39.0
Quic-Go Project » Quic-Go » Version: 0.39.1

cpe:2.3:a:quic-go_project:quic-go:0.39.1
Quic-Go Project » Quic-Go » Version: 0.39.2

cpe:2.3:a:quic-go_project:quic-go:0.39.2
Quic-Go Project » Quic-Go » Version: 0.39.3

cpe:2.3:a:quic-go_project:quic-go:0.39.3
Quic-Go Project » Quic-Go » Version: 0.4

cpe:2.3:a:quic-go_project:quic-go:0.4
Quic-Go Project » Quic-Go » Version: 0.40.0

cpe:2.3:a:quic-go_project:quic-go:0.40.0
Quic-Go Project » Quic-Go » Version: 0.5.0

cpe:2.3:a:quic-go_project:quic-go:0.5.0
Quic-Go Project » Quic-Go » Version: 0.6.0

cpe:2.3:a:quic-go_project:quic-go:0.6.0
Quic-Go Project » Quic-Go » Version: 0.7.0

cpe:2.3:a:quic-go_project:quic-go:0.7.0
Quic-Go Project » Quic-Go » Version: 0.8.0

cpe:2.3:a:quic-go_project:quic-go:0.8.0
Quic-Go Project » Quic-Go » Version: 0.9.0

cpe:2.3:a:quic-go_project:quic-go:0.9.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-49295

Products

Pricing

Contact Us