Vulnetix
Try Vulnetix Request Demo
CVE-2023-39322 PUBLISHED

QUIC connections do not set an upper bound on the amount of data buffered when reading post-handshake messages, allowing a malicious QUIC connection to cause unbounded memory growth. With fix, connections now consistently reject messages larger than 65KiB in size.

EPSS 0.04% · 12.7th percentile

Risk Scores

EPSS Score
0.04%
12.7th percentile

Affected Products

VendorProductVersions
Bitnamigolang1.21.0
AWSconnect
Bitnamigolang1.21.0

Timeline

References

Open in Interactive Console →