PT-2023-32560 · Quiche · Quiche
Marten-Seemann
·
Publicado
2023-12-12
·
Atualizado
2023-12-14
·
CVE-2023-6193
CVSS v3.1
5.3
Média
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L |
Name of the Vulnerable Software and Affected Versions
quiche versions 0.15.0 through 0.19.0
Description
The issue is related to unbounded queuing of path validation messages, which could lead to excessive resource consumption. QUIC path validation requires that the recipient of a
PATH CHALLENGE frame responds by sending a PATH RESPONSE. An unauthenticated remote attacker can exploit this by sending PATH CHALLENGE frames and manipulating the connection, such as restricting the peer's congestion window size, so that PATH RESPONSE frames can only be sent at a slower rate than they are received, leading to storage of path validation data in an unbounded queue.Recommendations
For quiche versions 0.15.0 through 0.19.0, update to a version greater than 0.19.0 to address this problem. As a temporary workaround, consider restricting access to the
PATH CHALLENGE frame to minimize the risk of exploitation. Avoid manipulating the connection to restrict the peer's congestion window size, which can exacerbate the issue.Correção
Resource Exhaustion
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Quiche