PT-2023-32973 · Amazon · S2N-Quic

Publicado 2023-11-08 · Atualizado 2023-11-08

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions s2n-quic versions prior to 1.31.0

Description The issue in s2n-quic results in unnecessary resource utilization when peers open streams beyond advertised limits.

Recommendations For versions prior to 1.31.0, upgrade to version 1.31.0 or later to resolve the issue.

Identificadores relacionados

GHSA-475V-PQ2G-FP9G

Produtos afetados

S2N-Quic

Referências · 5

• https://github.com/aws/s2n-quic/commit/73e66b066de4940d129dbf33d91c39170eb4c38d · Nota
• https://github.com/aws/s2n-quic/releases/tag/v1.31.0 · Nota
• https://github.com/aws/s2n-quic/security/advisories/GHSA-475v-pq2g-fp9g · Nota
• https://github.com/aws/s2n-quic · Nota
• https://osv.dev/vulnerability/GHSA-475v-pq2g-fp9g · Aviso do Fabricante