PT-2023-32973 · Amazon · S2N-Quic

Published 2023-11-08 · Updated 2023-11-08

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions s2n-quic versions prior to 1.31.0

Description The issue in s2n-quic results in unnecessary resource utilization when peers open streams beyond advertised limits.

Recommendations For versions prior to 1.31.0, upgrade to version 1.31.0 or later to resolve the issue.

Related Identifiers

GHSA-475V-PQ2G-FP9G

Affected Products

S2N-Quic

References · 5

• https://osv.dev/vulnerability/GHSA-475v-pq2g-fp9g · Vendor Advisory
• https://github.com/aws/s2n-quic/commit/73e66b066de4940d129dbf33d91c39170eb4c38d · Note
• https://github.com/aws/s2n-quic/releases/tag/v1.31.0 · Note
• https://github.com/aws/s2n-quic/security/advisories/GHSA-475v-pq2g-fp9g · Note
• https://github.com/aws/s2n-quic · Note