PT-2023-33031 · Amazon · S2N-Quic

Published 2023-06-30 · Updated 2023-06-30

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions s2n-quic version 1.22.0

Description An issue in s2n-quic results in the endpoint shutting down after receiving an empty UDP packet on a connection. No AWS services are affected, and customers of AWS services do not need to take action.

Recommendations For s2n-quic version 1.22.0, upgrade the application to the most recent release of s2n-quic, specifically version 1.23.0, which includes the patch for this issue.

Related Identifiers

GHSA-HXQ4-MX37-FQVG

Affected Products

S2N-Quic

References · 5

• https://osv.dev/vulnerability/GHSA-hxq4-mx37-fqvg · Vendor Advisory
• https://github.com/aws/s2n-quic/commit/4b1d417e9de7eafaf5350553c5fcb9264dfa32f5 · Note
• https://github.com/aws/s2n-quic/security/advisories/GHSA-hxq4-mx37-fqvg · Note
• https://github.com/aws/s2n-quic/releases/tag/v1.23.0 · Note
• https://github.com/aws/s2n-quic · Note