NuGet/Microsoft.Native.Quic.MsQuic.OpenSSL CVE-2023-38171: high 7.5, EPSS 71.05%
Remote Denial of Service Vulnerability in Microsoft.Native.Quic.MsQuic.Schannel
Action: Upgrade Microsoft.Native.Quic.MsQuic.OpenSSL to 2.2.3 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.2.3 | - |
Fixed versions
| 2.2.3 |
Sources
- osv: GHSA-xh5m-8qqp-c5x7#NuGet/Microsoft.Native.Quic.MsQuic.OpenSSL
- https://github.com/microsoft/msquic/security/advisories/GHSA-xh5m-8qqp-c5x7
- https://nvd.nist.gov/vuln/detail/CVE-2023-38171
- https://github.com/microsoft/msquic/commit/3226cff07d22662f16fc98d605656860e64cd343
- https://github.com/microsoft/msquic
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-38171
CVE-2023-38171 · published · modified · JSON