CVE-2024-1410
1 advisory.
crates.io/quiche CVE-2024-1410: low 3.7, EPSS 0.66%
quiche vulnerable to unbounded storage of information related to connection ID retirement
Action: Upgrade quiche to 0.19.2 or later.
cargo update -p quiche --precise 0.19.2cargo update -p quiche --precise 0.20.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.19.2 | - |
| 0.20.0 | 0.20.1 | - |
Fixed versions
| 0.19.2 | 0.20.1 |
Sources
- osv: GHSA-xhg9-xwch-vr7x
- https://github.com/cloudflare/quiche/security/advisories/GHSA-xhg9-xwch-vr7x
- https://nvd.nist.gov/vuln/detail/CVE-2024-1410
- https://github.com/cloudflare/quiche/commit/0c5733a84c41e9e178adc866b11ce59ac264f5af
- https://github.com/cloudflare/quiche/commit/5be8143126f8cfa8a483d4a5ae475b9a46053fa1
- https://github.com/cloudflare/quiche/commit/7ab42af5f5e97f20f1d63b7ea2f9ab0536678c40
- https://github.com/cloudflare/quiche/commit/a983998c4408605905ee9a6ab0fc00e68436ac67
- https://github.com/cloudflare/quiche
- https://github.com/cloudflare/quiche/releases/tag/0.19.2
- https://github.com/cloudflare/quiche/releases/tag/0.20.1
CVE-2024-1410 · published · modified · JSON