{"action":"Upgrade Microsoft.Native.Quic.MsQuic.Schannel to 2.2.3 or later.","affected":[{"fixed":"2.2.3","introduced":"0"}],"component":"Microsoft.Native.Quic.MsQuic.Schannel","cve_ids":["CVE-2023-36435"],"ecosystem":"NuGet","epss":0.05718,"exploited":false,"fixed_versions":["2.2.3"],"ghsa_id":"GHSA-fr44-546p-7xcp","id":"tcs_01M5N8N0VNYH3QC2HR44FSP53V","modified_at":"2024-06-03T18:49:04.265783Z","published_at":"2023-10-10T22:23:28Z","references":["https://osv.dev/vulnerability/GHSA-fr44-546p-7xcp","https://github.com/microsoft/msquic/security/advisories/GHSA-fr44-546p-7xcp","https://nvd.nist.gov/vuln/detail/CVE-2023-36435","https://github.com/microsoft/msquic/commit/d364feeda0dd8b729eca6fef149c1ef98630f0cb","https://github.com/microsoft/msquic","https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36435"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-fr44-546p-7xcp#NuGet/Microsoft.Native.Quic.MsQuic.Schannel","url":"https://osv.dev/vulnerability/GHSA-fr44-546p-7xcp"}],"summary":"MsQuic Remote Denial of Service Vulnerability"}