{"action":"Upgrade Microsoft.Native.Quic.MsQuic.OpenSSL to 2.2.3 or later.","affected":[{"fixed":"2.2.3","introduced":"0"}],"component":"Microsoft.Native.Quic.MsQuic.OpenSSL","cve_ids":["CVE-2023-38171"],"ecosystem":"NuGet","epss":0.71046,"exploited":false,"fixed_versions":["2.2.3"],"ghsa_id":"GHSA-xh5m-8qqp-c5x7","id":"tcs_01M5N95GZQ82FEEPJWB551TW00","modified_at":"2024-06-03T18:46:58.328470Z","published_at":"2023-10-10T21:23:27Z","references":["https://osv.dev/vulnerability/GHSA-xh5m-8qqp-c5x7","https://github.com/microsoft/msquic/security/advisories/GHSA-xh5m-8qqp-c5x7","https://nvd.nist.gov/vuln/detail/CVE-2023-38171","https://github.com/microsoft/msquic/commit/3226cff07d22662f16fc98d605656860e64cd343","https://github.com/microsoft/msquic","https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-38171"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-xh5m-8qqp-c5x7#NuGet/Microsoft.Native.Quic.MsQuic.OpenSSL","url":"https://osv.dev/vulnerability/GHSA-xh5m-8qqp-c5x7"}],"summary":"Remote Denial of Service Vulnerability in Microsoft.Native.Quic.MsQuic.Schannel"}