Improper resource allocation In microsoft.native.quic.msquic.schannel
Description
MsQuic Remote Denial of Service Vulnerability
Impact
The MsQuic server will continue to leak memory until no more is available, resulting in a denial of service.
Patches
The following patch was made:
Fix Memory Leak from Multiple Decodes of TP - https://github.com/microsoft/msquic/commit/d364feeda0dd8b729eca6fef149c1ef98630f0cb
Workarounds
Beyond upgrading to the patched versions, there is no other workaround.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Package | Affected version | Patched versions |
|---|---|---|---|
nuget | 2.2.3 | ||
nuget | 2.2.3 |
Aliases
1. 2. 3. 4. 5.
References
1. 2. 3.