GHSA-2X7M-GF85-3745 Remote Denial of Service Vulnerability in Microsoft QUIC

Impact The MsQuic server will continue to leak memory until no more is available, resulting in a denial of service. Patches The following patch was made: - Fix Memory Leak from Multiple Decodes of TP - https://github.com/microsoft/msquic/commit/5d070d661c45979946615289e92bb6b822efe9e9 Workarounds...

Security Update for Microsoft .NET Core SDK (March 2024)

The version of .NET Core SDK installed on the remote host is 6.x prior to 6.0.27, 7.x prior to 7.0.16 or 8.x prior to 8.0.2. It is, therefore, affected by multiple vulnerabilities as referenced in the February 2024 advisory: - A vulnerability exists in .NET where specially crafted requests may...

CVE-2024-26190

Microsoft QUIC Denial of Service Vulnerability...

CVE-2024-26190

Microsoft QUIC Denial of Service Vulnerability...

CVE-2024-26190

CVE-2024-26190 : Microsoft QUIC (MsQuic) server component is affected by a denial-of-service vulnerability caused by a memory leak that can be triggered by multiple decodes, leading to memory exhaustion. The entry’s CVSSv3.1 base score is 7.5 (HIGH) with network attack vector, no authentication, ...

CVE-2024-26190 Microsoft QUIC Denial of Service Vulnerability

...

CVE-2024-26190

Microsoft QUIC Denial of Service Vulnerability...