CVE-2023-36435

CWE-400 — Uncontrolled Resource ConsumptionCWE-401 — Memory Leak5 documents5 sources
Severity
7.5HIGH
No vector
EPSS
2.8%
top 13.79%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
5
Microsoft .net 7.0Microsoft Powershell 7.3Microsoft Windows 11 Version 21h2+2 more
Timeline
PublishedOct 10

Description

Microsoft QUIC Denial of Service Vulnerability Microsoft QUIC Denial of Service Vulnerability

Affected Packages7 packages

▶CVEListV5microsoft/.net_7.07.0.0 — 7.0.13
▶CVEListV5microsoft/powershell_7.37.3.0 — 7.3.9
▶CVEListV5microsoft/windows_server_202210.0.20348.0 — 10.0.20348.2031

🔴Vulnerability Details

3
OSV
MsQuic Remote Denial of Service Vulnerability↗2023-10-10
▶
CVEList
Microsoft QUIC Denial of Service Vulnerability↗2023-10-10
▶
GHSA
MsQuic Remote Denial of Service Vulnerability↗2023-10-10
▶

📋Vendor Advisories

2
Microsoft
Microsoft QUIC Denial of Service Vulnerability↗2023-10-10
▶
Red Hat
dotnet: memory leak in MsQuic.dll may lead to denial of service↗2023-10-10
▶
CVE-2023-36435 (HIGH CVSS 7.5) | Microsoft QUIC Denial of Service Vu | cvebase.io