Описание
quic-go is an implementation of the QUIC protocol in Go. Prior to version 0.42.0, an attacker can cause its peer to run out of memory sending a large number of NEW_CONNECTION_ID frames that retire old connection IDs. The receiver is supposed to respond to each retirement frame with a RETIRE_CONNECTION_ID frame. The attacker can prevent the receiver from sending out (the vast majority of) these RETIRE_CONNECTION_ID frames by collapsing the peers congestion window (by selectively acknowledging received packets) and by manipulating the peer's RTT estimate. Version 0.42.0 contains a patch for the issue. No known workarounds are available.
A flaw was found in quic-go. This issue may allow an attacker to trigger a denial of service by sending a large number of NEW_CONNECTION_ID frames that retire old connection IDs. The receiver is supposed to respond to each retirement frame with a RETIRE_CONNECTION_ID frame, but the attacker can prevent the receiver from sending out the vast majority of these RETIRE_CONNECTION_ID frames by selectively acknowledging received packets and collapsing the peers congestion window and by manipulating the peer's RTT estimate.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Advanced Cluster Management for Kubernetes 2 | rhacm2/lighthouse-agent-rhel9 | Affected | ||
| Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9 | rhacm2/volsync-operator-bundle | Fixed | RHSA-2024:4144 | 26.06.2024 |
| Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9 | rhacm2/volsync-rhel9 | Fixed | RHSA-2024:4144 | 26.06.2024 |
| Red Hat Ansible Automation Platform 2.5 for RHEL 8 | receptor | Fixed | RHSA-2024:8534 | 28.10.2024 |
| Red Hat Ansible Automation Platform 2.5 for RHEL 9 | receptor | Fixed | RHSA-2024:8534 | 28.10.2024 |
| Red Hat OpenShift Container Platform 4.16 | openshift4/ose-coredns-rhel9 | Fixed | RHSA-2024:0041 | 27.06.2024 |
| Red Hat OpenShift Service Mesh 2.6 for RHEL 8 | openshift-service-mesh/grafana-rhel8 | Fixed | RHSA-2024:5094 | 07.08.2024 |
| Red Hat OpenShift Service Mesh 2.6 for RHEL 8 | openshift-service-mesh/istio-cni-rhel8 | Fixed | RHSA-2024:5094 | 07.08.2024 |
| Red Hat OpenShift Service Mesh 2.6 for RHEL 8 | openshift-service-mesh/istio-must-gather-rhel8 | Fixed | RHSA-2024:5094 | 07.08.2024 |
| Red Hat OpenShift Service Mesh 2.6 for RHEL 8 | openshift-service-mesh/istio-rhel8-operator | Fixed | RHSA-2024:5094 | 07.08.2024 |
Показывать по
Ссылки на источники
Дополнительная информация
Статус:
EPSS
7.5 High
CVSS3
Связанные уязвимости
quic-go is an implementation of the QUIC protocol in Go. Prior to version 0.42.0, an attacker can cause its peer to run out of memory sending a large number of `NEW_CONNECTION_ID` frames that retire old connection IDs. The receiver is supposed to respond to each retirement frame with a `RETIRE_CONNECTION_ID` frame. The attacker can prevent the receiver from sending out (the vast majority of) these `RETIRE_CONNECTION_ID` frames by collapsing the peers congestion window (by selectively acknowledging received packets) and by manipulating the peer's RTT estimate. Version 0.42.0 contains a patch for the issue. No known workarounds are available.
quic-go is an implementation of the QUIC protocol in Go. Prior to version 0.42.0, an attacker can cause its peer to run out of memory sending a large number of `NEW_CONNECTION_ID` frames that retire old connection IDs. The receiver is supposed to respond to each retirement frame with a `RETIRE_CONNECTION_ID` frame. The attacker can prevent the receiver from sending out (the vast majority of) these `RETIRE_CONNECTION_ID` frames by collapsing the peers congestion window (by selectively acknowledging received packets) and by manipulating the peer's RTT estimate. Version 0.42.0 contains a patch for the issue. No known workarounds are available.
quic-go is an implementation of the QUIC protocol in Go. Prior to vers ...
QUIC's Connection ID Mechanism vulnerable to Memory Exhaustion Attack
EPSS
7.5 High
CVSS3