QUIC connections do not set an upper bound on the amount of data buffered when reading post-handshake messages, allowing a malicious QUIC connection to cause unbounded memory growth. With fix, connections now consistently reject messages larger than 65KiB in size.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade podmanUpgrade podman-catatonitUpgrade containers-commonUpgrade podman-testsUpgrade toolboxUpgrade skopeoUpgrade fuse-overlayfsUpgrade netavarkUpgrade toolbox-testsUpgrade buildah-testsUpgrade podman-gvproxyUpgrade conmonUpgrade python3-podmanUpgrade criuUpgrade aardvark-dnsUpgrade buildahUpgrade libslirp-develUpgrade criu-libsUpgrade slirp4netnsUpgrade libslirpUpgrade oci-seccomp-bpf-hookUpgrade cockpit-podmanUpgrade criu-develUpgrade podman-pluginsUpgrade runcUpgrade git-lfsUpgrade containernetworking-pluginsUpgrade podman-dockerUpgrade skopeo-testsUpgrade container-selinuxUpgrade podman-remoteUpgrade python3-criuUpgrade critUpgrade udicaUpgrade crun | Dec 19, 2023 | Sep 8, 2023 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Sep 8, 2023 |
| Centos_linux | — | Upgrade containernetworking-plugins-debuginfoUpgrade runcUpgrade podman-gvproxy-debuginfoUpgrade python3-criuUpgrade udicaUpgrade libslirp-debugsourceUpgrade slirp4netnsUpgrade podman-plugins-debuginfoUpgrade container-selinuxUpgrade podman-gvproxyUpgrade podman-pluginsUpgrade toolbox-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade podman-catatonit-debuginfoUpgrade conmonUpgrade crunUpgrade runc-debuginfoUpgrade slirp4netns-debugsourceUpgrade buildah-debugsourceUpgrade podman-dockerUpgrade podman-testsUpgrade skopeo-testsUpgrade podman-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade containernetworking-pluginsUpgrade critUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-debuginfoUpgrade skopeo-debuginfoUpgrade slirp4netns-debuginfoUpgrade criu-libs-debuginfoUpgrade podman-remote-debuginfoUpgrade toolbox-debugsourceUpgrade libslirp-debuginfoUpgrade podman-remoteUpgrade criu-develUpgrade buildah-testsUpgrade libslirp-develUpgrade python3-podmanUpgrade runc-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade buildahUpgrade aardvark-dnsUpgrade podmanUpgrade buildah-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade crun-debugsourceUpgrade conmon-debuginfoUpgrade podman-catatonitUpgrade criu-libsUpgrade criu-debuginfoUpgrade crun-debuginfoUpgrade criu-debugsourceUpgrade conmon-debugsourceUpgrade libslirpUpgrade toolbox-testsUpgrade netavarkUpgrade criuUpgrade cockpit-podmanUpgrade fuse-overlayfs-debugsourceUpgrade fuse-overlayfsUpgrade containers-commonUpgrade buildah-tests-debuginfoUpgrade toolboxUpgrade skopeo-debugsourceUpgrade skopeo | Dec 13, 2023 | Sep 8, 2023 |
| Freebsd | — | Upgrade go120Upgrade go121 | Sep 8, 2023 | Sep 7, 2023 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Nov 27, 2023 | Sep 8, 2023 |
| Oracle_linux | — | Upgrade buildahUpgrade buildah-testsUpgrade criuUpgrade podman-testsUpgrade podman-gvproxyUpgrade slirp4netnsUpgrade libslirpUpgrade critUpgrade fuse-overlayfsUpgrade cockpit-podmanUpgrade git-lfsUpgrade python3-podmanUpgrade conmonUpgrade udicaUpgrade runcUpgrade python3-criuUpgrade podman-catatonitUpgrade podman-dockerUpgrade aardvark-dnsUpgrade skopeo-testsUpgrade netavarkUpgrade podmanUpgrade crunUpgrade containers-commonUpgrade podman-pluginsUpgrade oci-seccomp-bpf-hookUpgrade criu-libsUpgrade criu-develUpgrade containernetworking-pluginsUpgrade container-selinuxUpgrade libslirp-develUpgrade skopeoUpgrade podman-remote | Dec 14, 2023 | Sep 6, 2023 |
| Redhat Openshift | — | Upgrade microshiftUpgrade buildahUpgrade openshift-clientsUpgrade skopeoUpgrade podmanUpgrade containernetworking-pluginsUpgrade runc | Nov 1, 2023 | Sep 6, 2023 |
| Redhat_linux | — | Upgrade slirp4netnsUpgrade slirp4netns-debuginfoUpgrade toolbox-debuginfoUpgrade git-lfs-debugsourceUpgrade podman-catatonitUpgrade critUpgrade podman-testsUpgrade crunUpgrade crun-debuginfoUpgrade podman-gvproxyUpgrade podman-gvproxy-debuginfoUpgrade netavarkNo solution existsUpgrade toolbox-testsUpgrade conmonUpgrade buildahUpgrade skopeo-debugsourceUpgrade libslirp-debugsourceUpgrade fuse-overlayfsUpgrade buildah-testsUpgrade git-lfsUpgrade libslirpUpgrade containernetworking-plugins-debugsourceUpgrade skopeo-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade udicaUpgrade python3-podmanUpgrade podman-dockerUpgrade conmon-debuginfoUpgrade cockpit-podmanUpgrade criuUpgrade criu-libs-debuginfoUpgrade runcUpgrade toolbox-debugsourceUpgrade python3-criuUpgrade runc-debuginfoUpgrade podman-debugsourceUpgrade toolboxUpgrade containernetworking-pluginsUpgrade containers-commonUpgrade podman-plugins-debuginfoUpgrade git-lfs-debuginfoUpgrade libslirp-develUpgrade fuse-overlayfs-debuginfoUpgrade skopeoUpgrade buildah-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade libslirp-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade crun-debugsourceUpgrade criu-develUpgrade criu-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade podman-remoteUpgrade podman-remote-debuginfoUpgrade criu-libsUpgrade podman-pluginsUpgrade runc-debugsourceUpgrade buildah-debuginfoUpgrade slirp4netns-debugsourceUpgrade aardvark-dnsUpgrade podman-catatonit-debuginfoUpgrade podman-debuginfoUpgrade criu-debuginfoUpgrade buildah-tests-debuginfoUpgrade podmanUpgrade skopeo-testsUpgrade container-selinuxUpgrade containernetworking-plugins-debuginfoUpgrade conmon-debugsource | Dec 13, 2023 | Sep 8, 2023 |
| Rocky_linux | — | Upgrade toolbox-debuginfoUpgrade buildahUpgrade buildah-testsUpgrade libslirp-debuginfoUpgrade crun-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade toolbox-debugsourceUpgrade runc-debugsourceUpgrade slirp4netns-debuginfoUpgrade skopeo-debugsourceUpgrade containernetworking-pluginsUpgrade critUpgrade criu-debuginfoUpgrade aardvark-dnsUpgrade runcUpgrade skopeo-debuginfoUpgrade crun-debugsourceUpgrade containers-commonUpgrade git-lfsUpgrade criu-libs-debuginfoUpgrade buildah-debuginfoUpgrade criu-debugsourceUpgrade conmon-debuginfoUpgrade slirp4netnsUpgrade buildah-tests-debuginfoUpgrade git-lfs-debuginfoUpgrade toolbox-testsUpgrade python3-criuUpgrade git-lfs-debugsourceUpgrade libslirpUpgrade criu-develUpgrade toolboxUpgrade fuse-overlayfsUpgrade netavarkUpgrade libslirp-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade criu-libsUpgrade skopeo-testsUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade runc-debuginfoUpgrade crunUpgrade conmonUpgrade oci-seccomp-bpf-hookUpgrade libslirp-develUpgrade criuUpgrade buildah-debugsourceUpgrade skopeoUpgrade conmon-debugsourceUpgrade slirp4netns-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade containernetworking-plugins-debuginfo | May 8, 2025 | Sep 8, 2023 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.3.1Upgrade Splunk Enterprise to version 9.1.6Upgrade Splunk Enterprise to version 9.2.3 | Jul 30, 2026 | Sep 8, 2023 |
| Suse | — | Upgrade go1.21-opensslUpgrade go1.21-raceUpgrade go1.21Upgrade go1.21-openssl-docUpgrade go1.21-docUpgrade go1.21-openssl-race | Sep 21, 2023 | Sep 8, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub