CVE-2024-1410

Source
https://nvd.nist.gov/vuln/detail/CVE-2024-1410
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-1410.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2024-1410
Aliases
Related
Published
2024-03-12T18:15:07Z
Modified
2025-09-24T12:18:56.687192Z
Severity
  • 5.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVSS Calculator
Summary
[none]
Details

Cloudflare quiche was discovered to be vulnerable to unbounded storage of information related to connection ID retirement, which could lead to excessive resource consumption. Each QUIC connection possesses a set of connection Identifiers (IDs); see RFC 9000 Section 5.1 https://datatracker.ietf.org/doc/html/rfc9000#section-5.1 . Endpoints declare the number of active connection IDs they are willing to support using the activeconnectionidlimit transport parameter. The peer can create new IDs using a NEWCONNECTIONID frame but must stay within the active ID limit. This is done by retirement of old IDs, the endpoint sends NEWCONNECTIONID includes a value in the retirepriorto field, which elicits a RETIRECONNECTIONID frame as confirmation. An unauthenticated remote attacker can exploit the vulnerability by sending NEWCONNECTIONID frames and manipulating the connection (e.g. by restricting the peer's congestion window size) so that RETIRECONNECTION_ID frames can only be sent at a slower rate than they are received, leading to storage of information related to connection IDs in an unbounded queue. Quiche versions 0.19.2 and 0.20.1 are the earliest to address this problem. There is no workaround for affected versions.

References

Affected packages

Git / github.com/cloudflare/quiche

Affected ranges

Type
GIT
Repo
https://github.com/cloudflare/quiche
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed

Affected versions

0.*

0.1.0
0.1.0-alpha1
0.1.0-alpha2
0.1.0-alpha3
0.1.0-alpha4
0.10.0
0.11.0
0.12.0
0.13.0
0.14.0
0.15.0
0.16.0
0.17.1
0.17.2
0.18.0
0.19.0
0.19.1
0.2.0
0.3.0
0.4.0
0.5.0
0.5.1
0.6.0
0.7.0
0.8.0
0.8.1
0.9.0

octets-0.*

octets-0.2.0

qlog-0.*

qlog-0.10.0
qlog-0.2.0
qlog-0.3.0
qlog-0.4.0
qlog-0.5.0
qlog-0.6.0
qlog-0.7.0
qlog-0.8.0
qlog-0.9.0