CVE-2023-6193

Summary

CVE-2023-6193 affects quiche version 0.15.0 through 0.19.0, where an attacker can manipulate QUIC path validation messages, causing an unbounded queueing of PATH_RESPONSE frames. This results in excessive resource consumption as the recipient is forced to send responses at a slower rate than they are received. The vulnerability arises due to the lack of proper handling of PATH_CHALLENGE frames, leading to QUIC connections becoming congested. Versions of quiche greater than 0.19.0 have addressed this issue.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.