Description
Microsoft QUIC Denial of Service Vulnerability
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Microsoft | Microsoft Visual Studio 2022 version 17.9 | 17.0 – < 17.9.3 | 17.9.3 |
| Microsoft | Windows Server 2022 | 10.0.20348.0 – < 10.0.20348.2340 | 10.0.20348.2340 |
| Microsoft | Windows 11 version 21H2 | 10.0.22000.0 – < 10.0.22000.2836 | 10.0.22000.2836 |
| Microsoft | Windows 11 version 22H2 | 10.0.22621.0 – < 10.0.22621.3296 | 10.0.22621.3296 |
| Microsoft | Windows 11 version 22H3 | 10.0.22631.0 – < 10.0.22631.3296 | 10.0.22631.3296 |
| Microsoft | Windows 11 Version 23H2 | 10.0.22631.0 – < 10.0.22631.3296 | 10.0.22631.3296 |
| Microsoft | Windows Server 2022, 23H2 Edition (Server Core installation) | 10.0.25398.0 – < 10.0.25398.763 | 10.0.25398.763 |
| Microsoft | PowerShell 7.3 | 7.3.0 – < 7.3.12 | 7.3.12 |
| Microsoft | PowerShell 7.4 | 7.4.0 – < 7.4.2 | 7.4.2 |
| Microsoft | Microsoft Visual Studio 2022 version 17.4 | 17.4.0 – < 17.4.17 | 17.4.17 |
| Microsoft | Microsoft Visual Studio 2022 version 17.6 | 17.6.0 – < 17.6.13 | 17.6.13 |
| Microsoft | Microsoft Visual Studio 2022 version 17.8 | 17.8.0 – < 17.8.8 | 17.8.8 |
| Microsoft | .NET 7.0 | 7.0.0 – < 7.0.17 | 7.0.17 |
| Microsoft | .NET 8.0 | 8.0 – < 8.0.3 | 8.0.3 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Alpine
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.24 | dotnet8-runtime | 8.0.3-r0 | — |
| Alpine v3.23 | dotnet8-runtime | 8.0.3-r0 | — |
| Alpine v3.22 | dotnet8-runtime | 8.0.3-r0 | — |
| Alpine v3.21 | dotnet8-runtime | 8.0.3-r0 | — |
| Alpine v3.20 | dotnet8-runtime | 8.0.3-r0 | — |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.19 | dotnet7-build | 7.0.117-r0 | — |
| Alpine v3.19 | dotnet7-runtime | 7.0.17-r0 | — |
Advisories 3
- WID-SEC-2024-0611 Microsoft Visual Studio 2022: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 11, 2024
- WID-SEC-2024-0619 Microsoft Windows: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jun 26, 2024
- MSRC-CVE-2024-26190 Microsoft QUIC Denial of Service Vulnerability Microsoft Security Response Center · Apr 16, 2024
References
- Microsoft QUIC Denial of Service Vulnerability vendor-advisory