Skip to content
OpenAdvisories
High · 7.5 CVE-2024-45396 EUVD-2024-41457

Quicly assertion failures

Published Oct 11, 2024 · Updated Oct 15, 2024 · Assigned by GitHub_M

Description

Quicly is an IETF QUIC protocol implementation. Quicly up to commtit d720707 is susceptible to a denial-of-service attack. A remote attacker can exploit these bugs to trigger an assertion failure that crashes process using quicly. The vulnerability is addressed with commit 2a95896104901589c495bc41460262e64ffcad5c.

Affected products

VendorProductAffectedFixed
h2o quicly < 2a95896104901589c495bc41460262e64ffcad5c —

References