CVE-2024-45396CWE-617

Quicly assertion failures

High · published October 11, 2024

CVSS v3.1
7.5
EPSS
1%
Percentile
47.2
In the wild
Unconfirmed
What it is

Quicly is an IETF QUIC protocol implementation. Quicly up to commtit d720707 is susceptible to a denial-of-service attack. A remote attacker can exploit these bugs to trigger an assertion failure that crashes process using quicly. The vulnerability is addressed with commit 2a95896104901589c495bc41460262e64ffcad5c.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00585 · 47.2th percentile
Weakness
CWE-617 · Reachable Assertion
Published
2024-10-11T14:36Z
EPSS history
Timeline
  • 11 OCT 14:36Z
    Quicly assertion failures
    cvelistv5