CVSS 3.1 Score 3.7 of 10 (low)


Published Mar 12, 2024
Updated: Mar 13, 2024
CWE ID 400


CVE-2024-1410 is a vulnerability discovered in Cloudflare quiche that allows for unbounded storage of connection ID retirement information, potentially leading to excessive resource consumption. This vulnerability affects QUIC connections and can be exploited by an unauthenticated remote attacker. By sending manipulated NEW_CONNECTION_ID frames and restricting the peer's congestion window size, the attacker can prevent the sending of RETIRE_CONNECTION_ID frames, causing resource exhaustion. The base severity of this vulnerability is rated as LOW, with no impact on integrity or confidentiality, but it poses a potential danger to organizations due to its ability to consume excessive resources. Remediation for this vulnerability may involve applying patches or updates provided by Cloudflare.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2024-1410 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options