CVE-2024-1765

Summary

CVE-2024-1765 is a memory exhaustion vulnerability in Cloudflare Quiche, impacting versions 0.19.1 and 0.20.0. An attacker could exploit this issue by sending an excessive number of 1-RTT CRYPTO frames following a completed QUIC handshake, leading to unlimited resource allocation and memory usage growth. The vulnerability allowed for extended connection durations, putting affected systems at risk. The earliest patches for this issue are quiche versions 0.19.2 and 0.20.1.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.