CVE-2020-24944: High severity picoquic vulnerability
Published Feb 8, 2021
·Updated
picoquic (before 3rd of July 2020) allows attackers to cause a denial of service (infinite loop) via a crafted QUIC frame, related to the picoquicdecodeframes and picoquicdecodestreamframe functions and epoch==3.
Affected Software
1 affected component
Privateoctopus Picoquic<2020-07-03
Event History
Feb 8, 2021
CVE Published
via MITRE·08:13 PM
Data Sourced
via MITRE·08:13 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2020-24944?
CVE-2020-24944 has a severity rating that indicates a denial of service vulnerability.
2
How do I fix CVE-2020-24944?
To fix CVE-2020-24944, update Picoquic to a version released after July 3, 2020.
3
What types of attacks does CVE-2020-24944 allow?
CVE-2020-24944 allows attackers to create a denial of service through an infinite loop.
4
Which functions are affected by CVE-2020-24944?
CVE-2020-24944 affects the picoquic_decode_frames and picoquic_decode_stream_frame functions.
5
Which versions of Picoquic are vulnerable to CVE-2020-24944?
Versions of Picoquic prior to July 3, 2020, are vulnerable to CVE-2020-24944.