CVE-2023-6193: Unbounded queuing of path validation messages in cloudflare-quiche
Impact quiche v. 0.15.0 through 0.19.0 was discovered to be vulnerable to unbounded queuing of path validation messages, which could lead to excessive resource consumption.
QUIC path validation (RFC 9000 Section 8.2) requires that the recipient of a PATHCHALLENGE frame responds by sending a PATHRESPONSE. An unauthenticated remote attacker can exploit the vulnerability by sending PATHCHALLENGE frames and manipulating the connection (e.g. by restricting the peer's congestion window size) so that PATHRESPONSE frames can only be sent at the slower rate than they are received, leading to storage of path validation data in an unbounded queue.
Patches Quiche versions greater than 0.19.0 address this problem.
References CVE-2023-6193 RFC 9000 Section 8.2
Other sources
quiche v. 0.15.0 through 0.19.0 was discovered to be vulnerable to unbounded queuing of path validation messages, which could lead to excessive resource consumption. QUIC path validation (RFC 9000 Section 8.2) requires that the recipient of a PATHCHALLENGE frame responds by sending a PATHRESPONSE. An unauthenticated remote attacker can exploit the vulnerability by sending PATHCHALLENGE frames and manipulating the connection (e.g. by restricting the peer's congestion window size) so that PATHRESPONSE frames can only be sent at the slower rate than they are received; leading to storage of path validation data in an unbounded queue. Quiche versions greater than 0.19.0 address this problem.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-6193?
CVE-2023-6193 has a high severity due to its potential to cause excessive resource consumption.
How do I fix CVE-2023-6193?
To fix CVE-2023-6193, upgrade quiche to version 0.19.1 or later.
What versions are affected by CVE-2023-6193?
CVE-2023-6193 affects quiche versions 0.15.0 through 0.19.0.
What kind of vulnerability is CVE-2023-6193?
CVE-2023-6193 is a vulnerability related to unbounded queuing of path validation messages.
Who is impacted by CVE-2023-6193?
Users of quiche versions 0.15.0 to 0.19.0, particularly those using Cloudflare's implementation, are impacted by CVE-2023-6193.