diff --git a/security/vuxml/vuln/2024.xml b/security/vuxml/vuln/2024.xml index 7b227fba72..e5cc24bb53 100644 --- a/security/vuxml/vuln/2024.xml +++ b/security/vuxml/vuln/2024.xml @@ -1,3 +1,34 @@ + + quiche -- Multiple Vulnerabilities + + + quiche + 0.20.1 + + + + +

Quiche Releases reports:

+
+

This release includes 2 security fixes:

+
    +
  • CVE-2024-1410: Unbounded storage of information related to connection ID retirement, in quiche. Reported by Marten Seeman (@marten-seeman)
    • +
  • CVE-2024-1765: Unlimited resource allocation by QUIC CRYPTO frames flooding in quiche. Reported by Marten Seeman (@marten-seeman)
    • +
+
+ + + + CVE-2024-1410 + CVE-2024-1765 + https://github.com/cloudflare/quiche/releases/tag/0.20.1 + + + 2024-03-12 + 2024-03-26 + + + chromium -- multiple security fixes