Description
Microsoft Windows QUIC 中存在拒绝服务漏洞。该漏洞是由于对传入的QUIC流量处理不正确导致的。
Microsoft Windows QUIC CVE-2023-36435 拒绝服务漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/cve-2023-36435
https://github.com/microsoft/msquic/security/advisories/GHSA-fr44-546p-7xcp
https://www.anquanke.com/post/id/290680
https://www.bit.edu.cn/tzgg17/wlfw/2044ce6369da4dbb964976d55f42cc0b.htm
https://www.tenablecloud.cn/plugins/nessus/182851
https://www.rapid7.com/db/vulnerabilities/msft-cve-2023-36435/
https://www.thezdi.com/blog/2023/10/10/the-october-2023-security-update-review
https://access.redhat.com/security/cve/cve-2023-36435
https://learn.microsoft.com/en-us/answers/questions/4093723/microsoft-october-2023-security-updates
https://www.sxxdckj.com/cms/a/Microsoft-QUIC-ju-jue-fu-wu-lou-dong.html
https://info.sdju.edu.cn/2023/1106/c6627a121176/page.htm
https://www.bjqxxd.com/new_type/aqtg/20231011/26339.html
https://www.juniper.net/us/en/threatlabs/ips-signatures/detail/UDP:MS-WIN-QUIC-TNSPT-PARAM-DOS.html
https://www.cve.org/CVERecord?id=CVE-2023-36435
https://api.msrc.microsoft.com/cvrf/v3.0/cvrf/2023-Oct
https://www.tenable.com/cve/CVE-2023-36435
https://www.miggo.io/vulnerability-database/cve/CVE-2023-36435