| Package | Affected versions | Patched versions |
|---|---|---|
| Microsoft.Native.Quic.MsQuic.OpenSSL | < 2.2.3 | 2.2.3 |
| Microsoft.Native.Quic.MsQuic.Schannel | < 2.2.3 | 2.2.3 |
| .net | ≥ 7.0.0, ≤ 7.0.12 |
The MsQuic server will continue to leak memory until no more is available, resulting in a denial of service.
The following patch was made:
Beyond upgrading to the patched versions, there is no other workaround.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free