| Package | Affected versions | Patched versions |
|---|---|---|
| Microsoft.Native.Quic.MsQuic.OpenSSL | < 2.2.3 | 2.2.3 |
| Microsoft.Native.Quic.MsQuic.Schannel | < 2.2.3 | 2.2.3 |
| .net | ≥ 7.0.0, < 7.0.12 | 7.0.12 |
| visual studio 2022 | ≥ 17.2.0, < 17.2.20≥ 17.4.0, < 17.4.12≥ 17.6.0, < 17.6.8≥ 17.7.0, < 17.7.5 | 17.2.2017.4.1217.6.817.7.5 |
The MsQuic server application or process will crash, resulting in a denial of service.
The following patch was made:
Beyond upgrading to the patched versions, there is no other workaround. You must upgrade or disable MsQuic functionality.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free