Vulnerability Database

296,746

Total vulnerabilities in the database

CVE-2023-38171

Microsoft QUIC Denial of Service Vulnerability

Published: Oct 10, 2023
Updated: May 9, 2024
CVE: CVE-2023-38171
GHSA: GHSA-xh5m-8qqp-c5x7
Severity: High
Exploit:

CVSS v3:

Severity: High
Score: 7.5
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWEs:

CWE-400

Affected Software
References

Software	From	Fixed in
Microsoft.Native.Quic.MsQuic.Schannel	-	2.2.3
Microsoft.Native.Quic.MsQuic.OpenSSL	-	2.2.3
microsoft / windows_11_22h2	-	10.0.22621.2428
microsoft / visual_studio_2022	17.2.0	17.2.20
microsoft / visual_studio_2022	17.4.0	17.4.12
microsoft / visual_studio_2022	17.6.0	17.6.8
microsoft / visual_studio_2022	17.7.0	17.7.5
microsoft / .net	7.0.0	7.0.12

Deep Security Visibility Without the Complexity

SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.

No setup fees
5-min deployment
Cancel anytime