Advisoriesby IbisAWSGHSA-gj4j-vp5f-86cf
Potential denial of service when sending version negotiation or close packets
Fix: upgrade to v1.1.1 or later
Some sender components could potentially panic when writing packets, leading to the endpoint shutting down.
AWS Services are not affected by this issue.
Customers using s2n-quic in their applications should update to the most recent version.
All versions of s2n-quic before and including v1.1.0 are affected by this issue. Customers should upgrade to v1.1.1.
Note that this issue does not affect s2n-tls.
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| s2n-quic crates.io | < v1.1.1 | v1.1.1 |
Details and references
- Severity from
- GitHub (reviewed advisory)
More AWS advisories
All AWS
Privilege Escalation Vector in CloudWatch Agent for WindowsCVE-2022-23511fixed in 1.247355Issue with configuring session ticket names in s2n-tlsGHSA-m74w-59v6-c5r8fixed in v1.3.23Server denial-of-service by using sslv2 message format in a HelloRetryRequest handshakeGHSA-mm47-wjfh-4hf5fixed in <v1.3.23Partial Path Traversal in aws-cpp-sdk-transferGHSA-g2jj-589x-jvx2fixed in v1.9.318Partial Path Traversal in com.amazonaws:aws-java-sdk-s3CVE-2022-31159fixed in 1.12.261Security vulnerability in a third party software, Slurm < 20.11.9 and 21.08.8GHSA-x775-rxcq-38x8fixed in 20.11.9