CVE-2023-6193

quiche v. 0.15.0 through 0.19.0 was discovered to be vulnerable to unbounded queuing of path validation messages, which could lead to excessive resource consumption. QUIC path validation (RFC 9000 Section 8.2) requires that the recipient of a PATH_CHALLENGE frame responds by sending a PATH_RESPONSE. An unauthenticated remote attacker can exploit the vulnerability by sending PATH_CHALLENGE frames and manipulating the connection (e.g. by restricting the peer's congestion window size) so that PATH_RESPONSE frames can only be sent at the slower rate than they are received; leading to storage of path validation data in an unbounded queue. Quiche versions greater than 0.19.0 address this problem.

• CWE-400
• CWE-400

• https://datatracker.ietf.org/doc/html/rfc9000#section-8.2Technical Description
• https://github.com/cloudflare/quiche/security/advisories/GHSA-w3vp-jw9m-f9pmVendor Advisory
• https://datatracker.ietf.org/doc/html/rfc9000#section-8.2Technical Description
• https://github.com/cloudflare/quiche/security/advisories/GHSA-w3vp-jw9m-f9pmVendor Advisory

Published

Dec 12, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-6186Insufficient macro permission validation of The Document Fou…8.8
• CVE-2023-6187The Paid Memberships Pro plugin for WordPress is vulnerable …8.8
• CVE-2023-6188A vulnerability was found in GetSimpleCMS 3.3.16/3.4.0a. It …9.8
• CVE-2023-6189Missing access permissions checks in the M-Files server be…5.3
• CVE-2023-6190Improper Limitation of a Pathname to a Restricted Directory …9.8
• CVE-2023-6191Improper Neutralization of Special Elements used in an SQL C…9.8
• CVE-2023-6194In Eclipse Memory Analyzer versions 0.7 to 1.14.0, report de…7.1
• CVE-2023-6195An issue has been discovered in GitLab CE/EE affecting all v…4.3
• CVE-2023-6196The Audio Merchant plugin for WordPress is vulnerable to Cro…8.8
• CVE-2023-6197The Audio Merchant plugin for WordPress is vulnerable to Cro…5.4
• CVE-2023-6198Use of Hard-coded Credentials vulnerability in Baicells Snap…9.3
• CVE-2023-6199Book Stack version 23.10.2 allows filtering local files on t…6.5