CVE-2024-45396

Quicly is an IETF QUIC protocol implementation. Quicly up to commtit d720707 is susceptible to a denial-of-service attack. A remote attacker can exploit these bugs to trigger an assertion failure that crashes process using quicly. The vulnerability is addressed with commit 2a95896104901589c495bc41460262e64ffcad5c.

• CWE-617

• https://github.com/h2o/quicly/commit/2a95896104901589c495bc41460262e64ffcad5cPatch
• https://github.com/h2o/quicly/security/advisories/GHSA-mp3c-h5gg-mm6pVendor Advisory

Published

Oct 11, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-45390@blakeembrey/template is a string template library. Prior to…9.8
• CVE-2024-45391Tina is an open-source content management system (CMS). Site…7.5
• CVE-2024-45392SuiteCRM is an open-source customer relationship management …4.3
• CVE-2024-45393Computer Vision Annotation Tool (CVAT) is an interactive vid…6.4
• CVE-2024-45394Authenticator is a browser extension that generates two-step…7.8
• CVE-2024-45395sigstore-go, a Go library for Sigstore signing and verificat…7.5
• CVE-2024-45397h2o is an HTTP server with support for HTTP/1.x, HTTP/2 and …7.5
• CVE-2024-45398Contao is an Open Source CMS. In affected versions a back en…8.8
• CVE-2024-45399Indico is an event management system that uses Flask-Multipa…6.1
• CVE-2024-4540A flaw was found in Keycloak in OAuth 2.0 Pushed Authorizati…7.5
• CVE-2024-45400ckeditor-plugin-openlink is a plugin for the CKEditor JavaSc…6.1
• CVE-2024-45401stripe-cli is a command-line tool for the payment processor …7.1