quic-go is an implementation of the QUIC protocol (RFC 9000, RFC 9001, RFC 9002) in Go. An attacker can cause its peer to run out of memory sending a large number of PATH_CHALLENGE frames. The receiver is supposed to respond to each PATH_CHALLENGE frame with a PATH_RESPONSE frame. The attacker can prevent the receiver from sending out (the vast majority of) these PATH_RESPONSE frames by collapsing the peers congestion window (by selectively acknowledging received packets) and by manipulating the peer's RTT estimate. This vulnerability has been patched in versions 0.37.7, 0.38.2 and 0.39.4.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - quic-go is an implementation of the QUIC protocol (RFC 9000, RFC 9001, RFC 9002) in Go. An attacker can     cause its peer to run out of memory sending a large number of PATH_CHALLENGE frames. The receiver is     supposed to respond to each PATH_CHALLENGE frame with a PATH_RESPONSE frame. The attacker can prevent the     receiver from sending out (the vast majority of) these PATH_RESPONSE frames by collapsing the peers     congestion window (by selectively acknowledging received packets) and by manipulating the peer's RTT     estimate. This vulnerability has been patched in versions 0.37.7, 0.38.2 and 0.39.4. (CVE-2023-49295)

Note that Nessus relies on the presence of the package as reported by the vendor.

The version of coredns installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-49295 advisory.

  - quic-go is an implementation of the QUIC protocol (RFC 9000, RFC 9001, RFC 9002) in Go. An attacker can     cause its peer to run out of memory sending a large number of PATH_CHALLENGE frames. The receiver is     supposed to respond to each PATH_CHALLENGE frame with a PATH_RESPONSE frame. The attacker can prevent the     receiver from sending out (the vast majority of) these PATH_RESPONSE frames by collapsing the peers     congestion window (by selectively acknowledging received packets) and by manipulating the peer's RTT     estimate. This vulnerability has been patched in versions 0.37.7, 0.38.2 and 0.39.4. (CVE-2023-49295)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-62fc2aa0aa advisory.

    Automatic update for golang-github-quic-0.42.0-1.fc41.

    ##### **Changelog**

    ```
    * Sat Mar 23 2024 Mikel Olasagasti Uranga <mikel@olasagasti.info> - 0.42.0-1
    - Update to 0.42.0 - Closes rhbz#2240724 rhbz#2257831

    ```

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-bd8fe42929 advisory.

    Automatic update for caddy-2.8.4-1.fc41.

    ##### **Changelog**

    ```
    * Fri Jul  5 2024 Carl George <carlwgeorge@fedoraproject.org> - 2.8.4-1
    - Update to version 2.8.4 rhbz#2278549
    - Resolves CVE-2023-49295 rhbz#2257829
    - Resolves CVE-2024-27304 rhbz#2268278
    - Resolves CVE-2024-27289 rhbz#2268468
    - Resolves CVE-2024-28180 rhbz#2268877
    - Resolves CVE-2024-22189 rhbz#2273517
    - Remove LimitNPROC from systemd unit files

    ```

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of coredns installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-49295 advisory.

  - quic-go is an implementation of the QUIC protocol (RFC 9000, RFC 9001, RFC 9002) in Go. An attacker can     cause its peer to run out of memory sending a large number of PATH_CHALLENGE frames. The receiver is     supposed to respond to each PATH_CHALLENGE frame with a PATH_RESPONSE frame. The attacker can prevent the     receiver from sending out (the vast majority of) these PATH_RESPONSE frames by collapsing the peers     congestion window (by selectively acknowledging received packets) and by manipulating the peer's RTT     estimate. This vulnerability has been patched in versions 0.37.7, 0.38.2 and 0.39.4. (CVE-2023-49295)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 / 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2024:0855 advisory.

    Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing     IT automation at scale. IT Managers can provide top-down guidelines on how automation is applied to     individual teams, while automation developers retain the freedom to write tasks that leverage existing     knowledge without the overhead. Ansible Automation Platform makes it possible for users across an     organization to share, vet, and manage automation content by means of a simple, powerful, and agentless     language.

    Security Fix(es):

    * receptor: quic-go: memory exhaustion attack against QUIC's path validation mechanism (CVE-2023-49295)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional changes:
    * receptor has been updated to 1.4.4

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-b93312a597 advisory.

    Update to version 1.27.3.

    Release notes: https://github.com/syncthing/syncthing/releases/tag/v1.27.3

    This update also addresses CVE-2023-49295 in quic-go: https://github.com/quic-go/quic-     go/security/advisories/GHSA-ppxx-5m9h-6vxf

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-c46536abe6 advisory.

    Update to version 1.27.3.

    Release notes: https://github.com/syncthing/syncthing/releases/tag/v1.27.3

    This update also addresses CVE-2023-49295 in quic-go: https://github.com/quic-go/quic-     go/security/advisories/GHSA-ppxx-5m9h-6vxf

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
226993	Linux Distros Unpatched Vulnerability : CVE-2023-49295	Nessus	Misc.	medium
215670	Azure Linux 3.0 Security Update: coredns (CVE-2023-49295)	Nessus	Azure Linux Local Security Checks	medium
211235	Fedora 41 : golang-github-quic (2024-62fc2aa0aa)	Nessus	Fedora Local Security Checks	medium
211175	Fedora 41 : caddy (2024-bd8fe42929)	Nessus	Fedora Local Security Checks	medium
206380	CBL Mariner 2.0 Security Update: coredns (CVE-2023-49295)	Nessus	MarinerOS Local Security Checks	medium
194392	RHEL 8 / 9 : Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update (Moderate) (RHSA-2024:0855)	Nessus	Red Hat Local Security Checks	medium
190827	Fedora 38 : syncthing (2024-b93312a597)	Nessus	Fedora Local Security Checks	medium
190826	Fedora 39 : syncthing (2024-c46536abe6)	Nessus	Fedora Local Security Checks	medium

Detections

Analytics

CVE-2023-49295

medium

Tenable Plugins

medium

medium

medium

medium

medium

medium

medium

medium