Is quiche affected by CVE-2023-6193?

crates.io quiche is affected in >=0.15.0 <0.19.1.

Is CVE-2023-6193 being exploited?

Not on the CISA KEV list. EPSS exploit probability is 0.8%.

medium

CVE-2023-6193

Q: Is CVE-2023-6193 being exploited?

Not on the CISA KEV list. EPSS exploit probability is 0.8%.

crates.io · quiche

Summary

Unbounded queuing of path validation messages in cloudflare-quiche

Severity: medium
EPSS: 0.8% (p51)
Also known as: GHSA-w3vp-jw9m-f9pm
Published: 2023-12-13

References

https://github.com/cloudflare/quiche/security/advisories/GHSA-w3vp-jw9m-f9pm
https://nvd.nist.gov/vuln/detail/CVE-2023-6193
https://github.com/cloudflare/quiche/commit/ea7ecf39ae28ab24cf1785c1674dc2e8a076f9ca

Related advisories

CVE-2025-7054 — high · crates.io/quiche
CVE-2024-1765 — medium · crates.io/quiche

Is your project exposed to this? Stateward checks every dependency on every pull request and flags it only if your code actually reaches it.

Check my repo

Summarize with AI

ChatGPT Claude Perplexity

Sources: CISA KEV (public domain), OSV.dev & GitHub Advisory Database (CC-BY-4.0), FIRST EPSS, NVD/CWE (public domain). Served live from the Stateward advisory database.