CVE-2024-1765: 
Rust vulnerability analysis and mitigation

CVE-2024-1765 affects Cloudflare Quiche (through version 0.19.1/0.20.0), involving an unlimited resource allocation vulnerability. The vulnerability was disclosed on March 12, 2024, and impacts the memory usage of systems running Quiche server or client implementations (GitHub Advisory).

The vulnerability is characterized by an unlimited resource allocation issue that can lead to rapid memory consumption. The technical nature of the vulnerability involves the handling of 1-RTT CRYPTO frames after the completion of the QUIC handshake. The severity is rated as Moderate with a CVSS score of 5.9, with the following base metrics: Network attack vector, High attack complexity, No privileges required, No user interaction needed, Unchanged scope, No impact on confidentiality and integrity, but High impact on availability (GitHub Advisory).

The vulnerability can result in rapid increase of memory usage of the system running Quiche server or client. The impact primarily affects system availability, with no direct impact on confidentiality or integrity. The exploitation can persist for the duration of the connection, which can be extended by an attacker (GitHub Advisory).

The vulnerability can be exploited by a remote attacker by repeatedly sending an unlimited number of 1-RTT CRYPTO frames after completing the QUIC handshake. The attack requires network access but no privileges or user interaction, though it does have high attack complexity (GitHub Advisory).

The vulnerability has been patched in Quiche versions 0.19.2 and 0.20.1. Users are advised to upgrade to these or later versions to mitigate the vulnerability (GitHub Advisory).