CVE-2024-1410

CVE-2024-1410 is a medium-severity vulnerability in Cloudflare's quiche library (versions prior to 0.19.2 and 0.20.1). It allows an unauthenticated remote attacker to cause excessive resource consumption by exploiting an unbounded storage issue related to QUIC connection ID retirement. By manipulating connection ID frames and the peer's congestion window, an attacker can force the accumulation of connection ID information, leading to a denial-of-service condition. There is no known active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.