Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2026:1337-1

Опубликовано: 15 апр. 2026
Источник: suse-cvrf

Описание

Security update for rust1.92

This update for rust1.92 fixes the following issues:

  • CVE-2026-31812: Denial of service via crafted QUIC initial packet (bsc#1259623).

Список пакетов

SUSE Linux Enterprise Module for Development Tools 15 SP7
cargo1.92-1.92.0-150300.7.6.1
rust1.92-1.92.0-150300.7.6.1
rust1.92-src-1.92.0-150300.7.6.1
openSUSE Leap 15.6
cargo1.92-1.92.0-150300.7.6.1
rust1.92-1.92.0-150300.7.6.1
rust1.92-src-1.92.0-150300.7.6.1

Ссылки

Описание

Quinn is a pure-Rust, async-compatible implementation of the IETF QUIC transport protocol. Prior to 0.11.14, a remote, unauthenticated attacker can trigger a denial of service in applications using vulnerable quinn versions by sending a crafted QUIC Initial packet containing malformed quic_transport_parameters. In quinn-proto parsing logic, attacker-controlled varints are decoded with unwrap(), so truncated encodings cause Err(UnexpectedEnd) and panic. This is reachable over the network with a single packet and no prior trust or authentication. This vulnerability is fixed in 0.11.14.

Затронутые продукты
SUSE Linux Enterprise Module for Development Tools 15 SP7:cargo1.92-1.92.0-150300.7.6.1
SUSE Linux Enterprise Module for Development Tools 15 SP7:rust1.92-1.92.0-150300.7.6.1
SUSE Linux Enterprise Module for Development Tools 15 SP7:rust1.92-src-1.92.0-150300.7.6.1
openSUSE Leap 15.6:cargo1.92-1.92.0-150300.7.6.1
Ссылки