ΠΠΎΠ»ΠΈΡΠ΅ΡΡΠ²ΠΎ 10
ΠΠΎΠ»ΠΈΡΠ΅ΡΡΠ²ΠΎ 10
CVE-2026-31812
Quinn is a pure-Rust, async-compatible implementation of the IETF QUIC transport protocol. Prior to 0.11.14, a remote, unauthenticated attacker can trigger a denial of service in applications using vulnerable quinn versions by sending a crafted QUIC Initial packet containing malformed quic_transport_parameters. In quinn-proto parsing logic, attacker-controlled varints are decoded with unwrap(), so truncated encodings cause Err(UnexpectedEnd) and panic. This is reachable over the network with a single packet and no prior trust or authentication. This vulnerability is fixed in 0.11.14.
CVE-2026-31812
Quinn is a pure-Rust, async-compatible implementation of the IETF QUIC transport protocol. Prior to 0.11.14, a remote, unauthenticated attacker can trigger a denial of service in applications using vulnerable quinn versions by sending a crafted QUIC Initial packet containing malformed quic_transport_parameters. In quinn-proto parsing logic, attacker-controlled varints are decoded with unwrap(), so truncated encodings cause Err(UnexpectedEnd) and panic. This is reachable over the network with a single packet and no prior trust or authentication. This vulnerability is fixed in 0.11.14.
CVE-2026-31812
Quinn is a pure-Rust, async-compatible implementation of the IETF QUIC transport protocol. Prior to 0.11.14, a remote, unauthenticated attacker can trigger a denial of service in applications using vulnerable quinn versions by sending a crafted QUIC Initial packet containing malformed quic_transport_parameters. In quinn-proto parsing logic, attacker-controlled varints are decoded with unwrap(), so truncated encodings cause Err(UnexpectedEnd) and panic. This is reachable over the network with a single packet and no prior trust or authentication. This vulnerability is fixed in 0.11.14.
CVE-2026-31812
Quinn is a pure-Rust, async-compatible implementation of the IETF QUIC ...
openSUSE-SU-2026:20569-1
Security update for rust1.94
SUSE-SU-2026:1415-1
Security update for rust1.93
SUSE-SU-2026:1337-1
Security update for rust1.92
SUSE-RU-2026:1001-1
Recommended update for rust1.94
GHSA-6xvm-j4wr-6v98
Quinn affected by unauthenticated remote DoS via panic in QUIC transport parameter parsing
openSUSE-SU-2026:20865-1
Security update for python-uv
Π£ΡΠ·Π²ΠΈΠΌΠΎΡΡΠ΅ΠΉ Π½Π° ΡΡΡΠ°Π½ΠΈΡΡ
Π£ΡΠ·Π²ΠΈΠΌΠΎΡΡΡ | CVSS | EPSS | ΠΠΏΡΠ±Π»ΠΈΠΊΠΎΠ²Π°Π½ΠΎ | |
|---|---|---|---|---|
 | CVE-2026-31812 Quinn is a pure-Rust, async-compatible implementation of the IETF QUIC transport protocol. Prior to 0.11.14, a remote, unauthenticated attacker can trigger a denial of service in applications using vulnerable quinn versions by sending a crafted QUIC Initial packet containing malformed quic_transport_parameters. In quinn-proto parsing logic, attacker-controlled varints are decoded with unwrap(), so truncated encodings cause Err(UnexpectedEnd) and panic. This is reachable over the network with a single packet and no prior trust or authentication. This vulnerability is fixed in 0.11.14. | CVSS3: 5.3 | 1% ΠΠΈΠ·ΠΊΠΈΠΉ | 5 ΠΌΠ΅ΡΡΡΠ΅Π² Π½Π°Π·Π°Π΄ |
 | CVE-2026-31812 Quinn is a pure-Rust, async-compatible implementation of the IETF QUIC transport protocol. Prior to 0.11.14, a remote, unauthenticated attacker can trigger a denial of service in applications using vulnerable quinn versions by sending a crafted QUIC Initial packet containing malformed quic_transport_parameters. In quinn-proto parsing logic, attacker-controlled varints are decoded with unwrap(), so truncated encodings cause Err(UnexpectedEnd) and panic. This is reachable over the network with a single packet and no prior trust or authentication. This vulnerability is fixed in 0.11.14. | CVSS3: 5.3 | 1% ΠΠΈΠ·ΠΊΠΈΠΉ | 5 ΠΌΠ΅ΡΡΡΠ΅Π² Π½Π°Π·Π°Π΄ |
 | CVE-2026-31812 Quinn is a pure-Rust, async-compatible implementation of the IETF QUIC transport protocol. Prior to 0.11.14, a remote, unauthenticated attacker can trigger a denial of service in applications using vulnerable quinn versions by sending a crafted QUIC Initial packet containing malformed quic_transport_parameters. In quinn-proto parsing logic, attacker-controlled varints are decoded with unwrap(), so truncated encodings cause Err(UnexpectedEnd) and panic. This is reachable over the network with a single packet and no prior trust or authentication. This vulnerability is fixed in 0.11.14. | CVSS3: 5.3 | 1% ΠΠΈΠ·ΠΊΠΈΠΉ | 5 ΠΌΠ΅ΡΡΡΠ΅Π² Π½Π°Π·Π°Π΄ |
| CVE-2026-31812 Quinn is a pure-Rust, async-compatible implementation of the IETF QUIC ... | CVSS3: 5.3 | 1% ΠΠΈΠ·ΠΊΠΈΠΉ | 5 ΠΌΠ΅ΡΡΡΠ΅Π² Π½Π°Π·Π°Π΄ |
 | openSUSE-SU-2026:20569-1 Security update for rust1.94 | 1% ΠΠΈΠ·ΠΊΠΈΠΉ | 4 ΠΌΠ΅ΡΡΡΠ° Π½Π°Π·Π°Π΄ | |
| SUSE-SU-2026:1415-1 Security update for rust1.93 | 1% ΠΠΈΠ·ΠΊΠΈΠΉ | 4 ΠΌΠ΅ΡΡΡΠ° Π½Π°Π·Π°Π΄ | |
| SUSE-SU-2026:1337-1 Security update for rust1.92 | 1% ΠΠΈΠ·ΠΊΠΈΠΉ | 4 ΠΌΠ΅ΡΡΡΠ° Π½Π°Π·Π°Π΄ | |
| SUSE-RU-2026:1001-1 Recommended update for rust1.94 | 1% ΠΠΈΠ·ΠΊΠΈΠΉ | 5 ΠΌΠ΅ΡΡΡΠ΅Π² Π½Π°Π·Π°Π΄ | |
| GHSA-6xvm-j4wr-6v98 Quinn affected by unauthenticated remote DoS via panic in QUIC transport parameter parsing | 1% ΠΠΈΠ·ΠΊΠΈΠΉ | 5 ΠΌΠ΅ΡΡΡΠ΅Π² Π½Π°Π·Π°Π΄ | |
| openSUSE-SU-2026:20865-1 Security update for python-uv | 2 ΠΌΠ΅ΡΡΡΠ° Π½Π°Π·Π°Π΄ |
Π£ΡΠ·Π²ΠΈΠΌΠΎΡΡΠ΅ΠΉ Π½Π° ΡΡΡΠ°Π½ΠΈΡΡ