Количество 10
Количество 10
CVE-2026-31812
Quinn is a pure-Rust, async-compatible implementation of the IETF QUIC transport protocol. Prior to 0.11.14, a remote, unauthenticated attacker can trigger a denial of service in applications using vulnerable quinn versions by sending a crafted QUIC Initial packet containing malformed quic_transport_parameters. In quinn-proto parsing logic, attacker-controlled varints are decoded with unwrap(), so truncated encodings cause Err(UnexpectedEnd) and panic. This is reachable over the network with a single packet and no prior trust or authentication. This vulnerability is fixed in 0.11.14.
CVE-2026-31812
Quinn is a pure-Rust, async-compatible implementation of the IETF QUIC transport protocol. Prior to 0.11.14, a remote, unauthenticated attacker can trigger a denial of service in applications using vulnerable quinn versions by sending a crafted QUIC Initial packet containing malformed quic_transport_parameters. In quinn-proto parsing logic, attacker-controlled varints are decoded with unwrap(), so truncated encodings cause Err(UnexpectedEnd) and panic. This is reachable over the network with a single packet and no prior trust or authentication. This vulnerability is fixed in 0.11.14.
CVE-2026-31812
Quinn is a pure-Rust, async-compatible implementation of the IETF QUIC transport protocol. Prior to 0.11.14, a remote, unauthenticated attacker can trigger a denial of service in applications using vulnerable quinn versions by sending a crafted QUIC Initial packet containing malformed quic_transport_parameters. In quinn-proto parsing logic, attacker-controlled varints are decoded with unwrap(), so truncated encodings cause Err(UnexpectedEnd) and panic. This is reachable over the network with a single packet and no prior trust or authentication. This vulnerability is fixed in 0.11.14.
CVE-2026-31812
Quinn is a pure-Rust, async-compatible implementation of the IETF QUIC ...
openSUSE-SU-2026:20569-1
Security update for rust1.94
SUSE-SU-2026:1415-1
Security update for rust1.93
SUSE-SU-2026:1337-1
Security update for rust1.92
SUSE-RU-2026:1001-1
Recommended update for rust1.94
GHSA-6xvm-j4wr-6v98
Quinn affected by unauthenticated remote DoS via panic in QUIC transport parameter parsing
openSUSE-SU-2026:20865-1
Security update for python-uv
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-31812 Quinn is a pure-Rust, async-compatible implementation of the IETF QUIC transport protocol. Prior to 0.11.14, a remote, unauthenticated attacker can trigger a denial of service in applications using vulnerable quinn versions by sending a crafted QUIC Initial packet containing malformed quic_transport_parameters. In quinn-proto parsing logic, attacker-controlled varints are decoded with unwrap(), so truncated encodings cause Err(UnexpectedEnd) and panic. This is reachable over the network with a single packet and no prior trust or authentication. This vulnerability is fixed in 0.11.14. | CVSS3: 5.3 | 1% Низкий | 5 месяцев назад |
 | CVE-2026-31812 Quinn is a pure-Rust, async-compatible implementation of the IETF QUIC transport protocol. Prior to 0.11.14, a remote, unauthenticated attacker can trigger a denial of service in applications using vulnerable quinn versions by sending a crafted QUIC Initial packet containing malformed quic_transport_parameters. In quinn-proto parsing logic, attacker-controlled varints are decoded with unwrap(), so truncated encodings cause Err(UnexpectedEnd) and panic. This is reachable over the network with a single packet and no prior trust or authentication. This vulnerability is fixed in 0.11.14. | CVSS3: 5.3 | 1% Низкий | 5 месяцев назад |
 | CVE-2026-31812 Quinn is a pure-Rust, async-compatible implementation of the IETF QUIC transport protocol. Prior to 0.11.14, a remote, unauthenticated attacker can trigger a denial of service in applications using vulnerable quinn versions by sending a crafted QUIC Initial packet containing malformed quic_transport_parameters. In quinn-proto parsing logic, attacker-controlled varints are decoded with unwrap(), so truncated encodings cause Err(UnexpectedEnd) and panic. This is reachable over the network with a single packet and no prior trust or authentication. This vulnerability is fixed in 0.11.14. | CVSS3: 5.3 | 1% Низкий | 5 месяцев назад |
| CVE-2026-31812 Quinn is a pure-Rust, async-compatible implementation of the IETF QUIC ... | CVSS3: 5.3 | 1% Низкий | 5 месяцев назад |
 | openSUSE-SU-2026:20569-1 Security update for rust1.94 | 1% Низкий | 4 месяца назад | |
| SUSE-SU-2026:1415-1 Security update for rust1.93 | 1% Низкий | 4 месяца назад | |
| SUSE-SU-2026:1337-1 Security update for rust1.92 | 1% Низкий | 4 месяца назад | |
| SUSE-RU-2026:1001-1 Recommended update for rust1.94 | 1% Низкий | 5 месяцев назад | |
| GHSA-6xvm-j4wr-6v98 Quinn affected by unauthenticated remote DoS via panic in QUIC transport parameter parsing | 1% Низкий | 5 месяцев назад | |
| openSUSE-SU-2026:20865-1 Security update for python-uv | 2 месяца назад |
Уязвимостей на страницу