Most recent entries from all

EUVD-2026-187453

fkie_cve-2023-42805

quinn-proto is a state machine for the QUIC transport protocol. Prior to versions 0.9.5 and 0.10.5, receiving unknown QUIC frames in a QUIC packet could result in a panic. The problem has been fixed in 0.9.5 and 0.10.5 maintenance releases.

GHSA-q8wc-j5m9-27w3 — Denial of Service issue in quinn-proto

Affected: crates.io: quinn-proto

### Impact

Receiving unknown QUIC frames in a QUIC packet could result in a panic.

### Patches

The problem has been fixed in 0.9.5 and 0.10.5 maintenance releases.

### References

Fixed in https://github.com/quinn-rs/quinn/pull/1667, backported in https://github.com/quinn-rs/quinn/pull/1668 and https://github.com/quinn-rs/quinn/pull/1669.

gsd-2023-42805

RUSTSEC-2023-0063 — Denial of service in Quinn servers

Affected: crates.io: quinn-proto

Receiving QUIC frames containing a frame with unknown frame type could lead to a panic. Unfortunately this is issue was not found by our fuzzing infrastructure.

Thanks to the QUIC Tester research group for reporting this issue.

UBUNTU-CVE-2023-42805

Affected: Ubuntu:24.04:LTS: rust-quinn-proto, Ubuntu:25.10: rust-quinn-proto, Ubuntu:26.04:LTS: rust-quinn-proto