https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 13 Oct 2026 02:32:03 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-340417 EUVD-2026-340417 https://cve.radiocsirt.org/vuln/euvd-2026-340417 https://cve.radiocsirt.org/vuln/fkie_cve-2026-25800 <p>Quinn is a pure-Rust, async-compatible implementation of the IETF QUIC transport protocol. Starting in version 0.1.0 and prior to version 0.11.15, the `Assembler` component that assembles unordered stream fragments into consecutive chunks of the stream incurs some overhead for non-contiguous fragments. Readers that read from a `RecvStream` in order (through an `AsyncRead` impl for example) will be sensitive to peers that send fragments while leaving out early parts of the stream, and in particular, fragments with many gaps (because these cannot be defragmented). In such a scenario, the receiving connection suffers from high buffer overhead, enabling memory exhaustion. Version 0.11.15 fixes the issue.</p> <p>Quinn is a pure-Rust, async-compatible implementation of the IETF QUIC transport protocol. Starting in version 0.1.0 and prior to version 0.11.15, the `Assembler` component that assembles unordered stream fragments into consecutive chunks of the stream incurs some overhead for non-contiguous fragments. Readers that read from a `RecvStream` in order (through an `AsyncRead` impl for example) will be sensitive to peers that send fragments while leaving out early parts of the stream, and in particular, fragments with many gaps (because these cannot be defragmented). In such a scenario, the receiving connection suffers from high buffer overhead, enabling memory exhaustion. Version 0.11.15 fixes the issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-25800 https://cve.radiocsirt.org/vuln/msrc_cve-2026-25800 msrc_CVE-2026-25800 https://cve.radiocsirt.org/vuln/msrc_cve-2026-25800 https://cve.radiocsirt.org/vuln/opensuse-su-2026:11635-1 <p>python313-uv-0.12.7-1.1 on GA media</p> <p>python313-uv-0.12.7-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:11635-1 https://cve.radiocsirt.org/vuln/rustsec-2026-0185 <p><strong>Affected:</strong> crates.io: quinn-proto</p> <p>The `Assembler` component that assembles unordered stream fragments into consecutive chunks of the stream incurs some overhead for non-contiguous fragments. Readers that read from a RecvStream in order (through an `AsyncRead` impl for example) will be sensitive to peers that send fragments while leaving out early parts of the stream, and in particular, fragments with many gaps (because these cannot be defragmented). In such a scenario, the receiving connection suffers from high buffer overhead, enabling memory exhaustion.</p> <p><strong>Affected:</strong> crates.io: quinn-proto</p> <p>The `Assembler` component that assembles unordered stream fragments into consecutive chunks of the stream incurs some overhead for non-contiguous fragments. Readers that read from a RecvStream in order (through an `AsyncRead` impl for example) will be sensitive to peers that send fragments while leaving out early parts of the stream, and in particular, fragments with many gaps (because these cannot be defragmented). In such a scenario, the receiving connection suffers from high buffer overhead, enabling memory exhaustion.</p> https://cve.radiocsirt.org/vuln/rustsec-2026-0185 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-25800 <p><strong>Affected:</strong> Ubuntu:24.04:LTS: rust-quinn-proto, Ubuntu:26.04:LTS: rust-quinn-proto</p> <p>Quinn is a pure-Rust, async-compatible implementation of the IETF QUIC transport protocol. Starting in version 0.1.0 and prior to version 0.11.15, the `Assembler` component that assembles unordered stream fragments into consecutive chunks of the stream incurs some overhead for non-contiguous fragments. Readers that read from a `RecvStream` in order (through an `AsyncRead` impl for example) will be sensitive to peers that send fragments while leaving out early parts of the stream, and in particular, fragments with many gaps (because these cannot be defragmented). In such a scenario, the receiving connection suffers from high buffer overhead, enabling memory exhaustion. Version 0.11.15 fixes the issue.</p> <p><strong>Affected:</strong> Ubuntu:24.04:LTS: rust-quinn-proto, Ubuntu:26.04:LTS: rust-quinn-proto</p> <p>Quinn is a pure-Rust, async-compatible implementation of the IETF QUIC transport protocol. Starting in version 0.1.0 and prior to version 0.11.15, the `Assembler` component that assembles unordered stream fragments into consecutive chunks of the stream incurs some overhead for non-contiguous fragments. Readers that read from a `RecvStream` in order (through an `AsyncRead` impl for example) will be sensitive to peers that send fragments while leaving out early parts of the stream, and in particular, fragments with many gaps (because these cannot be defragmented). In such a scenario, the receiving connection suffers from high buffer overhead, enabling memory exhaustion. Version 0.11.15 fixes the issue.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-25800