Skip to content
OpenAdvisories

Package · Debian

rust-quinn-proto

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • High 7.5
    CVE-2026-25800

    quinn-proto has remote memory exhaustion from unbounded out-of-order stream reassembly

    Quinn is a pure-Rust, async-compatible implementation of the IETF QUIC transport protocol. Starting in version 0.1.0 and prior to version 0.11.15, the `Assembler` component that assembles unordered stream fragments into consecutive chunks of the stream incurs…

    quinn-rs quinn quinn-proto rust-quinn-proto Debian Ubuntu crates.io
  • High 8.7
    CVE-2026-31812

    Quinn affected by unauthenticated remote DoS via panic in QUIC transport parameter parsing

    Quinn is a pure-Rust, async-compatible implementation of the IETF QUIC transport protocol. Prior to 0.11.14, a remote, unauthenticated attacker can trigger a denial of service in applications using vulnerable quinn versions by sending a crafted QUIC Initial p…

    quinn-rs quinn zed wasmcloud Debian Ubuntu Wolfi crates.io
  • High 7.5
    CVE-2023-42805

    quinn-proto Denial of Service vulnerability

    quinn-proto is a state machine for the QUIC transport protocol. Prior to versions 0.9.5 and 0.10.5, receiving unknown QUIC frames in a QUIC packet could result in a panic. The problem has been fixed in 0.9.5 and 0.10.5 maintenance releases.

    quinn-rs quinn quinn-proto rust-quinn-proto Debian Ubuntu crates.io