Skip to content
OpenAdvisories

Package · Wolfi

xh

7 known vulnerabilities.

2 results · Clear filters · Feed

  • High 8.7

    Quinn affected by unauthenticated remote DoS via panic in QUIC transport parameter parsing

    Quinn is a pure-Rust, async-compatible implementation of the IETF QUIC transport protocol. Prior to 0.11.14, a remote, unauthenticated attacker can trigger a denial of service in applications using vulnerable quinn versions by sending a crafted QUIC Initial p…

  • High 7.5

    Rustls vulnerable to an infinite loop in rustls::conn::ConnectionCommon::complete_io() with proper client input

    Rustls is a modern TLS library written in Rust. `rustls::ConnectionCommon::complete_io` could fall into an infinite loop based on network input. When using a blocking rustls server, if a client send a `close_notify` message immediately after `client_hello`, t…