CyberSecBulletin

Quinn Project vulnerabilities

We track 2 vulnerabilities in Quinn Project products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on September 2, 2024.

2vulnerabilities
0critical
2high
0exploited
7.5average CVSS score

Latest Quinn Project vulnerabilities

  • 7.5 High severity

    quinn: Always-Incorrect Control Flow Implementation

    CVE-2024-45311Quinn-rs

    Quinn is a pure-Rust, async-compatible implementation of the IETF QUIC transport protocol. As of quinn-proto 0.11, it is possible for a server to `accept()`, `retry()`, `refuse()`, or `ignore()` an `Incoming` connection. However, calling `retry()` on an unvali

  • 7.5 High severity

    quinn-proto is a state machine for the QUIC transport protocol.

    CVE-2023-42805Quinn-rs

    quinn-proto is a state machine for the QUIC transport protocol. Prior to versions 0.9.5 and 0.10.5, receiving unknown QUIC frames in a QUIC packet could result in a panic. The problem has been fixed in 0.9.5 and 0.10.5 maintenance releases.