quinn vulnerabilities

2 known vulnerabilities in quinn from Quinn Project. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  quinn: Always-Incorrect Control Flow Implementation

  CVE-2024-45311Sep 2, 2024Quinn-rs

  Quinn is a pure-Rust, async-compatible implementation of the IETF QUIC transport protocol. As of quinn-proto 0.11, it is possible for a server to `accept()`, `retry()`, `refuse()`, or `ignore()` an `Incoming` connection. However, calling `retry()` on an unvali

• 7.5 High severity

  quinn-proto is a state machine for the QUIC transport protocol.

  CVE-2023-42805Sep 21, 2023Quinn-rs

  quinn-proto is a state machine for the QUIC transport protocol. Prior to versions 0.9.5 and 0.10.5, receiving unknown QUIC frames in a QUIC packet could result in a panic. The problem has been fixed in 0.9.5 and 0.10.5 maintenance releases.