CVE-2026-31812
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Summary
Quinn is a pure-Rust, async-compatible implementation of the IETF QUIC transport protocol. Prior to 0.11.14, a remote, unauthenticated attacker can trigger a denial of service in applications using vulnerable quinn versions by sending a crafted QUIC Initial packet containing malformed quic_transport_parameters. In quinn-proto parsing logic, attacker-controlled varints are decoded with unwrap(), so truncated encodings cause Err(UnexpectedEnd) and panic. This is reachable over the network with a single packet and no prior trust or authentication. This vulnerability is fixed in 0.11.14.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| quinn-rs | quinn | < 0.11.14 | affected |
Weaknesses
- CWE-248: CWE-248: Uncaught Exception
ADP Enrichment
CISA ADP Vulnrichment
- SSVC:
- Exploitation: poc
- Automatable: no
- Technical Impact: partial
quinn-proto: quinn-proto: Denial of Service via crafted QUIC Initial packet
Additional References
- https://access.redhat.com/security/cve/CVE-2026-31812
- https://bugzilla.redhat.com/show_bug.cgi?id=2446330
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-31812.json
- https://access.redhat.com/errata/RHSA-2026:22862
- https://access.redhat.com/errata/RHSA-2026:13545
- https://access.redhat.com/errata/RHSA-2026:19712
- https://access.redhat.com/errata/RHSA-2026:5459
References
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.