Skip to content
fr Sign in
7.5 High

CVE-2023-42805 quinn-proto is a state machine for the QUIC transport protocol

Description

quinn-proto is a state machine for the QUIC transport protocol. Prior to versions 0.9.5 and 0.10.5, receiving unknown QUIC frames in a QUIC packet could result in a panic. The problem has been fixed in 0.9.5 and 0.10.5 maintenance releases.

Affected products and versions

Product Affected versions Fixed in
quinn 0.10 0.10.0 → < 0.10.5 0.10.5
quinn 0.9 earliest → < 0.9.5 0.9.5
quinn 0.10 0.10.0 → < 0.10.5 0.10.5
quinn 0.9 earliest → < 0.9.5 0.9.5

References

Timeline

  1. Published
  2. Last modified

Other CVEs of quinn

The 4 CVEs of quinn →
CVE-2026-25800 Quinn is a pure-Rust, async-compatible implementation of the IETF QUIC transport protocol 7.5 High CVE-2026-31812 Quinn is a pure-Rust, async-compatible implementation of the IETF QUIC transport protocol 8.7 High CVE-2024-45311 Quinn is a pure-Rust, async-compatible implementation of the IETF QUIC transport protocol 7.5 High
Track this CVE