Skip to content
fr Sign in
8.7 High

CVE-2026-31812 Quinn is a pure-Rust, async-compatible implementation of the IETF QUIC transport protocol

Description

Quinn is a pure-Rust, async-compatible implementation of the IETF QUIC transport protocol. Prior to 0.11.14, a remote, unauthenticated attacker can trigger a denial of service in applications using vulnerable quinn versions by sending a crafted QUIC Initial packet containing malformed quic_transport_parameters. In quinn-proto parsing logic, attacker-controlled varints are decoded with unwrap(), so truncated encodings cause Err(UnexpectedEnd) and panic. This is reachable over the network with a single packet and no prior trust or authentication. This vulnerability is fixed in 0.11.14.

Affected products and versions

Product Affected versions Fixed in
Logging Subsystem for Red Hat OpenShift 6.4 1780052069 earliest → < 1780052069 1780052069
Red Hat Ansible Automation Platform 2.6 1777398576 earliest → < 1777398576 1777398576
Red Hat OpenShift AI 3.3 1778596806 earliest → < 1778596806 1778596806
Red Hat Trusted Artifact Signer 1.3 1773307309 earliest → < 1773307309 1773307309
Confidential Compute Attestation Versions not published
Logging Subsystem for Red Hat OpenShift Versions not published
Red Hat Enterprise Linux 10 Versions not published
Red Hat Enterprise Linux 9 Versions not published
Red Hat Enterprise Linux AI (RHEL AI) 3 Versions not published
Show the 8 other branches
Product Affected versions Fixed in
Red Hat OpenShift AI (RHOAI) Versions not published
Red Hat OpenShift Container Platform 4 Versions not published
Red Hat Enterprise Linux 7 Versions not published
Red Hat Enterprise Linux 8 Versions not published
Red Hat OpenShift Update Service Versions not published
Red Hat Trusted Profile Analyzer Versions not published
quinn 0.11 earliest → < 0.11.14 0.11.14
Logging for Red Hat OpenShift 6.4 1780052069 earliest → < 1780052069 1780052069

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Logging Subsystem for Red Hat OpenShift 6.4

The 15 CVEs of Logging Subsystem for Red Hat OpenShift 6.4 →
CVE-2026-39821 The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label 9.6 Critical CVE-2026-33811 When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a… 7.5 High CVE-2026-39820 Well-crafted inputs reaching ParseAddress, ParseAddressList, and ParseDate were able to trigger excessive CPU exhaustion… 7.5 High CVE-2026-42499 Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322 7.5 High
Track this CVE