Vulnerabilities (CVE)

Filtered by vendor Quinn Project Subscribe
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-42805 1 Quinn Project 1 Quinn 2023-09-25 N/A 7.5 HIGH
quinn-proto is a state machine for the QUIC transport protocol. Prior to versions 0.9.5 and 0.10.5, receiving unknown QUIC frames in a QUIC packet could result in a panic. The problem has been fixed in 0.9.5 and 0.10.5 maintenance releases.
CVE-2021-28036 1 Quinn Project 1 Quinn 2021-03-05 5.0 MEDIUM 7.5 HIGH
An issue was discovered in the quinn crate before 0.7.0 for Rust. It may have invalid memory access for certain versions of the standard library because it relies on a direct cast of std::net::SocketAddrV4 and std::net::SocketAddrV6 data structures.