Quinn is a pure-Rust, async-compatible implementation of the IETF QUIC transport protocol. Prior to 0.11.14, a remote, unauthenticated attacker can trigger a denial of service in applications using vulnerable quinn versions by sending a crafted QUIC Initial packet containing malformed quic_transport_parameters. In quinn-proto parsing logic, attacker-controlled varints are decoded with unwrap(), so truncated encodings cause Err(UnexpectedEnd) and panic. This is reachable over the network with a single packet and no prior trust or authentication. This vulnerability is fixed in 0.11.14.
Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.
| Üretici | Ürün | Sürümler | |
|---|---|---|---|
| ansible automation platform | 2.6 | — | |
| logging | 6.4 | — | |
| openshift ai | 3.3 | — | |
| quinn-rs | quinn | < 0.11.14 | |
| Red Hat | Confidential Compute Attestation | all versions | |
| Red Hat | Logging Subsystem for Red Hat OpenShift | all versions | |
| Red Hat | Logging Subsystem for Red Hat OpenShift 6.4 | all versions | |
| Red Hat | Red Hat Ansible Automation Platform 2.6 | all versions | |
| Red Hat | Red Hat Enterprise Linux 10 | all versions | |
| Red Hat | Red Hat Enterprise Linux 7 | — | |
| Red Hat | Red Hat Enterprise Linux 8 | — | |
| Red Hat | Red Hat Enterprise Linux 9 | all versions | |
| Red Hat | Red Hat Enterprise Linux AI (RHEL AI) 3 | all versions | |
| Red Hat | Red Hat OpenShift AI 3.3 | all versions | |
| Red Hat | Red Hat OpenShift AI (RHOAI) | all versions | |
| Red Hat | Red Hat OpenShift Container Platform 4 | all versions | |
| Red Hat | Red Hat OpenShift Update Service | — | |
| Red Hat | Red Hat Trusted Artifact Signer 1.3 | all versions | |
| Red Hat | Red Hat Trusted Profile Analyzer | — | |
| trusted artifact signer | 1.3 | — |
Ücretsiz ve açık kaynak honeypot sensörümüz, sunucunuzun kullanmadığı portlarda bekler; bağlanan tarayıcıları ve saldırganları ortak kara listeye bildirir.
