OMGeeky/advisory-db
1
0
Fork 0
mirror of https://github.com/OMGeeky/advisory-db.git synced 2025-12-29 07:46:22 +01:00
Code Issues Packages Projects Releases Wiki Activity

Add advisory for quinn-proto DoS issue (#1787)

Browse Source
This commit is contained in:
Dirkjan Ochtman
2023-09-21 13:30:28 +02:00
committed by GitHub
parent 12719bd23b
commit 69e85eff7f
1 changed files with 21 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

21
crates/quinn-proto/RUSTSEC-0000-0000.md Normal file
View File

@@ -0,0 +1,21 @@
```toml
[advisory]
id = "RUSTSEC-0000-0000"
package = "quinn-proto"
date = "2023-09-21"
url = "https://github.com/quinn-rs/quinn/pull/1667"
categories = ["denial-of-service"]
keywords = ["panic"]
aliases = ["GHSA-q8wc-j5m9-27w3"]
cvss = "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
[versions]
patched = ["^0.9.5", ">= 0.10.5"]
```
# Denial of service in Quinn servers
Receiving QUIC frames containing a frame with unknown frame type could lead to a panic.
Unfortunately this is issue was not found by our fuzzing infrastructure.
Thanks to the QUIC Tester research group for reporting this issue.