From 69e85eff7f0ae206d5a833ace6fdc7fb2eec5ace Mon Sep 17 00:00:00 2001
From: Dirkjan Ochtman <dirkjan@ochtman.nl>
Date: Thu, 21 Sep 2023 13:30:28 +0200
Subject: [PATCH] Add advisory for quinn-proto DoS issue (#1787)

---
 crates/quinn-proto/RUSTSEC-0000-0000.md | 21 +++++++++++++++++++++
 1 file changed, 21 insertions(+)
 create mode 100644 crates/quinn-proto/RUSTSEC-0000-0000.md

diff --git a/crates/quinn-proto/RUSTSEC-0000-0000.md b/crates/quinn-proto/RUSTSEC-0000-0000.md
new file mode 100644
index 0000000..149e780
--- /dev/null
+++ b/crates/quinn-proto/RUSTSEC-0000-0000.md
@@ -0,0 +1,21 @@
+```toml
+[advisory]
+id = "RUSTSEC-0000-0000"
+package = "quinn-proto"
+date = "2023-09-21"
+url = "https://github.com/quinn-rs/quinn/pull/1667"
+categories = ["denial-of-service"]
+keywords = ["panic"]
+aliases = ["GHSA-q8wc-j5m9-27w3"]
+cvss = "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
+
+[versions]
+patched = ["^0.9.5", ">= 0.10.5"]
+```
+
+# Denial of service in Quinn servers
+
+Receiving QUIC frames containing a frame with unknown frame type could lead to a panic.
+Unfortunately this is issue was not found by our fuzzing infrastructure.
+
+Thanks to the QUIC Tester research group for reporting this issue.