Vulnerability HighRUSTSEC-2023-0063 · quinn-proto
RUSTSEC-2023-0063: Denial of service in Quinn servers
Short answerA security vulnerability in the quinn-proto crate: Denial of service in Quinn servers. High severity (CVSS 7.5). Fixed in 0.10.5, 0.9.5: update to a fixed version.
| Crate | quinn-proto |
|---|---|
| Type | Vulnerability (denial-of-service) |
| Affected versions | Before 0.9.5; from 0.10.0 before 0.10.5. |
| Fixed in | 0.10.5, 0.9.5 |
| Severity | High, CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
| Published | 2023-09-21 |
| Last changed | 2024-02-10 |
| Also known as | CVE-2023-42805, GHSA-q8wc-j5m9-27w3 |
What to do
- See which version you have:
cargo tree -i quinn-proto(it also shows which of your dependencies pulls it in). - Update within your version requirement:
cargo update -p quinn-proto. If the fix is a newer major or minor than your requirement allows, raise it in Cargo.toml (for examplequinn-proto = "0.9.5") or update the dependency that pulls it in. - Check again with
cargo audit, or paste your Cargo.lock into our Cargo.toml checker.
Details from the advisory
Receiving QUIC frames containing a frame with unknown frame type could lead to a panic. Unfortunately this is issue was not found by our fuzzing infrastructure.
Thanks to the QUIC Tester research group for reporting this issue.
References
- Package: crates.io/crates/quinn-proto
- Advisory: rustsec.org/advisories/RUSTSEC-2023-0063.html
- Web: github.com/quinn-rs/quinn/pull/1667
From the RustSec Advisory Database (CC0-1.0) via the OSV export, downloaded Oct 24, 2026. Severity score computed from the published CVSS vector.
Other advisories for quinn-proto
- Vulnerability HighRUSTSEC-2024-0373 · 2024-09-02`Endpoint::retry()` calls can lead to panicking
- VulnerabilityRUSTSEC-2026-0037 · 2026-03-09Denial of service in Quinn endpoints
- Vulnerability HighRUSTSEC-2026-0185 · 2026-06-22 Remote memory exhaustion in quinn-proto from unbounded out-of-order stream reassembly
- VulnerabilityRUSTSEC-2026-0338 · 2026-09-14Remote peer can panic quinn-proto with zero-length STREAM frames during unordered reads
- VulnerabilityRUSTSEC-2026-0339 · 2026-08-17Unbounded growth of pending connection ID retirements in quinn-proto
- Vulnerability HighRUSTSEC-2026-0340 · 2026-09-14Peer minimum ACK delay can panic quinn-proto when ACK_FREQUENCY transmission is enabled
- Vulnerability HighRUSTSEC-2026-0341 · 2026-08-17Stream reassembly memory-exhaustion guard in quinn-proto can be bypassed
- VulnerabilityRUSTSEC-2026-0342 · 2026-08-17Zero-length DATAGRAM frames bypass the receive buffer limit in quinn-proto
Up next
Same cratequinn-proto: security historyEvery advisory for this crate, and whether it is safe to use today.Read it next →Did this answer your question?