Quinn<0.11.14 DoS via Malformed quic_transport_parameters (panic)
CVE-2026-31812 Published on March 10, 2026

Quinn affected by unauthenticated remote DoS via panic in QUIC transport parameter parsing
Quinn is a pure-Rust, async-compatible implementation of the IETF QUIC transport protocol. Prior to 0.11.14, a remote, unauthenticated attacker can trigger a denial of service in applications using vulnerable quinn versions by sending a crafted QUIC Initial packet containing malformed quic_transport_parameters. In quinn-proto parsing logic, attacker-controlled varints are decoded with unwrap(), so truncated encodings cause Err(UnexpectedEnd) and panic. This is reachable over the network with a single packet and no prior trust or authentication. This vulnerability is fixed in 0.11.14.

NVD

Vulnerability Analysis

CVE-2026-31812 is exploitable with network access, and does not require authorization privileges or user interaction. This vulnerability is considered to have a low attack complexity. Public availability of a proof of concept (POC) exploit exists for CVE-2026-31812. The potential impact of an exploit of this vulnerability is considered to have no impact on confidentiality and integrity, and a small impact on availability.

Attack Vector:
NETWORK
Attack Complexity:
LOW
Privileges Required:
NONE
User Interaction:
NONE
Scope:
UNCHANGED
Confidentiality Impact:
NONE
Integrity Impact:
NONE
Availability Impact:
LOW

Weakness Type

Uncaught Exception

An exception is thrown from a function, but it is not caught. When an exception is not caught, it may cause the program to crash or expose sensitive information.


Products Associated with CVE-2026-31812

Want to know whenever a new CVE is published for Red Hat products? stack.watch will email you.

Red Hat Logging
 
Red Hat Ansible Automation Platform
 
Red Hat Openshift Ai
 
Red Hat Trusted Artifact Signer
 
Red Hat Confidential Compute Attestation
 
Red Hat Enterprise Linux (RHEL)
 
Red Hat Enterprise Linux Ai
 
Red Hat Openshift
 
Red Hat Openshift Update Service
 
Red Hat Trusted Profile Analyzer
 

Affected Versions

quinn-rs quinn: Logging Subsystem for Red Hat OpenShift 6.4: Red Hat Ansible Automation Platform 2.6: Red Hat OpenShift AI 3.3: Red Hat Trusted Artifact Signer 1.3: Red Hat Confidential Compute Attestation: Logging Subsystem for Red Hat OpenShift: Red Hat Enterprise Linux 10: Red Hat Enterprise Linux 9: Red Hat Enterprise Linux AI (RHEL AI) 3: Red Hat OpenShift AI (RHOAI): Red Hat OpenShift Container Platform 4: Red Hat Enterprise Linux 7: Red Hat Enterprise Linux 8: Red Hat OpenShift Update Service: Red Hat Trusted Profile Analyzer:

Exploit Probability

EPSS
0.47%
Percentile
36.92%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.