CVE-2023-42805 (published 2023-09-21T16:39:56.350Z)
quinn-proto is a state machine for the QUIC transport protocol. Prior to versions 0.9.5 and 0.10.5, receiving unknown QUIC frames in a QUIC packet could result in a panic. The problem has been fixed in 0.9.5 and 0.10.5 maintenance releases.
Affected products: Vendor: quinn-rs
Product: quinn
Versions: < 0.9.5, >= 0.10.0, < 0.10.5