4 matches found
Denial of service in quinn-proto when using `Endpoint::retry()`
Summary As of quinn-proto 0.11, it is possible for a server to accept, retry, refuse, or ignore an Incoming connection. However, calling retry on an unvalidated connection exposes the server to a likely panic in the following situations: - Calling refuse or ignore on the resulting validated...
7.5CVSS7AI score0.00568EPSS
SaveExploits0References7Affected Software1
`Endpoint::retry()` calls can lead to panicking
In 0.11.0, we overhauled the server-side Endpoint implementation to enable more careful handling of incoming connection attempts. However, some of the code paths that cleaned up state after connection attempts were processed confused the initial destination connection ID with the destination...
7.5CVSS7AI score0.00568EPSS
SaveExploits0Affected Software1
20