Quinn Input Validation Error Vulnerability

Quinn is a pure Rust, asynchronous-compliant implementation of the IETF QUIC transport protocol from the quinn-rs open source. An input validation error vulnerability exists in quinn-proto that stems from a Denial of Service DoS that occurs when an unknown frame is received in a QUIC packet...

PT-2008-4388 · Edgewall · Trac

Name of the Vulnerable Software and Affected Versions: Trac versions prior to 0.10.5 Description: The issue allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the q parameter, possibly related to the quickjump function. This can be exploited...