quinn vulnerabilities and fixes

Recent CVEs affecting quinn, with upgrade or downgrade steps. 2 tracked.

quinn has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2024-09-02. Highest priority: CVE-2023-42805 (score 46/100).

• CVE-2024-45311 HIGH 7.5 UPGRADE Quinn is a pure-Rust, async-compatible implementation of the IETF QUIC transport protocol
• CVE-2023-42805 HIGH 7.5 UPGRADE quinn-proto is a state machine for the QUIC transport protocol

FAQ

How do I fix quinn vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is quinn being exploited right now?

None of the tracked quinn CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which quinn CVE should I patch first?

CVE-2023-42805 currently ranks highest (46/100): quinn-proto is a state machine for the QUIC transport protocol.

← Back to latest CVEs