---
id: CVE-2026-31812
title: >-
  Quinn is a pure-Rust, async-compatible implementation of the IETF QUIC
  transport protocol
summary: >-
  Quinn is a pure-Rust, async-compatible implementation of the IETF QUIC
  transport protocol. Prior to 0.11.14, a remote, unauthenticated attacker can
  trigger a denial of service in applications using vulnerable quinn versions by
  sending a …
severity: medium
cvss: 5.3
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
cwe:
  - CWE-248
published: '2026-03-10'
updated: '2026-07-27'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-31812'
references:
  - url: 'https://github.com/quinn-rs/quinn/security/advisories/GHSA-6xvm-j4wr-6v98'
    label: security-advisories@github.com
  - url: 'https://access.redhat.com/errata/RHSA-2026:13545'
    label: 0b0ca135-0b70-47e7-9f44-1890c2a1c46c
  - url: 'https://access.redhat.com/errata/RHSA-2026:19712'
    label: 0b0ca135-0b70-47e7-9f44-1890c2a1c46c
  - url: 'https://access.redhat.com/errata/RHSA-2026:22862'
    label: 0b0ca135-0b70-47e7-9f44-1890c2a1c46c
  - url: 'https://access.redhat.com/errata/RHSA-2026:5459'
    label: 0b0ca135-0b70-47e7-9f44-1890c2a1c46c
  - url: 'https://access.redhat.com/security/cve/CVE-2026-31812'
    label: 0b0ca135-0b70-47e7-9f44-1890c2a1c46c
  - url: 'https://bugzilla.redhat.com/show_bug.cgi?id=2446330'
    label: 0b0ca135-0b70-47e7-9f44-1890c2a1c46c
  - url: >-
      https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-31812.json
    label: 0b0ca135-0b70-47e7-9f44-1890c2a1c46c
  - url: 'https://www.cve.org/CVERecord?id=CVE-2026-31812'
  - url: 'https://nvd.nist.gov/vuln/detail/CVE-2026-31812'
tags:
  - nvd
  - csaf
  - vex
  - red-hat
epss: 0.0052
epssPercentile: 0.44004
ingestedAt: '2026-07-27T13:18:48.140Z'
vendor: Red Hat
product: Logging Subsystem for Red Hat OpenShift
affected:
  - confidential_compute_attestation
  - logging_subsystem_for_red_hat_openshift
  - enterprise_linux 10
  - enterprise_linux 9
  - enterprise_linux_ai_rhel_ai 3
  - openshift_ai_rhoai
  - openshift_container_platform 4
  - logging_subsystem_for_red_hat_openshift 6.4
  - ansible_automation_platform 2.6
  - openshift_ai 3.3
  - trusted_artifact_signer 1.3
patched:
  - logging_subsystem_for_red_hat_openshift 6.4
  - ansible_automation_platform 2.6
  - openshift_ai 3.3
  - trusted_artifact_signer 1.3
---

## Overview

Quinn is a pure-Rust, async-compatible implementation of the IETF QUIC transport protocol. Prior to 0.11.14, a remote, unauthenticated attacker can trigger a denial of service in applications using vulnerable quinn versions by sending a crafted QUIC Initial packet containing malformed quic_transport_parameters. In quinn-proto parsing logic, attacker-controlled varints are decoded with unwrap(), so truncated encodings cause Err(UnexpectedEnd) and panic. This is reachable over the network with a single packet and no prior trust or authentication. This vulnerability is fixed in 0.11.14.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.

## Vendor advisories

- **RHSA-2026:22862** · Red Hat · fixed in: Logging Subsystem for Red Hat OpenShift 6.4 · released 2026-06-03 · [advisory](https://access.redhat.com/errata/RHSA-2026:22862)
- **RHSA-2026:13545** · Red Hat · fixed in: Red Hat Ansible Automation Platform 2.6 · released 2026-05-04 · [advisory](https://access.redhat.com/errata/RHSA-2026:13545)
- **RHSA-2026:19712** · Red Hat · fixed in: Red Hat OpenShift AI 3.3 · released 2026-05-20 · [advisory](https://access.redhat.com/errata/RHSA-2026:19712)
- **RHSA-2026:5459** · Red Hat · fixed in: Red Hat Trusted Artifact Signer 1.3 · released 2026-03-23 · [advisory](https://access.redhat.com/errata/RHSA-2026:5459)
- **Red Hat VEX** · Important · affected: Confidential Compute Attestation, Logging Subsystem for Red Hat OpenShift, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux AI (RHEL AI) 3, Red Hat OpenShift AI (RHOAI), … · no fix planned: Confidential Compute Attestation, Logging Subsystem for Red Hat OpenShift, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 9, … · updated 2026-10-09 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-31812.json)