UBUNTU-CVE-2026-25800

See a problem?
Please try reporting it to the source first.

Source

https://ubuntu.com/security/CVE-2026-25800

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-25800.json

JSON Data

https://api.osv.dev/v1/vulns/UBUNTU-CVE-2026-25800

Upstream

CVE-2026-25800

Published

2026-07-23T20:17:00Z

Modified

2026-07-29T07:54:26Z

Severity

7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Ubuntu - medium

Summary

[none]

Details

Quinn is a pure-Rust, async-compatible implementation of the IETF QUIC transport protocol. Starting in version 0.1.0 and prior to version 0.11.15, the Assembler component that assembles unordered stream fragments into consecutive chunks of the stream incurs some overhead for non-contiguous fragments. Readers that read from a RecvStream in order (through an AsyncRead impl for example) will be sensitive to peers that send fragments while leaving out early parts of the stream, and in particular, fragments with many gaps (because these cannot be defragmented). In such a scenario, the receiving connection suffers from high buffer overhead, enabling memory exhaustion. Version 0.11.15 fixes the issue.

References

Affected packages

Ubuntu:24.04:LTS / rust-quinn-proto

Package

Name: rust-quinn-proto
Purl: pkg:deb/ubuntu/rust-quinn-proto?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

0.*

0.10.2-1

0.10.5-2

0.10.6-1

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "librust-quinn-proto-dev",
            "binary_version": "0.10.6-1"
        }
    ]
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-25800.json"

Ubuntu:26.04:LTS / rust-quinn-proto