CVE-2025-4432 — Allocation of Resources Without Limits or Throttling in Rust-ring
Severity
5.3MEDIUMNVD
EPSS
0.3%
top 50.26%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedMay 9
Latest updateMay 15
Description
A flaw was found in Rust's Ring package. A panic may be triggered when overflow checking is enabled. In the QUIC protocol, this flaw allows an attacker to induce this panic by sending a specially crafted packet. It will likely occur unintentionally in 1 out of every 2**32 packets sent or received.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:LExploitability: 3.9 | Impact: 1.4
Affected Packages7 packages
🔴Vulnerability Details
6📋Vendor Advisories
3Debian▶
CVE-2025-4432: rust-ring - A flaw was found in Rust's Ring package. A panic may be triggered when overflow ...↗2025