NRDAX-T0338 - Unhandled Enum Variant Panic

Pending classification · active · first seen 2026-07-15

Producer label: compute_amp. Not yet assigned a mechanism family.

provenance: Reproduced in NullRabbit's attack-reproduction pipeline

mechanism

CVE-2023-42805 (RUSTSEC-2023-0063): quinn-proto < 0.9.5/0.10.5 panics on a QUIC frame with an UNKNOWN frame type (RFC 9000 §12.4 requires FRAME_ENCODING_ERROR, not a crash). A single packet carrying one undefined-type frame crashes the endpoint (availability DoS). Fixed by principled invalid-frame error handling (quinn PR #1667). Modelled as the unknown-frame-type wire signature. https://rustsec.org/advisories/RUSTSEC-2023-0063.html

live exposure

No exposure data. Slashr ↗ has no risk signal mapped to this technique yet — absence of data is not absence of exposure.

instances (1)

chain	primitive	fidelity	origin	reproducer (bundle)	source
quic	quinn_unknown_frame_panic	lab	reverse-engineered-cve	quinn_unknown_frame_panic	-

references

vendor-advisory: GHPR-aptos-labs-aptos-core-20325

cite

https://nrdax.com/techniques/NRDAX-T0338

plain

NRDAX Registry. Technique NRDAX-T0338.

bibtex

@misc{nrdax_NRDAX_T0338,
  title = {Unhandled Enum Variant Panic (NRDAX-T0338)},
  howpublished = {NRDAX Registry},
  url = {https://nrdax.com/techniques/NRDAX-T0338},
}

json (csl)

{
  "id": "nrdax-NRDAX-T0338",
  "type": "dataset",
  "title": "Unhandled Enum Variant Panic (NRDAX-T0338)",
  "URL": "https://nrdax.com/techniques/NRDAX-T0338",
  "publisher": "NRDAX Registry"
}

badge

[![NRDAX-T0338 in the NRDAX registry](https://nrdax.com/badge/NRDAX-T0338.svg)](https://nrdax.com/techniques/NRDAX-T0338-unhandled-enum-variant-panic)

use from the CLI

Retrieve or cite this technique from a script or the terminal with the NRDAX Python library & CLI.

Retrieve this technique

nrdax get NRDAX-T0338

Cite it (BibTeX)

nrdax cite NRDAX-T0338 --format bibtex

CLI guide → GitHub ↗