CVE-2026-94450— Potential denial of service when configured to send Retry packets in s2n-quic
Quick assessment
Affected
AWS s2n-quic
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Improper validation of the Destination Connection ID length in s2n-quic 1.88.0 and earlier may allow an unauthenticated remote user to cause a denial of service by shutting down a server endpoint via a single crafted UDP datagram. Only server endpoints specifi
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-94450
Vulnerability Information
Shenlong is analyzing...
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Potential denial of service when configured to send Retry packets in s2n-quic
Source: CVE Program / CVE List V5
Vulnerability Description
Improper validation of the Destination Connection ID length in s2n-quic 1.88.0 and earlier may allow an unauthenticated remote user to cause a denial of service by shutting down a server endpoint via a single crafted UDP datagram. Only server endpoints specifically configured to send Retry packets are affected.
To remediate this issue, users should upgrade to version v1.89.0 or later.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
CWE-1284
Source: CVE Program / CVE List V5
Affected Products
II. Public POCs for CVE-2026-94450
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-94450
请登录查看更多情报信息。
Other References for CVE-2026-94450 (3)
-
-
https://aws.amazon.com/security/security-bulletins/2026-116-aws/ vendor-advisory
IV. Related Vulnerabilities
Same vendor: AWS
-
CVE-2026-92943
Improper validation of certificate with host mismatch in AWS -
CVE-2026-86831
Improper validation of pod identifier uniqueness in aws-netw -
CVE-2026-86830
Incorrect privilege assignment in Temporary Elevated Access -
CVE-2026-89332
Kiro IDE Sensitive Workspace Data Exfiltration via Agent-Wri -
CVE-2026-89090
Denial of service in the event stream header decoder in AWS
Same weakness: CWE-1284
-
CVE-2026-93345
MikroTik RouterOS < 7.25beta4 Improper Input Validation DoS -
CVE-2026-89420
Session voucher adding no new funds is accepted without a ch -
CVE-2026-93749
source-map-js through 1.2.1 Event Loop Denial of Service -
CVE-2025-36178
Multiple vulnerabilities in IBM Controller -
CVE-2026-50285
Pomerium: Pre-Auth Memory Exhaustion via Unbounded zstd Deco
V. Comments for CVE-2026-94450
No comments yet