CVE-2026-94450 - Potential denial of service when configured to send Retry packets in s2n-quic

Imported from official source

Security notice

Cybersecurity Classified by Officially

Bulletin ID: 2026-116-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 09/22/2026 13:00 PM PDT Description: s2n-quic is a Rust implementation of the QUIC protocol. We identified CVE-2026-94450, an issue with improper validation of the Destination Connection ID length when a server is configured to send Retry packets. …

This is an extract. The publication continues at the source.

Read the original at the source: https://aws.amazon.com/security/security-bulletins/rss/2026-116-aws/

Officially imported this from Amazon Web Services’s own source and shows an extract. If you work there, claiming the profile and verifying the domain lets you choose to show the full text here.

Provenance

Organization
Amazon Web Services — imported from official source
Official source
https://aws.amazon.com/security/security-bulletins/feed/ RSS
Imported
October 21, 2026 22:00
Versions
1 recorded
Identity
4da18f077b6ad25a17282b3d2bf7d514b22292f8

Officially records where a publication came from, not whether it is true. Imported records are reproduced from an organization's own official source.