high7.5
CVE-2021-28036
An issue was discovered in the quinn crate before 0.7.0 for Rust.
Impact
An issue was discovered in the quinn crate before 0.7.0 for Rust. It may have invalid memory access for certain versions of the standard library because it relies on a direct cast of std::net::SocketAddrV4 and std::net::SocketAddrV6 data structures.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Quinn Project | Quinn | before 0.5.4 from 0.6.0 before 0.6.2 |