Description
An issue was discovered in the quinn crate before 0.7.0 for Rust. It may have invalid memory access for certain versions of the standard library because it relies on a direct cast of std::net::SocketAddrV4 and std::net::SocketAddrV6 data structures.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| crates.io | quinn | < 0.5.4 | 0.5.4 | GHSA-fhv4-fx3v-77w6 |
| crates.io | quinn | >= 0.6.0, < 0.6.2 | 0.6.2 | GHSA-fhv4-fx3v-77w6 |
| crates.io | quinn | >= 0.0.0-0, < 0.5.4 · >= 0.6.0-0, < 0.6.2 · >= 0.7.0-0, < 0.7.0 | 0.5.4, 0.6.2, 0.7.0 | RUSTSEC-2021-0035 |