CVE-2021-28036

    Dashboard / Vulnerabilities / CVE-2021-28036

    CVE-2021-28036

    Published: 5 Mar 2021Last Modified: 12 Sept 2026

    Summary:

    Details: An issue was discovered in the quinn crate before 0.7.0 for Rust. It may have invalid memory access for certain versions of the standard library because it relies on a direct cast of std::net::SocketAddrV4 and std::net::SocketAddrV6 data structures.

    References: https://rustsec.org/advisories/RUSTSEC-2021-0035.html

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 0
    Fixed -061a74fb6ef67b12f78bc2a3cfc9906e54762eeb

    Affected versions

    quinn-udp-0.6.1
    quinn-udp-0.6.0

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2021-28036 | CVE-DB