Security Advisories

CVEs affecting projects tracked on Release Alert, from NVD & OSV.

Privacy Policy
Terms of Service
Contact

CVE-2021-28036 — HIGH severity vulnerability | Release Alert

CVE-2021-28036

7.5

HIGHCVSS v3

Published

March 5, 2021

CVSS v2

5 MEDIUM

Affected

6 projects

Assigned by

MITRE

Severity scale

010

Description

An issue was discovered in the quinn crate before 0.7.0 for Rust. It may have invalid memory access for certain versions of the standard library because it relies on a direct cast of std::net::SocketAddrV4 and std::net::SocketAddrV6 data structures.

quinn-rs/quinn

GitHubAsync-friendly QUIC implementation in Rust

>= 0.6.0, < 0.6.2, < 0.5.4, >= 0.0.0-0, < 0.5.4, >= 0.6.0-0, < 0.6.2, >= 0.7.0-0, < 0.7.0NVD

quinn

Python Package IndexPyspark helper methods to maximize developer efficiency

>= 0.6.0, < 0.6.2, < 0.5.4, >= 0.0.0-0, < 0.5.4, >= 0.6.0-0, < 0.6.2, >= 0.7.0-0, < 0.7.0NVD

quinn

More on this CVE

NVD↗GitHub Advisory↗

Crates.ioVersatile QUIC transport protocol implementation

>= 0.6.0, < 0.6.2, < 0.5.4, >= 0.0.0-0, < 0.5.4, >= 0.6.0-0, < 0.6.2, >= 0.7.0-0, < 0.7.0NVD

mrpowers-io/quinn

GitHubpyspark methods to enhance developer productivity 📣 👯 🎉

>= 0.6.0, < 0.6.2, < 0.5.4, >= 0.0.0-0, < 0.5.4, >= 0.6.0-0, < 0.6.2, >= 0.7.0-0, < 0.7.0NVD

quinn

NPMA web framework designed for things to come.

>= 0.6.0, < 0.6.2, < 0.5.4, >= 0.0.0-0, < 0.5.4, >= 0.6.0-0, < 0.6.2, >= 0.7.0-0, < 0.7.0NVD

groupon/quinn

GitHubA set of convenient helpers to use promises to handle http requests

>= 0.6.0, < 0.6.2, < 0.5.4, >= 0.0.0-0, < 0.5.4, >= 0.6.0-0, < 0.6.2, >= 0.7.0-0, < 0.7.0NVD