[GHSA-jrcf-4jp8-m28v] miow invalidly assumes the memory layout of std::net::SocketAddr

[LunaBorowska]

Updates

• Affected products

[LunaBorowska]

I have no idea how to indicate affected versions. All I know is that miow 0.2.2 and miow 0.3.6/0.3.7 don't have this issue (the fix was backported to 0.2.2).

It probably should be like introduced in 0, fixed in 0.2.2, introduced in 0.3.0, fixed in 0.3.6.

[shelbyc]

I saw the comment with the link to the pull request for the backported fix. The fix will go into the references section in addition to the vulnerable version range being updated to show that 0.2.2 is patched.

[advisory-database]

Hi @xfix! Thank you so much for contributing to the GitHub Advisory Database. This database is free, open, and accessible to all, and it's people like you who make it great. Thanks for choosing to help others. We hope you send in more contributions in the future!