Is os_socketaddr affected by GHSA-c439-chv8-8g2j?

crates.io os_socketaddr is affected in <0.2.2.

Is GHSA-c439-chv8-8g2j being exploited?

Not on the CISA KEV list. EPSS exploit probability is not available.

high

GHSA-c439-chv8-8g2j

Q: Is GHSA-c439-chv8-8g2j being exploited?

Not on the CISA KEV list. EPSS exploit probability is not available.

crates.io · os_socketaddr

Summary

`os_socketaddr` invalidly assumes the memory layout of std::net::SocketAddr

Severity: high
Also known as: RUSTSEC-2022-0052
Published: 2022-09-02

References

https://github.com/a-ba/os_socketaddr/issues/3
https://github.com/rust-lang/rust/pull/78802
https://github.com/a-ba/os_socketaddr/commit/1bc7f71d40de069727993a18fdada33eb0b4c94f

Is your project exposed to this? Stateward checks every dependency on every pull request and flags it only if your code actually reaches it.

Check my repo

Summarize with AI

ChatGPT Claude Perplexity

Sources: CISA KEV (public domain), OSV.dev & GitHub Advisory Database (CC-BY-4.0), FIRST EPSS, NVD/CWE (public domain). Served live from the Stateward advisory database.