RUSTSEC-2020-0078: 
Rust vulnerability analysis and mitigation

The vulnerability (RUSTSEC-2020-0078) was discovered in the net2 crate versions before 0.2.36 for Rust. The issue involves incorrect assumptions about memory representation of std::net::SocketAddr, which could lead to security implications (RustSec Advisory).

The vulnerability stems from the net2 crate making incorrect assumptions about the memory layout of std::net::SocketAddrV{4,6} matching libc::sockaddr. The issue is present in the socket.rs file where the addr2raw function performs unsafe casting between these types without proper validation (GitHub Issue). The vulnerability has been assigned CVE-2020-35919 with a CVSS v3.1 Base Score of 5.5 (MEDIUM) and vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H (NVD).

The vulnerability primarily affects the availability of systems using the affected versions of the net2 crate. According to the CVSS scoring, while there are no direct impacts on confidentiality or integrity, the vulnerability can lead to high availability impacts through potential crashes or system instability (NVD).

The vulnerability requires local access with low complexity and low privileges to exploit. No user interaction is required for exploitation, as indicated by the CVSS metrics (NVD).

The recommended mitigation is to upgrade to net2 crate version 0.2.36 or later, which contains the fix for this vulnerability (RustSec Advisory).