Lucene search
China National Vulnerability DatabaseCNVD-2021-78748HistorySep 23, 2021 - 12:00 a.m.
Mozilla Rust Command Injection Vulnerability (CNVD-2021-78748)
2021-09-2300:00:00
China National Vulnerability Database
www.cnvd.org.cn
5
0.003 Low
EPSS
Percentile
69.3%
Rust is a general-purpose, compiled programming language from the Mozilla Foundation. Mozilla Rust is vulnerable to a command injection vulnerability that originates from rcu_cell crate in Rust. For RcuCell <T> there is an unconditional send and sync implementation, which can be exploited by an attacker to cause memory corruption.
Related
osv
osv
Data races in rcu_cell
2021-08-25 20:57:14
Send/Sync bound needed on T for Send/Sync impl of RcuCell<T>
2020-11-14 12:00:00
rustsec
rustsec
Send/Sync bound needed on T for Send/Sync impl of RcuCell<T>
2020-11-14 12:00:00
github
github
Data races in rcu_cell
2021-08-25 20:57:14
cve
cve
CVE-2020-36451
2021-08-08 06:15:07
prion
prion
Design/Logic Flaw
2021-08-08 06:15:00
cvelist
cvelist
CVE-2020-36451
2021-08-08 05:15:22
nvd
nvd
CVE-2020-36451
2021-08-08 06:15:07