CVE-2022-23639

🗓️ 15 Feb 2022 18:20:10Reported by Debian Security Bug TrackerType

debiancve

debiancve🔗 security-tracker.debian.org👁 99 Views

Vulnerability in crossbeam-utils 0.8.7

Reporter	Title	Published	Views	Family All 31
AstraLinux	Astra Linux – Vulnerability in RustC	20 May 202605:53	–	astralinux
Tenable Nessus	Azure Linux 3.0 Security Update: librsvg2 (CVE-2022-23639)	22 Jan 202600:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2022-23639	5 Mar 202500:00	–	nessus
BDU FSTEC	The vulnerability of Crossbeam Utils, a parallel programming tool, on 32-bit systems arises from the simultaneous execution using a shared resource with improper synchronization. This allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.	23 Sep 202200:00	–	bdu_fstec
CBLMariner	CVE-2022-23639 affecting package librsvg2 for versions less than 2.58.1-1	21 Jun 202409:32	–	cbl_mariner
CBLMariner	CVE-2022-23639 affecting package rpm-ostree for versions less than 2024.4-1	24 Jul 202401:44	–	cbl_mariner
CBLMariner	CVE-2022-23639 affecting package rust for versions less than crossbeam_utils-0.8.7	5 May 202515:41	–	cbl_mariner
Circl	CVE-2022-23639	15 Feb 202222:34	–	circl
CNNVD	crossbeam 竞争条件问题漏洞	15 Feb 202200:00	–	cnnvd
CVE	CVE-2022-23639	15 Feb 202218:20	–	cve

OS	OS Version	Architecture	Package	Package Version	Filename
Debian	11	all	rust-crossbeam-utils	0.7.2-2	rust-crossbeam-utils_0.7.2-2_all.deb
Debian	12	all	rust-crossbeam-utils	0.8.8-1	rust-crossbeam-utils_0.8.8-1_all.deb
Debian	13	all	rust-crossbeam-utils	0.8.8-1	rust-crossbeam-utils_0.8.8-1_all.deb
Debian	14	all	rust-crossbeam-utils	0.8.8-1	rust-crossbeam-utils_0.8.8-1_all.deb
Debian	999	all	rust-crossbeam-utils	0.8.8-1	rust-crossbeam-utils_0.8.8-1_all.deb

15 Feb 2022 18:20Current

8High risk

Vulners AI Score8

CVSS 26.8

CVSS 3.18.1

EPSS0.01239

SSVC

crossbeam-utils atomics synchronization rust concurrent programming data race 32-bit targets 64-bit targets fix unaligned memory accesses