Lucene search

GitHub Advisory DatabaseGHSA-8GF5-Q9P9-WVMC

HistoryAug 25, 2021 - 8:51 p.m.

Data race in atomic-option

2021-08-2520:51:42

CWE-662

GitHub Advisory Database

github.com

data race

atomicoption

rust

synchronization

issue

software

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

CVSS3

5.9

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

46.4%

JSON

An issue was discovered in the atomic-option crate through 2020-10-31 for Rust. Because AtomicOption<T> implements Sync unconditionally, a data race can occur.

Affected configurations

Vulners

Node

atomic-option_projectatomic-optionRange≤0.1.2rust

VendorProductVersionCPE
atomic-option_projectatomic-option*cpe:2.3:a:atomic-option_project:atomic-option:*:*:*:*:*:rust:*:*

Vendor	Product	Version	CPE
atomic-option_project	atomic-option	*	cpe:2.3:a:atomic-option_project:atomic-option::::::rust::*

References

github.com/advisories/GHSA-8gf5-q9p9-wvmc

github.com/reem/rust-atomic-option/issues/4

nvd.nist.gov/vuln/detail/CVE-2020-36219

rustsec.org/advisories/RUSTSEC-2020-0113.html

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

CVSS3

5.9

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

46.4%

JSON

Related for GHSA-8GF5-Q9P9-WVMC