Lucene search

K
osvGoogleOSV:GHSA-CWVC-87XQ-PC5M
HistoryJan 06, 2022 - 10:08 p.m.

Out-of-bounds Write and Race Condition in metrics-util

2022-01-0622:08:43
Google
osv.dev
3

0.002 Low

EPSS

Percentile

59.7%

In the affected versions of the crate, AtomicBucket<T> unconditionally implements Send/Sync traits. Therefore, users can create a data race to the inner T: !Sync by using the AtomicBucket::data_with() API. Such data races can potentially cause memory corruption or other undefined behavior.

The flaw was fixed in commit 8e6daab by adding appropriate Send/Sync bounds to the Send/Sync impl of struct Block<T> (which is a data type contained inside AtomicBucket<T>).

CPENameOperatorVersion
metrics-utillt0.7.0

0.002 Low

EPSS

Percentile

59.7%

Related for OSV:GHSA-CWVC-87XQ-PC5M