Lucene search
K

Future<T> lacks bounds on Send and Sync.

🗓️ 08 Dec 2020 12:00:00Reported by rustsecType 
rustsec
 rustsec
🔗 rustsec.org👁 27 Views

Future<T> lacks bounds on Send and Sync. `tiny_future` contains a light-weight implementation of `Future`s. The `Future` type lacks bounds on its `Send` and `Sync` traits. This allows for data races in concurrent programs due to the use of non-thread safe types. The flaw was corrected in commit `c791919` by adding trait bounds to `Future`'s `Send` and `Sync`

Related
Detection
ReporterTitlePublishedViews
Family
Circl
CVE-2020-36438
8 Aug 202112:35
circl
CNNVD
Rust 缓冲区错误漏洞
8 Aug 202100:00
cnnvd
CNVD
Mozilla Rust Buffer Overflow Vulnerability (CNVD-2021-85297)
23 Sep 202100:00
cnvd
CVE
CVE-2020-36438
8 Aug 202105:18
cve
Cvelist
CVE-2020-36438
8 Aug 202105:18
cvelist
EUVD
EUVD-2021-1699
7 Oct 202500:30
euvd
Github Security Blog
Data race in tiny_future
25 Aug 202120:58
github
NVD
CVE-2020-36438
8 Aug 202106:15
nvd
OSV
GHSA-FG42-VWXX-XX5J Data race in tiny_future
25 Aug 202120:58
osv
OSV
GHSA-M296-J53X-XV95 Data races in tiny_future
25 Aug 202121:00
osv
Rows per page
Vulners
Node
kizzycodetiny_futureRange0.0.00.4.0rust

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

13 Jun 2023 13:10Current
2.3Low risk
Vulners AI Score2.3
CVSS 26.8
CVSS 3.18.1
EPSS0.00336
27