Future<T> lacks bounds on Send and Sync. `tiny_future` contains a light-weight implementation of `Future`s. The `Future` type lacks bounds on its `Send` and `Sync` traits. This allows for data races in concurrent programs due to the use of non-thread safe types. The flaw was corrected in commit `c791919` by adding trait bounds to `Future`'s `Send` and `Sync`
Reporter | Title | Published | Views | Family All 9 |
---|---|---|---|---|
OSV | Data race in tiny_future | 25 Aug 202120:58 | – | osv |
OSV | Data races in tiny_future | 25 Aug 202121:00 | – | osv |
OSV | Future<T> lacks bounds on Send and Sync. | 8 Dec 202012:00 | – | osv |
Prion | Design/Logic Flaw | 8 Aug 202106:15 | – | prion |
CVE | CVE-2020-36438 | 8 Aug 202106:15 | – | cve |
CNVD | Mozilla Rust Buffer Overflow Vulnerability (CNVD-2021-85297) | 23 Sep 202100:00 | – | cnvd |
NVD | CVE-2020-36438 | 8 Aug 202106:15 | – | nvd |
Cvelist | CVE-2020-36438 | 8 Aug 202105:18 | – | cvelist |
Github Security Blog | Data race in tiny_future | 25 Aug 202120:58 | – | github |
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo