Lucene search
+L

3005 matches found

Github Security Blog
Github Security Blog
added 2021/08/25 8:51 p.m.33 views

Data races in reffers

ARefss is a type that is assumed to contain objects that are Send + Sync. In the affected versions of this crate, Send/Sync traits are unconditionally implemented for ARefss. By using the ARefss::map API, we can insert a !Send or !Sync object into ARefss. After that, it is possible to create a da...

4.7CVSS5.1AI score0.00242EPSS
SaveExploits1References5Affected Software1
Github Security Blog
Github Security Blog
added 2021/08/25 8:50 p.m.28 views

Data races in rusb

Affected versions of rusb did not require UsbContext to implement Send and Sync. However, through Device and DeviceHandle it is possible to use UsbContexts across threads. This issue allows non-thread safe UsbContext types to be used concurrently leading to data races and memory corruption. The...

7CVSS6.5AI score0.00285EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2021/08/25 8:50 p.m.75 views

GHSA-3JC5-5HC5-33GJ Data races in conquer-once

Affected versions of conquer-once implements Sync for its OnceCell type without restricting it to Sendable types. This allows non-Send but Sync types such as MutexGuard to be sent across threads leading to undefined behavior and memory corruption in concurrent programs. The issue was fixed by...

7.8CVSS7.7AI score0.00431EPSS
SaveExploits1References4
Github Security Blog
Github Security Blog
added 2021/08/25 8:50 p.m.36 views

Data races in conquer-once

Affected versions of conquer-once implements Sync for its OnceCell type without restricting it to Sendable types. This allows non-Send but Sync types such as MutexGuard to be sent across threads leading to undefined behavior and memory corruption in concurrent programs. The issue was fixed by...

7.8CVSS7.5AI score0.00431EPSS
SaveExploits1References4Affected Software1
OSV
OSV
added 2021/08/25 8:50 p.m.35 views

GHSA-G489-XRW3-3V8W Data races in aovec

An issue was discovered in the aovec crate through 2020-12-10 for Rust. Because Aovec does not have bounds on its Send trait or Sync trait, a data race and memory corruption can occur...

7CVSS5.9AI score0.00285EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2021/08/25 8:50 p.m.36 views

Data races in try-mutex

Affected versions of this crate unconditionally implemented Sync trait for TryMutex type. This allows users to put non-Send T type in TryMutex and send it to another thread, which can cause a data race. The flaw was corrected in the 0.3.0 release by adding T: Send bound for the Sync trait...

5.5CVSS5.4AI score0.00377EPSS
SaveExploits1References4Affected Software1
OSV
OSV
added 2021/08/25 8:50 p.m.72 views

GHSA-64J8-7GP2-XJX5 Data races in try-mutex

Affected versions of this crate unconditionally implemented Sync trait for TryMutex type. This allows users to put non-Send T type in TryMutex and send it to another thread, which can cause a data race. The flaw was corrected in the 0.3.0 release by adding T: Send bound for the Sync trait...

5.5CVSS5.2AI score0.00377EPSS
SaveExploits1References4
OSV
OSV
added 2021/08/25 8:50 p.m.22 views

GHSA-J42V-6WPM-R847 Data races in thex

An issue was discovered in the thex crate through 2020-12-08 for Rust. Thex allows cross-thread data races of non-Send types...

5.5CVSS5.4AI score0.0031EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
added 2021/08/25 8:50 p.m.35 views

Data races in thex

An issue was discovered in the thex crate through 2020-12-08 for Rust. Thex allows cross-thread data races of non-Send types...

5.5CVSS5.6AI score0.0031EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2021/08/25 8:50 p.m.87 views

GHSA-4XJ5-VV9X-63JP Data races in concread

An issue was discovered in the concread crate before 0.2.6 for Rust. Attackers can cause an ARCache data race by sending types that do not implement Send/Sync...

4.7CVSS4.6AI score0.00242EPSS
SaveExploits1References4
Github Security Blog
Github Security Blog
added 2021/08/25 8:50 p.m.38 views

Data races in magnetic

Affected versions of this crate unconditionally implemented Sync and Send traits for MPMCConsumer and MPMCProducer types. This allows users to send types that do not implement Send trait across thread boundaries, which can cause a data race. The flaw was corrected in the 2.0.1 release by adding T...

5.5CVSS5.4AI score0.00377EPSS
SaveExploits1References4Affected Software1
OSV
OSV
added 2021/08/25 8:50 p.m.112 views

GHSA-WV4P-JP67-JR97 Data races in magnetic

Affected versions of this crate unconditionally implemented Sync and Send traits for MPMCConsumer and MPMCProducer types. This allows users to send types that do not implement Send trait across thread boundaries, which can cause a data race. The flaw was corrected in the 2.0.1 release by adding T...

5.5CVSS5.2AI score0.00377EPSS
SaveExploits1References4
Github Security Blog
Github Security Blog
added 2021/08/25 8:49 p.m.36 views

Data races in futures-intrusive

GenericMutexGuard was given the Sync auto trait as long as T is Send due to its contained members. However, since the guard is supposed to represent an acquired lock and allows concurrent access to the underlying data from different threads, it should only be Sync when the underlying data is. Thi...

5.5CVSS5.5AI score0.00374EPSS
SaveExploits1References4Affected Software1
OSV
OSV
added 2021/08/25 8:49 p.m.112 views

GHSA-4HJG-CX88-G9F9 Data races in futures-intrusive

GenericMutexGuard was given the Sync auto trait as long as T is Send due to its contained members. However, since the guard is supposed to represent an acquired lock and allows concurrent access to the underlying data from different threads, it should only be Sync when the underlying data is. Thi...

5.5CVSS5.3AI score0.00374EPSS
SaveExploits1References4
OSV
OSV
added 2021/08/25 8:49 p.m.69 views

GHSA-9CG2-2J2H-59V9 Data races in atom

The atom crate contains a security issue revolving around its implementation of the Send trait. It incorrectly allows any arbitrary type to be sent across threads potentially leading to use-after-free issues through memory races...

4.7CVSS4.8AI score0.00196EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2021/08/25 8:49 p.m.39 views

Data races in atom

The atom crate contains a security issue revolving around its implementation of the Send trait. It incorrectly allows any arbitrary type to be sent across threads potentially leading to use-after-free issues through memory races...

4.7CVSS5.4AI score0.00196EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2021/08/25 8:49 p.m.111 views

GHSA-C7FW-CR3W-WVFC Multiple security issues including data race, buffer overflow, and uninitialized memory drop in arr

arr crate contains multiple security issues. Specifically, 1. It incorrectly implements Sync/Send bounds, which allows to smuggle non-Sync/Send types across the thread boundary. 2. Index and IndexMut implementation does not check the array bound. 3. Array::newfromtemplate drops uninitialized memo...

4.7CVSS6.7AI score0.01515EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2021/08/25 8:48 p.m.33 views

Multiple security issues including data race, buffer overflow, and uninitialized memory drop in arr

arr crate contains multiple security issues. Specifically, 1. It incorrectly implements Sync/Send bounds, which allows to smuggle non-Sync/Send types across the thread boundary. 2. Index and IndexMut implementation does not check the array bound. 3. Array::newfromtemplate drops uninitialized memo...

9.8CVSS9AI score0.01476EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2021/08/25 8:48 p.m.63 views

GHSA-FHVJ-7F9P-W788 Multiple security issues including data race, buffer overflow, and uninitialized memory drop in arr

arr crate contains multiple security issues. Specifically, 1. It incorrectly implements Sync/Send bounds, which allows to smuggle non-Sync/Send types across the thread boundary. 2. Index and IndexMut implementation does not check the array bound. 3. Array::newfromtemplate drops uninitialized memo...

9.8CVSS6.7AI score0.01515EPSS
SaveExploits0References4
OSV
OSV
added 2021/08/25 8:48 p.m.114 views

GHSA-36XW-HGFV-JWM7 Multiple security issues including data race, buffer overflow, and uninitialized memory drop in arr

arr crate contains multiple security issues. Specifically, 1. It incorrectly implements Sync/Send bounds, which allows to smuggle non-Sync/Send types across the thread boundary. 2. Index and IndexMut implementation does not check the array bound. 3. Array::newfromtemplate drops uninitialized memo...

9.8CVSS6.7AI score0.01515EPSS
SaveExploits0References4
Rows per page
Query Builder