CVE-2020-36441

CVE-2020-36441 affects the Rust crate abox (pre-0.4.1). AtomicBox is marked Send/Sync without requiring T: Send and T: Sync, which can undermine thread-safety guarantees and enable data races if T is not Send/Sync. Public disclosures and security records (e.g., RUSTSEC-2020-0121, GHSA data race e...

CVE-2020-36441

An issue was discovered in the abox crate before 0.4.1 for Rust. It implements Send and Sync for AtomicBox with no requirement for T: Send and T: Sync...

CVE-2020-36442

The CVE-2020-36442 issue concerns the beef crate for Rust (pre-0.5.0) where beef::Cow lacked a Sync bound on its Send trait. This omission enables data races by allowing Cow to hold non-Sync types (e.g., Cell/RefCell) inside, potentially leading to memory corruption. Several connected sources cor...

CVE-2020-36442

An issue was discovered in the beef crate before 0.5.0 for Rust. beef::Cow has no Sync bound on its Send trait...

CVE-2020-36443

CVE-2020-36443 affects the libp2p-deflate crate prior to 0.27.1 for Rust. Root cause: an uninitialized buffer is passed to AsyncRead::poll_read(), invoked by a user-provided trait implementation. Impact: potential memory exposure from uninitialized memory; CVSS v3.1 base score 9.8 (CRITICAL), net...

CVE-2020-36443

An issue was discovered in the libp2p-deflate crate before 0.27.1 for Rust. An uninitialized buffer is passed to AsyncRead::pollread, which is a user-provided trait function...

CVE-2020-36444

Summary (CVE-2020-36444) : The issue affects the Rust crate async-coap (through 2020-12-08). The Send/Sync implementations for ArcGuard are defined without trait bounds on RC. This enables scenarios where RC may be non-Send or non-Sync to be sent across threads, and allows concurrent access to RC...

CVE-2020-36444

An issue was discovered in the async-coap crate through 2020-12-08 for Rust. Send and Sync are implemented for ArcGuard without trait bounds on RC...

CVE-2020-36445

The CVE-2020-36445 issue affects the Rust crate convec, where ConVec provides unconditional Send/Sync implementations through 2020-11-24. Root cause: ConVec exposes Send and Sync for all T, enabling insertion of non-Send or non-Sync types (e.g., Arc<Cell> or Rc) and creating data races. Imp...

CVE-2020-36445

An issue was discovered in the convec crate through 2020-11-24 for Rust. There are unconditional implementations of Send and Sync for ConVec...

CVE-2020-36446

CVE-2020-36446 affects the signal-simple crate for Rust. The root cause is that SyncChannel is implemented as Send and Sync unconditionally, which allows moving or sharing owned T across threads. This can enable unsafe behavior when T is not Send, potentially causing data races and memory corrupt...

CVE-2020-36447

The CVE-2020-36447 entry concerns the Rust v9 crate (through 2020-12-18) where SyncRef unconditionally implements Sync. This authoritative detail is repeatedly reflected across multiple connected records (NVD, Red Hat, GHSA, OSV, CNVD, etc.). The underlying issue is that SyncRef derives Clone and...

CVE-2020-36447

An issue was discovered in the v9 crate through 2020-12-18 for Rust. There is an unconditional implementation of Sync for SyncRef...

CVE-2020-36448

The CVE-2020-36448 entry concerns the Rust cache crate, where unconditional implementations of Send/Sync for Cache allow non-Send or non-Sync K types to be used. The root cause is that Cache exposes Send/Sync without requiring K to implement these traits, enabling potential data races when non-Se...

CVE-2020-36448

An issue was discovered in the cache crate through 2020-11-24 for Rust. There are unconditional implementations of Send and Sync for Cache...

CVE-2020-36449

An issue was discovered in the kekbit crate before 0.3.4 for Rust. For ShmWriter, Send is implemented without requiring H: Send...

CVE-2020-36449

CVE-2020-36449 (kekbit crate): Affects Rust crate kekbit before 0.3.4. The Send implementation for ShmWriter does not require H: Send, allowing non-Send types to be sent across threads. This can lead to data races and undefined behavior. Exploitation status is not detailed in the provided documen...

CVE-2020-36450

The CVE-2020-36450 issue affects the Rust crate payload “bunch” (through 2020-11-12) where Bunch unconditionally implements Send and Sync. This design allows inserting T values that are not Send/Sync (e.g., T: !Send, T: !Sync) and using Bunch across threads (for example via Bunch::get() returning...

CVE-2020-36450

An issue was discovered in the bunch crate through 2020-11-12 for Rust. There are unconditional implementations of Send and Sync for Bunch...

CVE-2020-36451

An issue was discovered in the rcucell crate through 2020-11-14 for Rust. There are unconditional implementations of Send and Sync for RcuCell...