CVE-2020-36456

The CVE-2020-36456 entry concerns the Rust crate toolshed, specifically the CopyCell type. The root cause is that the Send trait for CopyCell lacks bounds on the contained type, enabling potential data races when sending CopyCell across threads. Documented impact includes data race conditions due...

CVE-2020-36456

An issue was discovered in the toolshed crate through 2020-11-15 for Rust. In CopyCell, the Send trait lacks bounds on the contained type...

CVE-2020-36457

An issue was discovered in the lever crate before 0.1.1 for Rust. AtomicBox implements the Send and Sync traits for all types T...

CVE-2020-36457

CVE-2020-36457 affects the lever crate for Rust, specifically versions before 0.1.1. The root cause is that an internal type, AtomicBox, implements Send and Sync for all types T, which enables non-Send types (e.g., Rc) and non-Sync types (e.g., Cell) to be used across thread boundaries. This can ...

CVE-2020-36458

An issue was discovered in the lexer crate through 2020-11-10 for Rust. For ReaderResult, there is an implementation of Sync with a trait bound of T: Send, E: Send...

CVE-2020-36458

The CVE-2020-36458 issue concerns the Rust lexer crate, where ReaderResult has a Sync implementation bounded by T: Send, E: Send. This mis-bounding can allow a non-Sync T or E to be accessed across threads via &T or &E, creating a potential data race and memory corruption. Affected component: lex...

CVE-2020-36459

An issue was discovered in the dces crate through 2020-12-09 for Rust. The World type is marked as Send but lacks bounds on its EntityStore and ComponentStore...

CVE-2020-36459

The CVE-2020-36459 issue affects the Rust crate dces (World type) where World is marked as Send but lacks bounds on its EntityStore and ComponentStore . This can allow non-thread-safe stores to be sent across threads, potentially causing data races. Documented in multiple sources (e.g., RustSec a...

CVE-2020-36460

CVE-2020-36460 affects the Rust model crate: the Shared data structure implements Send and Sync regardless of the inner type, potentially enabling data races in safe Rust. Covered in multiple sources (NVD/RUSTSEC/RH Red Hat) with references to a contention issue; no explicit patch/version remedia...

CVE-2020-36460

An issue was discovered in the model crate through 2020-11-10 for Rust. The Shared data structure has an implementation of the Send and Sync traits without regard for the inner type...

CVE-2020-36461

An issue was discovered in the noisesearch crate through 2020-12-10 for Rust. There are unconditional implementations of Send and Sync for MvccRwLock...

CVE-2020-36462

CVE-2020-36462 concerns the Rust crate syncpool (pre-0.1.6) where Bucket2 unconditionally implements Send, allowing non-Send types (e.g., Cell, Rc) to be sent across threads. This enables data races and potential memory corruption. The fix adds a T: Send bound to the Send implementation (commit 1...

CVE-2020-36462

An issue was discovered in the syncpool crate before 0.1.6 for Rust. There is an unconditional implementation of Send for Bucket2...

CVE-2020-36463

An issue was discovered in the multiqueue crate through 2020-12-25 for Rust. There are unconditional implementations of Send for InnerSend, InnerRecv, FutInnerSend, and FutInnerRecv...

CVE-2020-36464

CVE-2020-36464 affects the Rust crate heapless (versions before 0.6.1). The vulnerability lies in the IntoIter Clone implementation, which clones the entire underlying Vec without considering whether it has already been partially consumed. The impact is not explicitly detailed in the provided doc...

CVE-2020-36465

The CVE-2020-36465 issue affects the Rust generic-array crate before 0.13.3. The root cause is a soundness problem caused by using the arr! macro to extend lifetimes. This aligns with multiple sources describing a memory-safety/soundness vulnerability in generic-array (pre-0.13.3). The connected ...

CVE-2020-36466

An issue was discovered in the cgc crate through 2020-12-10 for Rust. Ptr implements Send and Sync for all types...

CVE-2020-36466

CVE-2020-36466 affects the Rust crate cgc (Ptr type) with multiple soundness issues. The Ptr type implements Send and Sync for all types, enabling potential data races by sending non-thread-safe data across threads. In addition, Ptr::get violates mutable aliasing rules by returning multiple mutab...

CVE-2020-36467

An issue was discovered in the cgc crate through 2020-12-10 for Rust. Ptr::get returns more than one mutable reference to the same object...

CVE-2020-36467

The CVE-2020-36467 entry concerns the Rust crate cgc . The root cause is that Ptr::get returns multiple mutable references to the same object, violating alias rules. Multiple connected sources describe this issue and note potential data races when the crate is used across threads. The records ref...