CVE-2020-36462

An issue was discovered in the syncpool crate before 0.1.6 for Rust. There is an unconditional implementation of Send for Bucket2...

CVE-2020-36462

CVE-2020-36462 concerns the Rust crate syncpool (pre-0.1.6) where Bucket2 unconditionally implements Send, allowing non-Send types (e.g., Cell, Rc) to be sent across threads. This enables data races and potential memory corruption. The fix adds a T: Send bound to the Send implementation (commit 1...