Lucene search
+L

684 matches found

Github Security Blog
Github Security Blog
added 2021/08/25 8:59 p.m.16 views

MvccRwLock allows data races & aliasing violations

Affected versions of the noisesearch crate unconditionally implement Send/Sync for MvccRwLock. This can lead to data races when types that are either !Send or !Sync e.g. Rc, Arc are contained inside MvccRwLock and sent across thread boundaries. The data races can potentially lead to memory...

3AI score
SaveExploits0References3Affected Software1
OSV
OSV
added 2021/08/25 8:59 p.m.49 views

GHSA-JF43-3V8J-QWWR Data races in multiqueue

Affected versions of multiqueue unconditionally implemented Send for types used in queue implementations InnerSend, InnerRecv, FutInnerSend, FutInnerRecv. This allows users to send non-Send types to other threads, which can lead to data race bugs or other undefined behavior...

8.1CVSS5.9AI score0.01098EPSS
SaveExploits1References3
Github Security Blog
Github Security Blog
added 2021/08/25 8:59 p.m.17 views

Data races in multiqueue

Affected versions of multiqueue unconditionally implemented Send for types used in queue implementations InnerSend, InnerRecv, FutInnerSend, FutInnerRecv. This allows users to send non-Send types to other threads, which can lead to data race bugs or other undefined behavior...

6.8AI score
SaveExploits0References3Affected Software1
Github Security Blog
Github Security Blog
added 2021/08/25 8:59 p.m.15 views

Data races in model

Shared data structure in model crate implements Send and Sync traits regardless of the inner type. This allows safe Rust code to trigger a data race, which is undefined behavior in Rust. Users are advised to treat Shared as an unsafe type. It should not be used outside of the testing context, and...

1.5AI score
SaveExploits0References3Affected Software1
OSV
OSV
added 2021/08/25 8:59 p.m.49 views

GHSA-RMFF-F8W9-C9RM Data races in max7301

The ImmediateIO and TransactionalIO types implement Sync for all contained Expander types regardless of if the Expander itself is safe to use across threads. As the IO types allow retrieving the Expander, this can lead to non-thread safe types being sent across threads as part of the Expander...

5.9CVSS5.6AI score0.00978EPSS
SaveExploits1References5
Github Security Blog
Github Security Blog
added 2021/08/25 8:59 p.m.23 views

Data races in max7301

The ImmediateIO and TransactionalIO types implement Sync for all contained Expander types regardless of if the Expander itself is safe to use across threads. As the IO types allow retrieving the Expander, this can lead to non-thread safe types being sent across threads as part of the Expander...

5.9CVSS5.8AI score0.00978EPSS
SaveExploits1References5Affected Software1
Github Security Blog
Github Security Blog
added 2021/08/25 8:59 p.m.41 views

Data races in bunch

An issue was discovered in the bunch crate through 2020-11-12 for Rust. Affected versions of this crate unconditionally implements Send/Sync for Bunch. This allows users to insert T: !Sync to Bunch. It is possible to create a data race to a T: !Sync by invoking the Bunch::get API which returns &T...

8.1CVSS7.7AI score0.01249EPSS
SaveExploits1References5Affected Software1
OSV
OSV
added 2021/08/25 8:59 p.m.6 views

GHSA-JWPH-QP5H-F9WJ Data races in bunch

An issue was discovered in the bunch crate through 2020-11-12 for Rust. Affected versions of this crate unconditionally implements Send/Sync for Bunch. This allows users to insert T: !Sync to Bunch. It is possible to create a data race to a T: !Sync by invoking the Bunch::get API which returns &T...

8.1CVSS7.1AI score0.01249EPSS
SaveExploits1References5
OSV
OSV
added 2021/08/25 8:59 p.m.37 views

GHSA-RPXM-VMR7-5F5F Data races in convec

Affected versions of this crate unconditionally implement Send/Sync for ConVec. This allows users to insert T that is not Send or not Sync. This allows users to create data races by using non-Send types like Arc or Rc as T in ConVec. It is also possible to create data races by using types like Ce...

8.1CVSS7.9AI score0.00766EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2021/08/25 8:59 p.m.26 views

Data races in convec

Affected versions of this crate unconditionally implement Send/Sync for ConVec. This allows users to insert T that is not Send or not Sync. This allows users to create data races by using non-Send types like Arc or Rc as T in ConVec. It is also possible to create data races by using types like Ce...

8.1CVSS7.7AI score0.00766EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2021/08/25 8:59 p.m.40 views

GHSA-36CG-4JFF-5863 Data races in signal-simple

Affected versions of this crate unconditionally implement Send/Sync for SyncChannel. SyncChannel doesn't provide access to &T but merely serves as a channel that consumes and returns owned T. Users can create UB in safe Rust by sending T: !Send to other threads with SyncChannel::send/recv APIs...

8.1CVSS5.9AI score0.00766EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
added 2021/08/25 8:59 p.m.32 views

Data races in signal-simple

Affected versions of this crate unconditionally implement Send/Sync for SyncChannel. SyncChannel doesn't provide access to &T but merely serves as a channel that consumes and returns owned T. Users can create UB in safe Rust by sending T: !Send to other threads with SyncChannel::send/recv APIs...

8.1CVSS7.7AI score0.00766EPSS
SaveExploits0References5Affected Software1
Github Security Blog
Github Security Blog
added 2021/08/25 8:59 p.m.33 views

Data races in async-coap

An issue was discovered in the async-coap crate through 2020-12-08 for Rust. Affected versions of this crate implement Send/Sync for ArcGuard with no trait bounds on RC. This allows users to send RC: !Send to other threads and also allows users to concurrently access Rc: !Sync from multiple...

8.1CVSS8AI score0.00766EPSS
SaveExploits0References5Affected Software1
OSV
OSV
added 2021/08/25 8:59 p.m.82 views

GHSA-M7W4-8WP8-M2XQ Data races in beef

An issue was discovered in the beef crate before 0.5.0 for Rust. Affected versions of this crate did not have a T: Sync bound in the Send impl for Cow. This allows users to create data races by making Cow contain types that are Send && !Sync like Cell or RefCell. Such data races can lead to memor...

8.1CVSS7.9AI score0.00766EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
added 2021/08/25 8:59 p.m.38 views

Data races in beef

An issue was discovered in the beef crate before 0.5.0 for Rust. Affected versions of this crate did not have a T: Sync bound in the Send impl for Cow. This allows users to create data races by making Cow contain types that are Send && !Sync like Cell or RefCell. Such data races can lead to memor...

8.1CVSS7.7AI score0.00766EPSS
SaveExploits0References5Affected Software1
OSV
OSV
added 2021/08/25 8:59 p.m.44 views

GHSA-F6G6-54HM-FHXV Data races in libsbc

Affected versions of this crate implements Send for Decoder for any R: Read. This allows Decoder to contain R: !Send and carry move it to another thread. This can result in undefined behavior such as memory corruption from data race on R, or dropping R = MutexGuard from a thread that didn't lock...

8.1CVSS8.1AI score0.00766EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
added 2021/08/25 8:59 p.m.32 views

Data races in libsbc

Affected versions of this crate implements Send for Decoder for any R: Read. This allows Decoder to contain R: !Send and carry move it to another thread. This can result in undefined behavior such as memory corruption from data race on R, or dropping R = MutexGuard from a thread that didn't lock...

8.1CVSS7.9AI score0.00766EPSS
SaveExploits0References5Affected Software1
OSV
OSV
added 2021/08/25 8:58 p.m.53 views

GHSA-77M6-X95J-75R5 Data races in ticketed_lock

Affected versions of this crate unconditionally implemented Send for ReadTicket & WriteTicket. This allows to send non-Send T to other threads. This can allows creating data races by cloning types with internal mutability and sending them to other threads as T of ReadTicket/WriteTicket. Such data...

8.1CVSS8.1AI score0.00766EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
added 2021/08/25 8:58 p.m.42 views

Data races in ticketed_lock

Affected versions of this crate unconditionally implemented Send for ReadTicket & WriteTicket. This allows to send non-Send T to other threads. This can allows creating data races by cloning types with internal mutability and sending them to other threads as T of ReadTicket/WriteTicket. Such data...

8.1CVSS7.9AI score0.00766EPSS
SaveExploits0References6Affected Software1
Github Security Blog
Github Security Blog
added 2021/08/25 8:58 p.m.37 views

Data race in tiny_future

tinyfuture contains a light-weight implementation of Futures. The Future type it has lacked bound on its Send and Sync traits. This allows for a bug where non-thread safe types such as Cell can be used in Futures and cause data races in concurrent programs. The flaw was corrected in commit c79191...

8.1CVSS7.7AI score0.00766EPSS
SaveExploits0References6Affected Software1
Rows per page
Query Builder