16 matches found
EUVD-2021-1560
Malware in sbrugna...
CVE-2020-35915
An issue was discovered in the futures-intrusive crate before 0.4.0 for Rust. GenericMutexGuard allows cross-thread data races of non-Sync types...
Data races in futures-intrusive
GenericMutexGuard was given the Sync auto trait as long as T is Send due to its contained members. However, since the guard is supposed to represent an acquired lock and allows concurrent access to the underlying data from different threads, it should only be Sync when the underlying data is. Thi...
futures-delay-queue (0.4.1), polymer (0.2.0) +4 more potentially affected by CVE-2020-35915 via futures-intrusive (>=0.2.2, <=0.3.1)
futures-intrusive CARGO version =0.2.2, =0.1.0, =0.1.2, =0.1.3-alpha.1 Source cves: CVE-2020-35915 Source advisory: GHSA-4HJG-CX88-G9F9...
futures-delay-queue (0.4.1), polymer (0.2.0) +4 more potentially affected by CVE-2020-35915 via futures-intrusive (>=0.2.2, <=0.3.1)
futures-intrusive CARGO version =0.2.2, =0.1.0, =0.1.2, =0.1.3-alpha.1 Source cves: CVE-2020-35915 Source advisory: OSV:GHSA-4HJG-CX88-G9F9...
GHSA-4HJG-CX88-G9F9 Data races in futures-intrusive
GenericMutexGuard was given the Sync auto trait as long as T is Send due to its contained members. However, since the guard is supposed to represent an acquired lock and allows concurrent access to the underlying data from different threads, it should only be Sync when the underlying data is. Thi...
Unspecified Vulnerability in Rust (CNVD-2021-39557)
Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A security vulnerability exists in Rust futures-intrusive crate versions prior to 0.4.0 that stems from GenericMutexGuard allowing unsynchronized types of cross-thread data contention. No details of the...
CVE-2020-35915
An issue was discovered in the futures-intrusive crate before 0.4.0 for Rust. GenericMutexGuard allows cross-thread data races of non-Sync types...
CVE-2020-35915
An issue was discovered in the futures-intrusive crate before 0.4.0 for Rust. GenericMutexGuard allows cross-thread data races of non-Sync types...
Cross site scripting
An issue was discovered in the futures-intrusive crate before 0.4.0 for Rust. GenericMutexGuard allows cross-thread data races of non-Sync types...
CVE-2020-35915
An issue was discovered in the futures-intrusive crate before 0.4.0 for Rust. GenericMutexGuard allows cross-thread data races of non-Sync types...
CVE-2020-35915
An issue was discovered in the futures-intrusive crate before 0.4.0 for Rust. GenericMutexGuard allows cross-thread data races of non-Sync types...
CVE-2020-35915: Undefined Security Weakness
An issue was discovered in the futures-intrusive crate before 0.4.0 for Rust. GenericMutexGuard allows cross-thread data races of non-Sync types...
Rust security vulnerabilities
Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A security vulnerability exists in Rust futures-intrusive crate versions prior to 0.4.0 that stems from GenericMutexGuard allowing unsynchronized types of cross-thread data contention. No details of the...
futures-delay-queue (0.4.1), polymer (0.2.0) +4 more potentially affected by CVE-2020-35915 via futures-intrusive (>=0.2.2, <=0.3.1)
futures-intrusive CARGO version =0.2.2, =0.1.0, =0.1.2, =0.1.3-alpha.1 Source cves: CVE-2020-35915 Source advisory: OSV:RUSTSEC-2020-0072...
PT-2020-17547
Name of the Vulnerable Software and Affected Versions futures-intrusive crate versions prior to 0.4.0 Description An issue in the futures-intrusive crate allows cross-thread data races of non-Sync types due to the GenericMutexGuard being given the Sync auto trait as long as the type T is Send. Th...