EUVD-2022-0570

Malicious code in bioql PyPI...

CVE-2021-45704

An issue was discovered in the metrics-util crate before 0.7.0 for Rust. There is a data race and memory corruption because AtomicBucket unconditionally implements the Send and Sync traits...

executors (>=0.9.0, <=0.10.0), metrics (0.9.1) +8 more potentially affected by unknown CVE via metrics-util (>=0.1.0, <=0.6.2)

metrics-util CARGO version =0.1.0, =0.9.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0-alpha.1, =0.3.0 - metricsprinter 0.1.0 Source cves: unknown CVE Source advisory: GHSA-3HXH-7JXM-59X4...

executors (>=0.9.0, <=0.10.0), metrics (0.9.1) +8 more potentially affected by CVE-2021-45704 via metrics-util (>=0.1.0, <=0.6.2)

metrics-util CARGO version =0.1.0, =0.9.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0-alpha.1, =0.3.0 - metricsprinter 0.1.0 Source cves: CVE-2021-45704 Source advisory: OSV:GHSA-3HXH-7JXM-59X4...

executors (>=0.9.0, <=0.10.0), metrics (0.9.1) +8 more potentially affected by CVE-2021-45704 via metrics-util (>=0.1.0, <=0.6.2)

metrics-util CARGO version =0.1.0, =0.9.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0-alpha.1, =0.3.0 - metricsprinter 0.1.0 Source cves: CVE-2021-45704 Source advisory: OSV:GHSA-CWVC-87XQ-PC5M...

executors (>=0.9.0, <=0.10.0), metrics (0.9.1) +8 more potentially affected by CVE-2021-45704 via metrics-util (>=0.1.0, <=0.6.2)

metrics-util CARGO version =0.1.0, =0.9.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0-alpha.1, =0.3.0 - metricsprinter 0.1.0 Source cves: CVE-2021-45704 Source advisory: GHSA-CWVC-87XQ-PC5M...

GHSA-CWVC-87XQ-PC5M Out-of-bounds Write and Race Condition in metrics-util

In the affected versions of the crate, AtomicBucket unconditionally implements Send/Sync traits. Therefore, users can create a data race to the inner T: !Sync by using the AtomicBucket::datawith API. Such data races can potentially cause memory corruption or other undefined behavior. The flaw was...

CVE-2021-45704

An issue was discovered in the metrics-util crate before 0.7.0 for Rust. There is a data race and memory corruption because AtomicBucket unconditionally implements the Send and Sync traits...

CVE-2021-45704

An issue was discovered in the metrics-util crate before 0.7.0 for Rust. There is a data race and memory corruption because AtomicBucket unconditionally implements the Send and Sync traits...

Rust buffer error vulnerability

Rust, a general-purpose, compiled programming language from the Mozilla Foundation, has a security vulnerability in versions prior to Rust metrics-util crate 0.7.0 that can be exploited by attackers to cause memory corruption...

CVE-2021-45704

CVE-2021-45704 affects the Rust metrics-util crate prior to 0.7.0. The issue is a data race and potential memory corruption caused by AtomicBucket unconditionally implementing Send/Sync, which allows concurrent access to inner data that may not be Sync. Public advisories (Red Hat, OSV, GitHub, CN...

CVE-2021-45704

An issue was discovered in the metrics-util crate before 0.7.0 for Rust. There is a data race and memory corruption because AtomicBucket unconditionally implements the Send and Sync traits...

CVE-2021-45704

An issue was discovered in the metrics-util crate before 0.7.0 for Rust. There is a data race and memory corruption because AtomicBucket unconditionally implements the Send and Sync traits...

CVE-2021-45704: Concurrent Execution using Shared Resource with Improper Synchronization

An issue was discovered in the metrics-util crate before 0.7.0 for Rust. There is a data race and memory corruption because AtomicBucket unconditionally implements the Send and Sync traits...

executors (>=0.9.0, <=0.10.0), metrics (0.9.1) +8 more potentially affected by CVE-2021-45704 via metrics-util (>=0.1.0, <=0.6.2)

metrics-util CARGO version =0.1.0, =0.9.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0-alpha.1, =0.3.0 - metricsprinter 0.1.0 Source cves: CVE-2021-45704 Source advisory: OSV:RUSTSEC-2021-0113...

PT-2021-24278

Name of the Vulnerable Software and Affected Versions: metrics-util crate versions prior to 0.7.0 Description: The issue is related to a data race and memory corruption in the AtomicBucket implementation. This occurs because AtomicBucket unconditionally implements the Send and Sync traits, allowi...