EUVD-2022-0570

Malicious code in bioql PyPI...

CVE-2021-45704

An issue was discovered in the metrics-util crate before 0.7.0 for Rust. There is a data race and memory corruption because AtomicBucket unconditionally implements the Send and Sync traits...

actix_web_metrics_mw (>=0.0.1, <=0.3.1), capsule (>=0.1.1, <=0.1.5) +32 more potentially affected by CVE-2021-45704 via metrics-util (>=0.1.0, <=0.6.2)

metrics-util CARGO version =0.1.0, =0.0.1, =0.1.1, =0.37.0-pre, =0.2.0, =0.9.0, =0.1.0, =0.5.0, =0.9.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0, =0.1.1 and more Source cves: CVE-2021-45704 Source advisory: OSV:GHSA-3HXH-7JXM-59X4...

actix_web_metrics_mw (>=0.0.1, <=0.3.1), capsule (>=0.1.1, <=0.1.5) +32 more potentially affected by CVE-2021-45704 via metrics-util (>=0.1.0, <=0.6.2)

metrics-util CARGO version =0.1.0, =0.0.1, =0.1.1, =0.37.0-pre, =0.2.0, =0.9.0, =0.1.0, =0.5.0, =0.9.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0, =0.1.1 and more Source cves: CVE-2021-45704 Source advisory: OSV:GHSA-CWVC-87XQ-PC5M...

GHSA-CWVC-87XQ-PC5M Out-of-bounds Write and Race Condition in metrics-util

In the affected versions of the crate, AtomicBucket unconditionally implements Send/Sync traits. Therefore, users can create a data race to the inner T: !Sync by using the AtomicBucket::datawith API. Such data races can potentially cause memory corruption or other undefined behavior. The flaw was...

CVE-2021-45704

An issue was discovered in the metrics-util crate before 0.7.0 for Rust. There is a data race and memory corruption because AtomicBucket unconditionally implements the Send and Sync traits...

CVE-2021-45704

An issue was discovered in the metrics-util crate before 0.7.0 for Rust. There is a data race and memory corruption because AtomicBucket unconditionally implements the Send and Sync traits...

Rust 缓冲区错误漏洞

Rust, a general-purpose, compiled programming language from the Mozilla Foundation, has a security vulnerability in versions prior to Rust metrics-util crate 0.7.0 that can be exploited by attackers to cause memory corruption...

CVE-2021-45704

An issue was discovered in the metrics-util crate before 0.7.0 for Rust. There is a data race and memory corruption because AtomicBucket unconditionally implements the Send and Sync traits...

CVE-2021-45704

CVE-2021-45704 affects the Rust metrics-util crate prior to 0.7.0. The issue is a data race and potential memory corruption caused by AtomicBucket unconditionally implementing Send/Sync, which allows concurrent access to inner data that may not be Sync. Public advisories (Red Hat, OSV, GitHub, CN...

actix_web_metrics_mw (>=0.0.1, <=0.3.1), capsule (>=0.1.1, <=0.1.5) +32 more potentially affected by CVE-2021-45704 via metrics-util (>=0.1.0, <=0.6.2)

metrics-util CARGO version =0.1.0, =0.0.1, =0.1.1, =0.37.0-pre, =0.2.0, =0.9.0, =0.1.0, =0.5.0, =0.9.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0, =0.1.1 and more Source cves: CVE-2021-45704 Source advisory: OSV:RUSTSEC-2021-0113...