3050 matches found
a2 (>=0.2.0, <=0.5.0-alpha.7), a2d (>=0.1.0, <=0.1.11) +5218 more potentially affected by CVE-2020-35910 +4 more via lock_api (>=0.1.5, <=0.3.4)
lockapi CARGO version =0.1.5, =0.2.0, =0.1.0, =0.5.3, =0.1.0, =0.2.1, =0.1.1, =0.0.1, =0.0.1, =0.1.0, =0.1.0, =0.1.0, =0.9.1 and more Source cves: CVE-2020-35910, CVE-2020-35911, CVE-2020-35912, CVE-2020-35913, CVE-2020-35914 Source advisory: OSV:GHSA-PPJ3-7JW3-8VC4...
Rust 缓冲区错误漏洞
Rust is a general-purpose, compiled programming language from the Mozilla Foundation. Mozilla Rust is vulnerable to a buffer overflow vulnerability, which can be exploited by attackers to unlock a mutex lock from an unlocked thread, leading to memory corruption...
SUSE-SU-2021:2480-1 Security update for glibc
This update for glibc fixes the following issues: Security issues fixed: - CVE-2021-35942: wordexp: Fixed handle overflow in positional parameter number bsc1187911 - CVE-2016-10228: Rewrite iconv option parsing bsc1027496 Other fixes: - Fixed race in pthreadmutexlock while promoting to...
PT-2024-11284 · Linux +2 · Linux Kernel +2
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: There is a time-of-check-to-time-of-use error in drm getunique due to retrieving file priv-master prior to locking the device's master mutex. This error can cause a use-after-free read...
PT-2021-8256 · Linux +1 · Linux Kernel +1
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a deadlock in AP/VLAN handling. When AP VLAN interfaces are up and the AP interface they belong to is closed, a deadlock occurs because the wiphy mutex is held...
kernel: Use after free via PI futex state
A flaw was found in the Linux kernel. A use-after-free memory flaw in the Fast Userspace Mutexes functionality allowing a local user to crash the system or escalate their privileges on the system. The highest threat from this vulnerability is to data confidentiality and integrity as well as syste...
DEBIAN-CVE-2017-20004
In the standard library in Rust before 1.19.0, there is a synchronization problem in the MutexGuard object. MutexGuards can be used across threads with any types, allowing for memory safety issues through race conditions...
UBUNTU-CVE-2017-20004
In the standard library in Rust before 1.19.0, there is a synchronization problem in the MutexGuard object. MutexGuards can be used across threads with any types, allowing for memory safety issues through race conditions...
Mozilla Rust 竞争条件问题漏洞
Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A contention condition issue vulnerability exists in the standard library in versions of Rust prior to 1.19.0, which stems from a synchronization issue with MutexGuard objects that allows memory safety issues to...
SUSE-SU-2021:1029-1 Security update for gssproxy
This update for gssproxy fixes the following issues: - CVE-2020-12658: Fixed an issue where gssproxy was not unlocking condmutex before pthread exit in gpworkermain bsc1180515...
PT-2024-11146 · Linux +2 · Linux Kernel +2
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the crypto: qat module in the Linux kernel, where the ADF STATUS PF RUNNING flag is set after adf dev init. However, the vf2pf lock is initialized in adf dev...
OESA-2021-1037 gssproxy security update
This is a proxy for GSSAPI which deals with credential handling.\r\n\r\n Security Fixes:\r\n\r\n DISPUTED gssproxy aka gss-proxy before 0.8.3 does not unlock condmutex before pthread exit in gpworkermain in gpworkers.c. NOTE: An upstream comment states "We are already on a shutdown path when...
CVE-2020-11148
Use after free issue in HIDL while using callback to post event in Rx thread when internal mutex is not acquired and meantime close is triggered and callback instance is deleted in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT,...
Design/Logic Flaw
Use after free issue in HIDL while using callback to post event in Rx thread when internal mutex is not acquired and meantime close is triggered and callback instance is deleted in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT,...
CVE-2020-11148: Use After Free
Use after free issue in HIDL while using callback to post event in Rx thread when internal mutex is not acquired and meantime close is triggered and callback instance is deleted in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT,...
Rust buffer overflow vulnerability (CNVD-2021-37536)
Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A buffer overflow vulnerability exists in try-mutex crate for Rust versions prior to 0.3.0, which stems from TryMutex allowing cross-threaded sends of non-sending types. No details of the vulnerability are...
CVE-2020-35924
An issue was discovered in the try-mutex crate before 0.3.0 for Rust. TryMutex allows cross-thread sending of a non-Send type...
CVE-2020-35915
An issue was discovered in the futures-intrusive crate before 0.4.0 for Rust. GenericMutexGuard allows cross-thread data races of non-Sync types...