Lucene search
+L

86 matches found

RustSec
RustSec
•added 2020/11/17 12:00 p.m.•34 views

Slock<T> allows sending non-Send types across thread boundaries

Slock unconditionally implements Send/Sync. Affected versions of this crate allows sending non-Send types to other threads, which can lead to data races and memory corruption due to the data race...

8.1CVSS5AI score0.01311EPSS
SaveExploits1Affected Software1
RustSec
RustSec
•added 2020/11/17 12:00 p.m.•37 views

TryMutex<T> allows sending non-Send type across threads

Affected versions of this crate unconditionally implemented Sync trait for TryMutex type. This allows users to put non-Send T type in TryMutex and send it to another thread, which can cause a data race. The flaw was corrected in the 0.3.0 release by adding T: Send bound for the Sync trait...

5.5CVSS4.1AI score0.00382EPSS
SaveExploits1Affected Software1
Positive Technologies
Positive Technologies
•added 2020/11/17 12:00 a.m.•1 views

PT-2020-17556

Name of the Vulnerable Software and Affected Versions try-mutex crate versions prior to 0.3.0 Description An issue in the try-mutex crate allows cross-thread sending of a non-Send type, which can cause a data race. This occurs because affected versions of the crate unconditionally implemented the...

5.5CVSS0.00382EPSS
SaveExploits1References8
OSV
OSV
•added 2020/11/16 12:00 p.m.•34 views

RUSTSEC-2020-0151 Generators can cause data races if non-Send types are used in their generator functions

The Generator type is an iterable which uses a generator function that yields values. In affected versions of the crate, the provided function yielding values had no Send bounds despite the Generator itself implementing Send. The generator function lacking a Send bound means that types that are...

5.9CVSS5.4AI score0.01094EPSS
SaveExploits1References3
OSV
OSV
•added 2020/11/10 12:00 p.m.•59 views

RUSTSEC-2020-0137 AtomicBox<T> lacks bound on its Send and Sync traits allowing data races

AtomicBox is a Box type designed to be used across threads, however, it implements the Send and Sync traits for all types T. This allows non-Send types such as Rc and non-Sync types such as Cell to be used across thread boundaries which can trigger undefined behavior and memory corruption...

8.1CVSS7.9AI score0.0124EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2020/11/10 12:00 a.m.•15 views

PT-2020-17638 · Rust · Lever

Name of the Vulnerable Software and Affected Versions: lever crate versions prior to 0.1.1 Description: The issue concerns the implementation of the Send and Sync traits for all types T by AtomicBox, which is designed for use across threads. This implementation allows non-Send types, such as Rc,...

8.1CVSS7.9AI score0.0124EPSS
SaveExploits1References10
Rows per page
Query Builder