Lucene search
+L

977 matches found

RustSec
RustSec
added 2020/12/18 12:00 p.m.29 views

UsbContext trait did not require implementers to be Send and Sync.

Affected versions of rusb did not require UsbContext to implement Send and Sync. However, through Device and DeviceHandle it is possible to use UsbContexts across threads. This issue allows non-thread safe UsbContext types to be used concurrently leading to data races and memory corruption. The...

7CVSS3.4AI score0.00285EPSS
SaveExploits0Affected Software1
RustSec
RustSec
added 2020/12/18 12:00 p.m.29 views

ImmediateIO and TransactionalIO can cause data races

The ImmediateIO and TransactionalIO types implement Sync for all contained Expander types regardless of if the Expander itself is safe to use across threads. As the IO types allow retrieving the Expander, this can lead to non-thread safe types being sent across threads as part of the Expander...

5.9CVSS3.7AI score0.00978EPSS
SaveExploits1Affected Software1
OSV
OSV
added 2020/12/18 12:00 p.m.29 views

RUSTSEC-2020-0098 UsbContext trait did not require implementers to be Send and Sync.

Affected versions of rusb did not require UsbContext to implement Send and Sync. However, through Device and DeviceHandle it is possible to use UsbContexts across threads. This issue allows non-thread safe UsbContext types to be used concurrently leading to data races and memory corruption. The...

7CVSS6.7AI score0.00285EPSS
SaveExploits0References3
RustSec
RustSec
added 2020/12/17 12:00 p.m.23 views

RingBuffer can create multiple mutable references and cause data races

The RingBuffer type retrieves mutable references from the DataProvider in a non-atomic manner, potentially allowing the creation of multiple mutable references. RingBuffer also implements the Send and Sync traits for all types T. This allows undefined behavior from the aliased mutable references ...

5.9CVSS3.3AI score0.00978EPSS
SaveExploits1Affected Software1
OSV
OSV
added 2020/12/17 12:00 p.m.39 views

RUSTSEC-2020-0150 RingBuffer can create multiple mutable references and cause data races

The RingBuffer type retrieves mutable references from the DataProvider in a non-atomic manner, potentially allowing the creation of multiple mutable references. RingBuffer also implements the Send and Sync traits for all types T. This allows undefined behavior from the aliased mutable references ...

5.9CVSS5.7AI score0.00978EPSS
SaveExploits1References3
RustSec
RustSec
added 2020/12/10 12:00 p.m.38 views

Aovec<T> lacks bound on its Send and Sync traits allowing data races

aovec::Aovec is a vector type that implements Send and Sync for all types T. This allows non-Send types such as Rc and non-Sync types such as Cell to be used across thread boundaries which can trigger undefined behavior and memory corruption...

7CVSS2.7AI score0.00285EPSS
SaveExploits0
OSV
OSV
added 2020/12/10 12:00 p.m.23 views

RUSTSEC-2020-0148 Multiple soundness issues in `Ptr`

Affected versions of this crate have the following issues: 1. Ptr implements Send and Sync for all types, this can lead to data races by sending non-thread safe types across threads. 2. Ptr::get violates mutable alias rules by returning multiple mutable references to the same object. 3. Ptr::writ...

5.9CVSS5.5AI score0.00978EPSS
SaveExploits3References3
RustSec
RustSec
added 2020/12/10 12:00 p.m.22 views

Multiple soundness issues in `Ptr`

Affected versions of this crate have the following issues: 1. Ptr implements Send and Sync for all types, this can lead to data races by sending non-thread safe types across threads. 2. Ptr::get violates mutable alias rules by returning multiple mutable references to the same object. 3. Ptr::writ...

5.9CVSS2AI score0.00978EPSS
SaveExploits2
OSV
OSV
added 2020/12/10 12:00 p.m.34 views

RUSTSEC-2020-0099 Aovec<T> lacks bound on its Send and Sync traits allowing data races

aovec::Aovec is a vector type that implements Send and Sync for all types T. This allows non-Send types such as Rc and non-Sync types such as Cell to be used across thread boundaries which can trigger undefined behavior and memory corruption...

7CVSS6.8AI score0.00285EPSS
SaveExploits0References2
RustSec
RustSec
added 2020/12/10 12:00 p.m.22 views

MvccRwLock allows data races & aliasing violations

Affected versions of this crate unconditionally implement Send/Sync for MvccRwLock. This can lead to data races when types that are either !Send or !Sync e.g. Rc, Arc are contained inside MvccRwLock and sent across thread boundaries. The data races can potentially lead to memory corruption as...

8.1CVSS3AI score0.0124EPSS
SaveExploits1
OSV
OSV
added 2020/12/10 12:00 p.m.32 views

RUSTSEC-2020-0141 MvccRwLock allows data races & aliasing violations

Affected versions of this crate unconditionally implement Send/Sync for MvccRwLock. This can lead to data races when types that are either !Send or !Sync e.g. Rc, Arc are contained inside MvccRwLock and sent across thread boundaries. The data races can potentially lead to memory corruption as...

8.1CVSS8.2AI score0.0124EPSS
SaveExploits1References3
OSV
OSV
added 2020/12/09 12:00 p.m.33 views

RUSTSEC-2020-0139 dces' World type can cause data races

The World type in dces is marked as Send without bounds on its EntityStore and ComponentStore. This allows non-thread safe EntityStore and ComponentStores to be sent across threads and cause data races...

8.1CVSS7.9AI score0.01098EPSS
SaveExploits1References3
RustSec
RustSec
added 2020/12/09 12:00 p.m.21 views

dces' World type can cause data races

The World type in dces is marked as Send without bounds on its EntityStore and ComponentStore. This allows non-thread safe EntityStore and ComponentStores to be sent across threads and cause data races...

8.1CVSS3AI score0.01098EPSS
SaveExploits1
RustSec
RustSec
added 2020/12/08 12:00 p.m.33 views

Thex<T> allows data races of non-Send types across threads

thex::Thex implements Sync for all types T. However, it is missing a bound for T: Send. This allows non-Send types such as Rc to be sent across thread boundaries which can trigger undefined behavior and memory corruption...

5.5CVSS2.2AI score0.0031EPSS
SaveExploits0
OSV
OSV
added 2020/12/08 12:00 p.m.39 views

RUSTSEC-2020-0118 Future<T> lacks bounds on Send and Sync.

tinyfuture contains a light-weight implementation of Futures. The Future type it has lacked bound on its Send and Sync traits. This allows for a bug where non-thread safe types such as Cell can be used in Futures and cause data races in concurrent programs. The flaw was corrected in commit c79191...

8.1CVSS7.9AI score0.00766EPSS
SaveExploits0References3
OSV
OSV
added 2020/12/08 12:00 p.m.29 views

RUSTSEC-2020-0104 ImageChunkMut needs bounds on its Send and Sync traits

In the affected versions of this crate, ImageChunkMut unconditionally implements Send and Sync, allowing to create data races. This can result in a memory corruption or undefined behavior when non thread-safe types are moved and referenced across thread boundaries. The flaw was corrected in commi...

7CVSS6.9AI score0.00344EPSS
SaveExploits1References3
RustSec
RustSec
added 2020/12/08 12:00 p.m.32 views

ImageChunkMut needs bounds on its Send and Sync traits

In the affected versions of this crate, ImageChunkMut unconditionally implements Send and Sync, allowing to create data races. This can result in a memory corruption or undefined behavior when non thread-safe types are moved and referenced across thread boundaries. The flaw was corrected in commi...

7CVSS1.9AI score0.00344EPSS
SaveExploits1Affected Software1
RustSec
RustSec
added 2020/12/08 12:00 p.m.36 views

Future<T> lacks bounds on Send and Sync.

tinyfuture contains a light-weight implementation of Futures. The Future type it has lacked bound on its Send and Sync traits. This allows for a bug where non-thread safe types such as Cell can be used in Futures and cause data races in concurrent programs. The flaw was corrected in commit c79191...

8.1CVSS2.3AI score0.00766EPSS
SaveExploits0Affected Software1
OSV
OSV
added 2020/11/29 12:00 p.m.38 views

RUSTSEC-2020-0142 Send bound needed on T (for Send impl of `Bucket2`)

Affected versions of this crate unconditionally implements Send for Bucket2. This allows sending non-Send types to other threads. This can lead to data races when non Send types like Cell or Rc are contained inside Bucket2 and sent across thread boundaries. The data races can potentially lead to...

8.1CVSS8.1AI score0.0124EPSS
SaveExploits1References3
RustSec
RustSec
added 2020/11/29 12:00 p.m.29 views

Send bound needed on T (for Send impl of `Bucket2`)

Affected versions of this crate unconditionally implements Send for Bucket2. This allows sending non-Send types to other threads. This can lead to data races when non Send types like Cell or Rc are contained inside Bucket2 and sent across thread boundaries. The data races can potentially lead to...

8.1CVSS2AI score0.0124EPSS
SaveExploits1Affected Software1
Rows per page
Query Builder