Lucene search
K

2673 matches found

Github Security Blog
Github Security Blog
added 2021/08/25 8:58 p.m.22 views

Data race in ruspiro-singleton

Singleton is meant to be a static object that can be initialized lazily. In order to satisfy the requirement that static items must implement Sync, Singleton implemented both Sync and Send unconditionally. This allows for a bug where non-Sync types such as Cell can be used in singletons and cause...

8.1CVSS7.6AI score0.00766EPSS
Exploits0References7Affected Software1
Github Security Blog
Github Security Blog
added 2021/08/25 8:58 p.m.25 views

Data races in unicycle

Affected versions of this crate unconditionally implemented Send & Sync for types PinSlab & Unordered. This allows sending non-Send types to other threads and concurrently accessing non-Sync types from multiple threads. This can result in a data race & memory corruption when types that provide...

8.1CVSS8AI score0.00766EPSS
Exploits0References7Affected Software1
OSV
OSV
added 2021/08/25 8:58 p.m.14 views

GHSA-686F-CH3R-XWMH Data races in unicycle

Affected versions of this crate unconditionally implemented Send & Sync for types PinSlab & Unordered. This allows sending non-Send types to other threads and concurrently accessing non-Sync types from multiple threads. This can result in a data race & memory corruption when types that provide...

8.1CVSS8.2AI score0.00766EPSS
Exploits0References7
Github Security Blog
Github Security Blog
added 2021/08/25 8:58 p.m.21 views

Data race in syncpool

Affected versions of this crate unconditionally implements Send for Bucket2. This allows sending non-Send types to other threads. This can lead to data races when non Send types like Cell or Rc are contained inside Bucket2 and sent across thread boundaries. The data races can potentially lead to...

8.1CVSS7.9AI score0.0124EPSS
Exploits1References6Affected Software1
OSV
OSV
added 2021/08/25 8:58 p.m.13 views

GHSA-VP6R-MRQ9-8F4H Data race in syncpool

Affected versions of this crate unconditionally implements Send for Bucket2. This allows sending non-Send types to other threads. This can lead to data races when non Send types like Cell or Rc are contained inside Bucket2 and sent across thread boundaries. The data races can potentially lead to...

8.1CVSS8.1AI score0.0124EPSS
Exploits1References6
Github Security Blog
Github Security Blog
added 2021/08/25 8:58 p.m.39 views

Data races in multiqueue

Affected versions of this crate unconditionally implemented Send for types used in queue implementations InnerSend, InnerRecv, FutInnerSend, FutInnerRecv. This allows users to send non-Send types to other threads, which can lead to data race bugs or other undefined behavior...

8.1CVSS7.7AI score0.01098EPSS
Exploits1References5Affected Software1
OSV
OSV
added 2021/08/25 8:58 p.m.8 views

GHSA-R2X6-VRXX-JGV4 Data races in multiqueue

Affected versions of this crate unconditionally implemented Send for types used in queue implementations InnerSend, InnerRecv, FutInnerSend, FutInnerRecv. This allows users to send non-Send types to other threads, which can lead to data race bugs or other undefined behavior...

8.1CVSS7.1AI score0.01098EPSS
Exploits1References5
OSV
OSV
added 2021/08/25 8:58 p.m.2 views

GHSA-2R6Q-6C8C-G762 Data races in toolshed

An issue was discovered in the toolshed crate through 2020-11-15 for Rust. In CopyCell, the Send trait lacks bounds on the contained type...

8.1CVSS7.2AI score0.01098EPSS
Exploits1References4
Github Security Blog
Github Security Blog
added 2021/08/25 8:58 p.m.28 views

Data races in toolshed

An issue was discovered in the toolshed crate through 2020-11-15 for Rust. In CopyCell, the Send trait lacks bounds on the contained type...

8.1CVSS7.8AI score0.01098EPSS
Exploits1References4Affected Software1
Github Security Blog
Github Security Blog
added 2021/08/25 8:58 p.m.28 views

Data races in slock

An issue was discovered in the slock crate through 2020-11-17 for Rust. Slock unconditionally implements Send and Sync...

8.1CVSS7.8AI score0.01311EPSS
Exploits1References6Affected Software1
Github Security Blog
Github Security Blog
added 2021/08/25 8:57 p.m.30 views

Data races in parc

In the affected versions of this crate, LockWeak unconditionally implemented Send with no trait bounds on T. LockWeak doesn't own T and only provides &T. This allows concurrent access to a non-Sync T, which can cause undefined behavior like data races...

8.1CVSS7.7AI score0.00833EPSS
Exploits1References5Affected Software1
OSV
OSV
added 2021/08/25 8:57 p.m.0 views

GHSA-29V7-3V4C-GF38 Data races in parc

In the affected versions of this crate, LockWeak unconditionally implemented Send with no trait bounds on T. LockWeak doesn't own T and only provides &T. This allows concurrent access to a non-Sync T, which can cause undefined behavior like data races...

8.1CVSS7.1AI score0.00833EPSS
Exploits1References5
Github Security Blog
Github Security Blog
added 2021/08/25 8:57 p.m.26 views

Data races in rcu_cell

Affected versions of this crate unconditionally implement Send/Sync for RcuCell. This allows users to send T: !Send to other threads while T enclosed within RcuCell, and allows users to concurrently access T: !Sync by using the APIs of RcuCell that provide access to &T. This can result in memory...

8.1CVSS7.9AI score0.01249EPSS
Exploits1References6Affected Software1
Github Security Blog
Github Security Blog
added 2021/08/25 8:57 p.m.38 views

Data races in cache

An issue was discovered in the cache crate through 2020-11-24 for Rust. Affected versions of this crate unconditionally implement Send/Sync for Cache. This allows users to insert K that is not Send or not Sync. This allows users to create data races by using non-Send types like Arc or Rc as K in...

8.1CVSS7.7AI score0.01098EPSS
Exploits1References4Affected Software1
Github Security Blog
Github Security Blog
added 2021/08/25 8:57 p.m.28 views

Command injection in kekbit

An issue was discovered in the kekbit crate before 0.3.4 for Rust. For ShmWriter, Send is implemented without requiring H: Send...

8.1CVSS7.8AI score0.01249EPSS
Exploits1References4Affected Software1
OSV
OSV
added 2021/08/25 8:57 p.m.16 views

GHSA-G83M-67WH-WHPW Command injection in kekbit

An issue was discovered in the kekbit crate before 0.3.4 for Rust. For ShmWriter, Send is implemented without requiring H: Send...

8.1CVSS8AI score0.01249EPSS
Exploits1References4
Github Security Blog
Github Security Blog
added 2021/08/25 8:57 p.m.23 views

Data races in generator

The Generator type is an iterable which uses a generator function that yields values. In affected versions of the crate, the provided function yielding values had no Send bounds despite the Generator itself implementing Send. The generator function lacking a Send bound means that types that are...

5.9CVSS5.6AI score0.01094EPSS
Exploits1References6Affected Software1
OSV
OSV
added 2021/08/25 8:57 p.m.23 views

GHSA-W3G5-2848-2V8R Data races in generator

The Generator type is an iterable which uses a generator function that yields values. In affected versions of the crate, the provided function yielding values had no Send bounds despite the Generator itself implementing Send. The generator function lacking a Send bound means that types that are...

5.9CVSS5.4AI score0.01094EPSS
Exploits1References6
OSV
OSV
added 2021/08/25 8:57 p.m.12 views

GHSA-FVHR-7J8M-3CVC Data races in appendix

The appendix crate implements a key-value mapping data structure called Index that is stored on disk. The crate allows for any type to inhabit the generic K and V type parameters and implements Send and Sync for them unconditionally. Using a type that is not marked as Send or Sync with Index can...

5.9CVSS5.6AI score0.00978EPSS
Exploits1References4
Github Security Blog
Github Security Blog
added 2021/08/25 8:56 p.m.22 views

Data races in cgc

An issue was discovered in the cgc crate through 2020-12-10 for Rust. Ptr implements Send and Sync for all types...

5.9CVSS5.8AI score0.00978EPSS
Exploits1References4Affected Software1
Rows per page
Query Builder