Lucene search
K

2673 matches found

OSV
OSV
added 2021/08/25 8:50 p.m.18 views

GHSA-J42V-6WPM-R847 Data races in thex

An issue was discovered in the thex crate through 2020-12-08 for Rust. Thex allows cross-thread data races of non-Send types...

5.5CVSS5.4AI score0.0031EPSS
Exploits0References2
OSV
OSV
added 2021/08/25 8:50 p.m.11 views

GHSA-4XJ5-VV9X-63JP Data races in concread

An issue was discovered in the concread crate before 0.2.6 for Rust. Attackers can cause an ARCache data race by sending types that do not implement Send/Sync...

4.7CVSS4.6AI score0.00242EPSS
Exploits1References4
OSV
OSV
added 2021/08/25 8:50 p.m.19 views

GHSA-WV4P-JP67-JR97 Data races in magnetic

Affected versions of this crate unconditionally implemented Sync and Send traits for MPMCConsumer and MPMCProducer types. This allows users to send types that do not implement Send trait across thread boundaries, which can cause a data race. The flaw was corrected in the 2.0.1 release by adding T...

5.5CVSS5.2AI score0.00377EPSS
Exploits1References4
Github Security Blog
Github Security Blog
added 2021/08/25 8:50 p.m.30 views

Data races in magnetic

Affected versions of this crate unconditionally implemented Sync and Send traits for MPMCConsumer and MPMCProducer types. This allows users to send types that do not implement Send trait across thread boundaries, which can cause a data race. The flaw was corrected in the 2.0.1 release by adding T...

5.5CVSS5.4AI score0.00377EPSS
Exploits1References4Affected Software1
Github Security Blog
Github Security Blog
added 2021/08/25 8:49 p.m.25 views

Data races in futures-intrusive

GenericMutexGuard was given the Sync auto trait as long as T is Send due to its contained members. However, since the guard is supposed to represent an acquired lock and allows concurrent access to the underlying data from different threads, it should only be Sync when the underlying data is. Thi...

5.5CVSS5.5AI score0.00374EPSS
Exploits1References4Affected Software1
OSV
OSV
added 2021/08/25 8:49 p.m.14 views

GHSA-4HJG-CX88-G9F9 Data races in futures-intrusive

GenericMutexGuard was given the Sync auto trait as long as T is Send due to its contained members. However, since the guard is supposed to represent an acquired lock and allows concurrent access to the underlying data from different threads, it should only be Sync when the underlying data is. Thi...

5.5CVSS5.3AI score0.00374EPSS
Exploits1References4
OSV
OSV
added 2021/08/25 8:49 p.m.10 views

GHSA-9CG2-2J2H-59V9 Data races in atom

The atom crate contains a security issue revolving around its implementation of the Send trait. It incorrectly allows any arbitrary type to be sent across threads potentially leading to use-after-free issues through memory races...

4.7CVSS4.8AI score0.00196EPSS
Exploits0References4
Github Security Blog
Github Security Blog
added 2021/08/25 8:49 p.m.24 views

Data races in atom

The atom crate contains a security issue revolving around its implementation of the Send trait. It incorrectly allows any arbitrary type to be sent across threads potentially leading to use-after-free issues through memory races...

4.7CVSS5.4AI score0.00196EPSS
Exploits0References4Affected Software1
OSV
OSV
added 2021/08/25 8:49 p.m.13 views

GHSA-C7FW-CR3W-WVFC Multiple security issues including data race, buffer overflow, and uninitialized memory drop in arr

arr crate contains multiple security issues. Specifically, 1. It incorrectly implements Sync/Send bounds, which allows to smuggle non-Sync/Send types across the thread boundary. 2. Index and IndexMut implementation does not check the array bound. 3. Array::newfromtemplate drops uninitialized memo...

4.7CVSS6.7AI score0.01515EPSS
Exploits0References4
Github Security Blog
Github Security Blog
added 2021/08/25 8:48 p.m.24 views

Multiple security issues including data race, buffer overflow, and uninitialized memory drop in arr

arr crate contains multiple security issues. Specifically, 1. It incorrectly implements Sync/Send bounds, which allows to smuggle non-Sync/Send types across the thread boundary. 2. Index and IndexMut implementation does not check the array bound. 3. Array::newfromtemplate drops uninitialized memo...

9.8CVSS9AI score0.01476EPSS
Exploits0References4Affected Software1
OSV
OSV
added 2021/08/25 8:48 p.m.10 views

GHSA-FHVJ-7F9P-W788 Multiple security issues including data race, buffer overflow, and uninitialized memory drop in arr

arr crate contains multiple security issues. Specifically, 1. It incorrectly implements Sync/Send bounds, which allows to smuggle non-Sync/Send types across the thread boundary. 2. Index and IndexMut implementation does not check the array bound. 3. Array::newfromtemplate drops uninitialized memo...

9.8CVSS6.7AI score0.01515EPSS
Exploits0References4
OSV
OSV
added 2021/08/25 8:48 p.m.16 views

GHSA-36XW-HGFV-JWM7 Multiple security issues including data race, buffer overflow, and uninitialized memory drop in arr

arr crate contains multiple security issues. Specifically, 1. It incorrectly implements Sync/Send bounds, which allows to smuggle non-Sync/Send types across the thread boundary. 2. Index and IndexMut implementation does not check the array bound. 3. Array::newfromtemplate drops uninitialized memo...

9.8CVSS6.7AI score0.01515EPSS
Exploits0References4
OSV
OSV
added 2021/08/25 8:42 p.m.10 views

GHSA-W65J-G6C7-G3M4 Multiple memory safety issues in actix-web

Affected versions contain multiple memory safety issues, such as: - Unsoundly coercing immutable references to mutable references - Unsoundly extending lifetimes of strings - Adding the Send marker trait to objects that cannot be safely sent between threads This may result in a variety of memory...

9.8CVSS7.7AI score0.01324EPSS
Exploits0References3
GitLab Advisory Database
GitLab Advisory Database
added 2021/08/25 12:0 a.m.3 views

Data race in abox

Affected versions of this crate implements Send/Sync for AtomicBox without requiring T: Send/T: Sync. This allows to create data races to T: !Sync and send T: !Send to another thread. Such behavior breaks the compile-time thread safety guarantees of Rust, and allows users to incur undefined...

8.1CVSS7.1AI score0.00766EPSS
Exploits0References8Affected Software1
OSV
OSV
added 2021/08/08 6:15 a.m.2 views

CVE-2020-36463

An issue was discovered in the multiqueue crate through 2020-12-25 for Rust. There are unconditional implementations of Send for InnerSend, InnerRecv, FutInnerSend, and FutInnerRecv...

8.1CVSS7.3AI score0.01098EPSS
Exploits1References2
OSV
OSV
added 2021/08/08 6:15 a.m.14 views

CVE-2020-36469

An issue was discovered in the appendix crate through 2020-11-15 for Rust. For the generic K and V type parameters, Send and Sync are implemented unconditionally...

5.9CVSS5.8AI score0.00978EPSS
Exploits1References2
OSV
OSV
added 2021/08/08 6:15 a.m.5 views

CVE-2020-36462

An issue was discovered in the syncpool crate before 0.1.6 for Rust. There is an unconditional implementation of Send for Bucket2...

8.1CVSS5.8AI score
Exploits0References2
OSV
OSV
added 2021/08/08 6:15 a.m.3 views

CVE-2020-36466

An issue was discovered in the cgc crate through 2020-12-10 for Rust. Ptr implements Send and Sync for all types...

5.9CVSS6.2AI score0.00978EPSS
Exploits2References2
OSV
OSV
added 2021/08/08 6:15 a.m.2 views

DEBIAN-CVE-2020-36471

An issue was discovered in the generator crate before 0.7.0 for Rust. It does not ensure that a function for yielding values has Send bounds...

5.9CVSS5.9AI score0.01094EPSS
Exploits1References1
NVD
NVD
added 2021/08/08 6:15 a.m.12 views

CVE-2020-36471

An issue was discovered in the generator crate before 0.7.0 for Rust. It does not ensure that a function for yielding values has Send bounds...

5.9CVSS0.01094EPSS
Exploits1References2
Rows per page
Query Builder