Lucene search
+L

14 matches found

OSV
OSV
•added 2021/08/25 8:49 p.m.•118 views

GHSA-C7FW-CR3W-WVFC Multiple security issues including data race, buffer overflow, and uninitialized memory drop in arr

arr crate contains multiple security issues. Specifically, 1. It incorrectly implements Sync/Send bounds, which allows to smuggle non-Sync/Send types across the thread boundary. 2. Index and IndexMut implementation does not check the array bound. 3. Array::newfromtemplate drops uninitialized memo...

4.7CVSS6.7AI score0.01534EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
•added 2021/08/25 8:48 p.m.•38 views

Multiple security issues including data race, buffer overflow, and uninitialized memory drop in arr

arr crate contains multiple security issues. Specifically, 1. It incorrectly implements Sync/Send bounds, which allows to smuggle non-Sync/Send types across the thread boundary. 2. Index and IndexMut implementation does not check the array bound. 3. Array::newfromtemplate drops uninitialized memo...

9.8CVSS9AI score0.01494EPSS
SaveExploits0References4Affected Software1
OSV
OSV
•added 2021/08/25 8:48 p.m.•66 views

GHSA-FHVJ-7F9P-W788 Multiple security issues including data race, buffer overflow, and uninitialized memory drop in arr

arr crate contains multiple security issues. Specifically, 1. It incorrectly implements Sync/Send bounds, which allows to smuggle non-Sync/Send types across the thread boundary. 2. Index and IndexMut implementation does not check the array bound. 3. Array::newfromtemplate drops uninitialized memo...

9.8CVSS6.7AI score0.01534EPSS
SaveExploits0References4
OSV
OSV
•added 2021/08/25 8:48 p.m.•121 views

GHSA-36XW-HGFV-JWM7 Multiple security issues including data race, buffer overflow, and uninitialized memory drop in arr

arr crate contains multiple security issues. Specifically, 1. It incorrectly implements Sync/Send bounds, which allows to smuggle non-Sync/Send types across the thread boundary. 2. Index and IndexMut implementation does not check the array bound. 3. Array::newfromtemplate drops uninitialized memo...

9.8CVSS6.7AI score0.01534EPSS
SaveExploits0References4
OSV
OSV
•added 2020/12/31 10:15 a.m.•39 views

CVE-2020-35886

An issue was discovered in the arr crate through 2020-08-25 for Rust. An attacker can smuggle non-Sync/Send types across a thread boundary to cause a data race...

4.7CVSS6.7AI score0.01534EPSS
SaveExploits0References1
NVD
NVD
•added 2020/12/31 10:15 a.m.•22 views

CVE-2020-35886

An issue was discovered in the arr crate through 2020-08-25 for Rust. An attacker can smuggle non-Sync/Send types across a thread boundary to cause a data race...

4.7CVSS4.7AI score0.00194EPSS
SaveExploits0References1
Prion
Prion
•added 2020/12/31 10:15 a.m.•20 views

Design/Logic Flaw

An issue was discovered in the arr crate through 2020-08-25 for Rust. An attacker can smuggle non-Sync/Send types across a thread boundary to cause a data race...

1.9CVSS4.8AI score0.00194EPSS
SaveExploits0References1Affected Software1
Mend
Mend
•added 2020/12/31 8:25 a.m.•3 views

CVE-2020-35886

An issue was discovered in the arr crate through 2020-08-25 for Rust. An attacker can smuggle non-Sync/Send types across a thread boundary to cause a data race...

5.7CVSS0.00194EPSS
SaveExploits0References5
OSV
OSV
•added 2020/11/29 12:00 p.m.•86 views

RUSTSEC-2020-0088 MPMCConsumer/Producer allows sending non-Send type across threads

Affected versions of this crate unconditionally implemented Sync and Send traits for MPMCConsumer and MPMCProducer types. This allows users to send types that do not implement Send trait across thread boundaries, which can cause a data race. The flaw was corrected in the 2.0.1 release by adding T...

5.5CVSS5.2AI score0.00382EPSS
SaveExploits1References3
OSV
OSV
•added 2020/11/15 12:00 p.m.•40 views

RUSTSEC-2020-0133 Queue<T> should have a Send bound on its Send/Sync traits

Affected versions of this crate unconditionally implements Send/Sync for Queue. This allows 1 creating data races to a T: !Sync and 2 sending T: !Send to other threads, resulting in memory corruption or other undefined behavior...

8.1CVSS8.2AI score0.01098EPSS
SaveExploits1References3
RustSec
RustSec
•added 2020/08/25 12:00 p.m.•37 views

Multiple security issues including data race, buffer overflow, and uninitialized memory drop

arr crate contains multiple security issues. Specifically, 1. It incorrectly implements Sync/Send bounds, which allows to smuggle non-Sync/Send types across the thread boundary. 2. Index and IndexMut implementation does not check the array bound. 3. Array::newfromtemplate drops uninitialized memo...

9.8CVSS3.6AI score0.01534EPSS
SaveExploits0
OSV
OSV
•added 2020/08/25 12:00 p.m.•31 views

RUSTSEC-2020-0034 Multiple security issues including data race, buffer overflow, and uninitialized memory drop

arr crate contains multiple security issues. Specifically, 1. It incorrectly implements Sync/Send bounds, which allows to smuggle non-Sync/Send types across the thread boundary. 2. Index and IndexMut implementation does not check the array bound. 3. Array::newfromtemplate drops uninitialized memo...

9.8CVSS6.7AI score0.01534EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2020/08/25 12:00 a.m.•4 views

PT-2020-17520

Name of the Vulnerable Software and Affected Versions arr crate through 2020-08-25 Description The issue concerns the arr crate, which contains multiple security issues. These include incorrect implementation of Sync/Send bounds, allowing non-Sync/Send types to be smuggled across thread boundarie...

9.8CVSS0.01534EPSS
SaveExploits0References12
Positive Technologies
Positive Technologies
•added 2020/08/25 12:00 a.m.•3 views

PT-2020-17518

Name of the Vulnerable Software and Affected Versions arr crate versions through 2020-08-25 Description The issue allows an attacker to smuggle non-Sync/Send types across a thread boundary, causing a data race. Specifically, the arr crate incorrectly implements Sync/Send bounds. Additionally, the...

9.8CVSS0.00194EPSS
SaveExploits0References13
Rows per page
Query Builder