Lucene search
K

4534 matches found

OSV
OSV
added 2021/08/25 9:0 p.m.13 views

GHSA-83R8-P8V6-6GFM Slock<T> allows sending non-Send types across thread boundaries

Slock unconditionally implements Send/Sync. Affected versions of this crate allows sending non-Send types to other threads, which can lead to data races and memory corruption due to the data race...

8.1CVSS8.2AI score0.00513EPSS
Exploits1References3
OSV
OSV
added 2021/08/25 9:0 p.m.0 views

GHSA-8892-84WF-CG8F SyncChannel<T> can move 'T: !Send' to other threads

Affected versions of this crate unconditionally implement Send/Sync for SyncChannel. SyncChannel doesn't provide access to &T but merely serves as a channel that consumes and returns owned T. Users can create UB in safe Rust by sending T: !Send to other threads with SyncChannel::send/recv APIs...

8.1CVSS5.9AI score0.00336EPSS
Exploits0References3
Github Security Blog
Github Security Blog
added 2021/08/25 9:0 p.m.13 views

SyncChannel<T> can move 'T: !Send' to other threads

Affected versions of this crate unconditionally implement Send/Sync for SyncChannel. SyncChannel doesn't provide access to &T but merely serves as a channel that consumes and returns owned T. Users can create UB in safe Rust by sending T: !Send to other threads with SyncChannel::send/recv APIs...

6.8AI score
Exploits0References3Affected Software1
Github Security Blog
Github Security Blog
added 2021/08/25 9:0 p.m.16 views

Queue<T> should have a Send bound on its Send/Sync traits

Affected versions of this crate unconditionally implements Send/Sync for Queue. This allows 1 creating data races to a T: !Sync and 2 sending T: !Send to other threads, resulting in memory corruption or other undefined behavior...

3.8AI score
Exploits0References3Affected Software1
Github Security Blog
Github Security Blog
added 2021/08/25 9:0 p.m.15 views

Singleton lacks bounds on Send and Sync.

Singleton is meant to be a static object that can be initialized lazily. In order to satisfy the requirement that static items must implement Sync, Singleton implemented both Sync and Send unconditionally. This allows for a bug where non-Sync types such as Cell can be used in singletons and cause...

1.4AI score
Exploits0References3Affected Software1
OSV
OSV
added 2021/08/25 9:0 p.m.2 views

GHSA-JH2G-XHQQ-X4W9 Send/Sync bound needed on T for Send/Sync impl of RcuCell<T>

Affected versions of this crate unconditionally implement Send/Sync for RcuCell. This allows users to send T: !Send to other threads while T enclosed within RcuCell, and allows users to concurrently access T: !Sync by using the APIs of RcuCell that provide access to &T. This can result in memory...

7.3AI score
Exploits0References4
OSV
OSV
added 2021/08/25 9:0 p.m.1 views

GHSA-XWXC-J97J-84GF Race condition in Parc

In the affected versions of this crate, LockWeak unconditionally implemented Send with no trait bounds on T. LockWeak doesn't own T and only provides &T. This allows concurrent access to a non-Sync T, which can cause undefined behavior like data races...

8.1CVSS7.1AI score0.00281EPSS
Exploits1References3
Github Security Blog
Github Security Blog
added 2021/08/25 8:59 p.m.12 views

MvccRwLock allows data races & aliasing violations

Affected versions of the noisesearch crate unconditionally implement Send/Sync for MvccRwLock. This can lead to data races when types that are either !Send or !Sync e.g. Rc, Arc are contained inside MvccRwLock and sent across thread boundaries. The data races can potentially lead to memory...

3AI score
Exploits0References3Affected Software1
OSV
OSV
added 2021/08/25 8:59 p.m.12 views

GHSA-RMFF-F8W9-C9RM Data races in max7301

The ImmediateIO and TransactionalIO types implement Sync for all contained Expander types regardless of if the Expander itself is safe to use across threads. As the IO types allow retrieving the Expander, this can lead to non-thread safe types being sent across threads as part of the Expander...

5.9CVSS5.6AI score0.0028EPSS
Exploits1References5
Github Security Blog
Github Security Blog
added 2021/08/25 8:59 p.m.31 views

Data races in bunch

An issue was discovered in the bunch crate through 2020-11-12 for Rust. Affected versions of this crate unconditionally implements Send/Sync for Bunch. This allows users to insert T: !Sync to Bunch. It is possible to create a data race to a T: !Sync by invoking the Bunch::get API which returns &T...

8.1CVSS7.7AI score0.00513EPSS
Exploits1References5Affected Software1
OSV
OSV
added 2021/08/25 8:59 p.m.1 views

GHSA-JWPH-QP5H-F9WJ Data races in bunch

An issue was discovered in the bunch crate through 2020-11-12 for Rust. Affected versions of this crate unconditionally implements Send/Sync for Bunch. This allows users to insert T: !Sync to Bunch. It is possible to create a data race to a T: !Sync by invoking the Bunch::get API which returns &T...

8.1CVSS7.1AI score0.00513EPSS
Exploits1References5
Github Security Blog
Github Security Blog
added 2021/08/25 8:59 p.m.21 views

Data races in convec

Affected versions of this crate unconditionally implement Send/Sync for ConVec. This allows users to insert T that is not Send or not Sync. This allows users to create data races by using non-Send types like Arc or Rc as T in ConVec. It is also possible to create data races by using types like Ce...

8.1CVSS7.7AI score0.00336EPSS
Exploits0References4Affected Software1
Github Security Blog
Github Security Blog
added 2021/08/25 8:59 p.m.27 views

Data races in signal-simple

Affected versions of this crate unconditionally implement Send/Sync for SyncChannel. SyncChannel doesn't provide access to &T but merely serves as a channel that consumes and returns owned T. Users can create UB in safe Rust by sending T: !Send to other threads with SyncChannel::send/recv APIs...

8.1CVSS7.7AI score0.00336EPSS
Exploits0References5Affected Software1
OSV
OSV
added 2021/08/25 8:59 p.m.0 views

GHSA-9J8Q-M9X5-9G6J Data races in async-coap

An issue was discovered in the async-coap crate through 2020-12-08 for Rust. Affected versions of this crate implement Send/Sync for ArcGuard with no trait bounds on RC. This allows users to send RC: !Send to other threads and also allows users to concurrently access Rc: !Sync from multiple...

8.1CVSS7.2AI score0.00336EPSS
Exploits0References5
OSV
OSV
added 2021/08/25 8:58 p.m.19 views

GHSA-FG42-VWXX-XX5J Data race in tiny_future

tinyfuture contains a light-weight implementation of Futures. The Future type it has lacked bound on its Send and Sync traits. This allows for a bug where non-thread safe types such as Cell can be used in Futures and cause data races in concurrent programs. The flaw was corrected in commit c79191...

8.1CVSS7.8AI score0.00336EPSS
Exploits0References6
OSV
OSV
added 2021/08/25 8:58 p.m.12 views

GHSA-368F-29C3-4F2R Data race in conqueue

Affected versions of this crate unconditionally implemented Send/Sync for QueueSender, allowing to send non-Send T to other threads by invoking &QueueSender.send. This fails to prevent users from creating data races by sending types like Rc or Arc to other threads, which can lead to memory...

8.1CVSS7.9AI score0.00336EPSS
Exploits0References5
OSV
OSV
added 2021/08/25 8:58 p.m.13 views

GHSA-FQQ2-XP7M-XVM8 Data race in ruspiro-singleton

Singleton is meant to be a static object that can be initialized lazily. In order to satisfy the requirement that static items must implement Sync, Singleton implemented both Sync and Send unconditionally. This allows for a bug where non-Sync types such as Cell can be used in singletons and cause...

8.1CVSS7.8AI score0.00336EPSS
Exploits0References7
Github Security Blog
Github Security Blog
added 2021/08/25 8:58 p.m.22 views

Data race in ruspiro-singleton

Singleton is meant to be a static object that can be initialized lazily. In order to satisfy the requirement that static items must implement Sync, Singleton implemented both Sync and Send unconditionally. This allows for a bug where non-Sync types such as Cell can be used in singletons and cause...

8.1CVSS7.6AI score0.00336EPSS
Exploits0References7Affected Software1
Github Security Blog
Github Security Blog
added 2021/08/25 8:58 p.m.25 views

Data races in unicycle

Affected versions of this crate unconditionally implemented Send & Sync for types PinSlab & Unordered. This allows sending non-Send types to other threads and concurrently accessing non-Sync types from multiple threads. This can result in a data race & memory corruption when types that provide...

8.1CVSS8AI score0.00336EPSS
Exploits0References7Affected Software1
OSV
OSV
added 2021/08/25 8:58 p.m.13 views

GHSA-686F-CH3R-XWMH Data races in unicycle

Affected versions of this crate unconditionally implemented Send & Sync for types PinSlab & Unordered. This allows sending non-Send types to other threads and concurrently accessing non-Sync types from multiple threads. This can result in a data race & memory corruption when types that provide...

8.1CVSS8.2AI score0.00336EPSS
Exploits0References7
Rows per page
Query Builder