Lucene search
K

4614 matches found

OSV
OSV
added 2021/08/25 8:51 p.m.15 views

GHSA-RW2C-C256-3R53 Data races in hashconsing

Affected versions of hashconsing implements Send/Sync for its HConsed type without restricting it to Sendable types and Syncable types. This allows non-Sync types such as Cell to be shared across threads leading to undefined behavior and memory corruption in concurrent programs...

7.5CVSS7.6AI score0.0136EPSS
Exploits1References4
OSV
OSV
added 2021/08/25 8:51 p.m.3 views

GHSA-8GF5-Q9P9-WVMC Data race in atomic-option

An issue was discovered in the atomic-option crate through 2020-10-31 for Rust. Because AtomicOption implements Sync unconditionally, a data race can occur...

5.9CVSS5.9AI score0.01107EPSS
Exploits1References4
Github Security Blog
Github Security Blog
added 2021/08/25 8:51 p.m.23 views

Data races in reffers

ARefss is a type that is assumed to contain objects that are Send + Sync. In the affected versions of this crate, Send/Sync traits are unconditionally implemented for ARefss. By using the ARefss::map API, we can insert a !Send or !Sync object into ARefss. After that, it is possible to create a da...

4.7CVSS5.1AI score0.00242EPSS
Exploits1References5Affected Software1
OSV
OSV
added 2021/08/25 8:51 p.m.10 views

GHSA-39XG-8P43-H76X Data races in reffers

ARefss is a type that is assumed to contain objects that are Send + Sync. In the affected versions of this crate, Send/Sync traits are unconditionally implemented for ARefss. By using the ARefss::map API, we can insert a !Send or !Sync object into ARefss. After that, it is possible to create a da...

4.7CVSS4.6AI score0.00242EPSS
Exploits1References5
Github Security Blog
Github Security Blog
added 2021/08/25 8:50 p.m.21 views

Data races in rusb

Affected versions of rusb did not require UsbContext to implement Send and Sync. However, through Device and DeviceHandle it is possible to use UsbContexts across threads. This issue allows non-thread safe UsbContext types to be used concurrently leading to data races and memory corruption. The...

7CVSS6.5AI score0.00285EPSS
Exploits0References4Affected Software1
OSV
OSV
added 2021/08/25 8:50 p.m.10 views

GHSA-3JC5-5HC5-33GJ Data races in conquer-once

Affected versions of conquer-once implements Sync for its OnceCell type without restricting it to Sendable types. This allows non-Send but Sync types such as MutexGuard to be sent across threads leading to undefined behavior and memory corruption in concurrent programs. The issue was fixed by...

7.8CVSS7.7AI score0.00426EPSS
Exploits1References4
Github Security Blog
Github Security Blog
added 2021/08/25 8:50 p.m.29 views

Data races in conquer-once

Affected versions of conquer-once implements Sync for its OnceCell type without restricting it to Sendable types. This allows non-Send but Sync types such as MutexGuard to be sent across threads leading to undefined behavior and memory corruption in concurrent programs. The issue was fixed by...

7.8CVSS7.5AI score0.00426EPSS
Exploits1References4Affected Software1
OSV
OSV
added 2021/08/25 8:50 p.m.1 views

GHSA-G489-XRW3-3V8W Data races in aovec

An issue was discovered in the aovec crate through 2020-12-10 for Rust. Because Aovec does not have bounds on its Send trait or Sync trait, a data race and memory corruption can occur...

7CVSS5.9AI score0.00285EPSS
Exploits0References3
OSV
OSV
added 2021/08/25 8:50 p.m.12 views

GHSA-64J8-7GP2-XJX5 Data races in try-mutex

Affected versions of this crate unconditionally implemented Sync trait for TryMutex type. This allows users to put non-Send T type in TryMutex and send it to another thread, which can cause a data race. The flaw was corrected in the 0.3.0 release by adding T: Send bound for the Sync trait...

5.5CVSS5.2AI score0.00377EPSS
Exploits1References4
Github Security Blog
Github Security Blog
added 2021/08/25 8:50 p.m.23 views

Data races in try-mutex

Affected versions of this crate unconditionally implemented Sync trait for TryMutex type. This allows users to put non-Send T type in TryMutex and send it to another thread, which can cause a data race. The flaw was corrected in the 0.3.0 release by adding T: Send bound for the Sync trait...

5.5CVSS5.4AI score0.00377EPSS
Exploits1References4Affected Software1
OSV
OSV
added 2021/08/25 8:50 p.m.11 views

GHSA-4XJ5-VV9X-63JP Data races in concread

An issue was discovered in the concread crate before 0.2.6 for Rust. Attackers can cause an ARCache data race by sending types that do not implement Send/Sync...

4.7CVSS4.6AI score0.00242EPSS
Exploits1References4
OSV
OSV
added 2021/08/25 8:50 p.m.19 views

GHSA-WV4P-JP67-JR97 Data races in magnetic

Affected versions of this crate unconditionally implemented Sync and Send traits for MPMCConsumer and MPMCProducer types. This allows users to send types that do not implement Send trait across thread boundaries, which can cause a data race. The flaw was corrected in the 2.0.1 release by adding T...

5.5CVSS5.2AI score0.00377EPSS
Exploits1References4
Github Security Blog
Github Security Blog
added 2021/08/25 8:50 p.m.30 views

Data races in magnetic

Affected versions of this crate unconditionally implemented Sync and Send traits for MPMCConsumer and MPMCProducer types. This allows users to send types that do not implement Send trait across thread boundaries, which can cause a data race. The flaw was corrected in the 2.0.1 release by adding T...

5.5CVSS5.4AI score0.00377EPSS
Exploits1References4Affected Software1
Github Security Blog
Github Security Blog
added 2021/08/25 8:49 p.m.25 views

Data races in futures-intrusive

GenericMutexGuard was given the Sync auto trait as long as T is Send due to its contained members. However, since the guard is supposed to represent an acquired lock and allows concurrent access to the underlying data from different threads, it should only be Sync when the underlying data is. Thi...

5.5CVSS5.5AI score0.00374EPSS
Exploits1References4Affected Software1
OSV
OSV
added 2021/08/25 8:49 p.m.14 views

GHSA-4HJG-CX88-G9F9 Data races in futures-intrusive

GenericMutexGuard was given the Sync auto trait as long as T is Send due to its contained members. However, since the guard is supposed to represent an acquired lock and allows concurrent access to the underlying data from different threads, it should only be Sync when the underlying data is. Thi...

5.5CVSS5.3AI score0.00374EPSS
Exploits1References4
OSV
OSV
added 2021/08/25 8:49 p.m.13 views

GHSA-C7FW-CR3W-WVFC Multiple security issues including data race, buffer overflow, and uninitialized memory drop in arr

arr crate contains multiple security issues. Specifically, 1. It incorrectly implements Sync/Send bounds, which allows to smuggle non-Sync/Send types across the thread boundary. 2. Index and IndexMut implementation does not check the array bound. 3. Array::newfromtemplate drops uninitialized memo...

4.7CVSS6.7AI score0.01515EPSS
Exploits0References4
Github Security Blog
Github Security Blog
added 2021/08/25 8:49 p.m.23 views

Multiple security issues including data race, buffer overflow, and uninitialized memory drop in arr

arr crate contains multiple security issues. Specifically, 1. It incorrectly implements Sync/Send bounds, which allows to smuggle non-Sync/Send types across the thread boundary. 2. Index and IndexMut implementation does not check the array bound. 3. Array::newfromtemplate drops uninitialized memo...

4.7CVSS6.1AI score0.00192EPSS
Exploits0References4Affected Software1
OSV
OSV
added 2021/08/25 8:48 p.m.10 views

GHSA-FHVJ-7F9P-W788 Multiple security issues including data race, buffer overflow, and uninitialized memory drop in arr

arr crate contains multiple security issues. Specifically, 1. It incorrectly implements Sync/Send bounds, which allows to smuggle non-Sync/Send types across the thread boundary. 2. Index and IndexMut implementation does not check the array bound. 3. Array::newfromtemplate drops uninitialized memo...

9.8CVSS6.7AI score0.01515EPSS
Exploits0References4
Github Security Blog
Github Security Blog
added 2021/08/25 8:48 p.m.24 views

Multiple security issues including data race, buffer overflow, and uninitialized memory drop in arr

arr crate contains multiple security issues. Specifically, 1. It incorrectly implements Sync/Send bounds, which allows to smuggle non-Sync/Send types across the thread boundary. 2. Index and IndexMut implementation does not check the array bound. 3. Array::newfromtemplate drops uninitialized memo...

9.8CVSS9AI score0.01476EPSS
Exploits0References4Affected Software1
OSV
OSV
added 2021/08/25 8:48 p.m.16 views

GHSA-36XW-HGFV-JWM7 Multiple security issues including data race, buffer overflow, and uninitialized memory drop in arr

arr crate contains multiple security issues. Specifically, 1. It incorrectly implements Sync/Send bounds, which allows to smuggle non-Sync/Send types across the thread boundary. 2. Index and IndexMut implementation does not check the array bound. 3. Array::newfromtemplate drops uninitialized memo...

9.8CVSS6.7AI score0.01515EPSS
Exploits0References4
Rows per page
Query Builder