Lucene search
K

4614 matches found

OSV
OSV
added 2020/12/18 12:0 p.m.21 views

RUSTSEC-2020-0127 SyncRef's clone() and debug() allow data races

Affected versions of this crate unconditionally implement Sync for SyncRef. This definition allows data races if &T is accessible through &SyncRef. SyncRef derives Clone and Debug, and the default implementations of those traits access &T by invoking T::clone & T::fmt. It is possible to create da...

8.1CVSS8AI score0.01059EPSS
Exploits1References4
Microsoft Security Update
Microsoft Security Update
added 2020/12/17 9:0 p.m.9 views

Azure File Sync Agent v11.1 Release – November 2020 (KB4539951)

Update for Azure File Sync agent version 11.1.0.0. For more details, see the associated Microsoft Knowledge Base article...

3.9AI score
Exploits0
Microsoft Security Update
Microsoft Security Update
added 2020/12/17 8:31 p.m.12 views

Azure File Sync Agent v11.1 Release – November 2020 (KB4539951)

Update for Azure File Sync agent version 11.1.0.0. For more details, see the associated Microsoft Knowledge Base article...

3.9AI score
Exploits0
Microsoft Security Update
Microsoft Security Update
added 2020/12/17 8:29 p.m.8 views

Azure File Sync Agent v11.1 Release – November 2020 (KB4539951)

Update for Azure File Sync agent version 11.1.0.0. For more details, see the associated Microsoft Knowledge Base article...

3.9AI score
Exploits0
RustSec
RustSec
added 2020/12/17 12:0 p.m.16 views

RingBuffer can create multiple mutable references and cause data races

The RingBuffer type retrieves mutable references from the DataProvider in a non-atomic manner, potentially allowing the creation of multiple mutable references. RingBuffer also implements the Send and Sync traits for all types T. This allows undefined behavior from the aliased mutable references ...

5.9CVSS3.3AI score0.00978EPSS
Exploits1Affected Software1
OSV
OSV
added 2020/12/17 12:0 p.m.14 views

RUSTSEC-2020-0150 RingBuffer can create multiple mutable references and cause data races

The RingBuffer type retrieves mutable references from the DataProvider in a non-atomic manner, potentially allowing the creation of multiple mutable references. RingBuffer also implements the Send and Sync traits for all types T. This allows undefined behavior from the aliased mutable references ...

5.9CVSS5.7AI score0.00978EPSS
Exploits1References3
Microsoft KB
Microsoft KB
added 2020/12/17 12:0 a.m.22 views

Azure File Sync Agent v11.1 Release – November 2020

Azure File Sync Agent v11.1 Release – November 2020 Introduction This article describes the improvements and issues that are fixed in the Azure File Sync Agent v11.1 release that is dated November 2020. Additionally, this article contains installation instructions for the update. Improvements and...

6.8AI score
Exploits0
OpenVAS
OpenVAS
added 2020/12/15 12:0 a.m.22 views

Fedora: Security Advisory for rclone (FEDORA-2020-3b0bb05117)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS7.1AI score0.01336EPSS
Exploits1References2
OSV
OSV
added 2020/12/14 11:1 a.m.3 views

SUSE-SU-2020:3781-1 Security update for SUSE Manager Server 4.1

This update fixes the following issues: image-sync-formula: - Send imagesynced event to master postgresql-jdbc: - Address CVE-2020-13692 bsc1172079 pxe-yomi-image-sle15: - Update config.sh based on last JeOS template - Update JEOSLOCALE to enUS.UTF-8 - Support configurlname for user provided...

7.7CVSS7.8AI score0.04094EPSS
Exploits0References24
OSV
OSV
added 2020/12/10 12:0 p.m.16 views

RUSTSEC-2020-0099 Aovec<T> lacks bound on its Send and Sync traits allowing data races

aovec::Aovec is a vector type that implements Send and Sync for all types T. This allows non-Send types such as Rc and non-Sync types such as Cell to be used across thread boundaries which can trigger undefined behavior and memory corruption...

7CVSS6.8AI score0.00285EPSS
Exploits0References2
RustSec
RustSec
added 2020/12/10 12:0 p.m.17 views

Aovec<T> lacks bound on its Send and Sync traits allowing data races

aovec::Aovec is a vector type that implements Send and Sync for all types T. This allows non-Send types such as Rc and non-Sync types such as Cell to be used across thread boundaries which can trigger undefined behavior and memory corruption...

7CVSS2.7AI score0.00285EPSS
Exploits0
OSV
OSV
added 2020/12/10 12:0 p.m.20 views

RUSTSEC-2020-0141 MvccRwLock allows data races & aliasing violations

Affected versions of this crate unconditionally implement Send/Sync for MvccRwLock. This can lead to data races when types that are either !Send or !Sync e.g. Rc, Arc are contained inside MvccRwLock and sent across thread boundaries. The data races can potentially lead to memory corruption as...

8.1CVSS8.2AI score0.0124EPSS
Exploits1References3
RustSec
RustSec
added 2020/12/10 12:0 p.m.17 views

MvccRwLock allows data races & aliasing violations

Affected versions of this crate unconditionally implement Send/Sync for MvccRwLock. This can lead to data races when types that are either !Send or !Sync e.g. Rc, Arc are contained inside MvccRwLock and sent across thread boundaries. The data races can potentially lead to memory corruption as...

8.1CVSS3AI score0.0124EPSS
Exploits1
OSV
OSV
added 2020/12/10 12:0 p.m.12 views

RUSTSEC-2020-0148 Multiple soundness issues in `Ptr`

Affected versions of this crate have the following issues: 1. Ptr implements Send and Sync for all types, this can lead to data races by sending non-thread safe types across threads. 2. Ptr::get violates mutable alias rules by returning multiple mutable references to the same object. 3. Ptr::writ...

5.9CVSS5.5AI score0.00978EPSS
Exploits3References3
RustSec
RustSec
added 2020/12/10 12:0 p.m.14 views

Multiple soundness issues in `Ptr`

Affected versions of this crate have the following issues: 1. Ptr implements Send and Sync for all types, this can lead to data races by sending non-thread safe types across threads. 2. Ptr::get violates mutable alias rules by returning multiple mutable references to the same object. 3. Ptr::writ...

5.9CVSS2AI score0.00978EPSS
Exploits2
RustSec
RustSec
added 2020/12/08 12:0 p.m.22 views

ImageChunkMut needs bounds on its Send and Sync traits

In the affected versions of this crate, ImageChunkMut unconditionally implements Send and Sync, allowing to create data races. This can result in a memory corruption or undefined behavior when non thread-safe types are moved and referenced across thread boundaries. The flaw was corrected in commi...

7CVSS1.9AI score0.00344EPSS
Exploits1Affected Software1
RustSec
RustSec
added 2020/12/08 12:0 p.m.18 views

ArcGuard's Send and Sync should have bounds on RC

Affected versions of this crate implement Send/Sync for ArcGuard with no trait bounds on RC. This allows users to send RC: !Send to other threads and also allows users to concurrently access Rc: !Sync from multiple threads. This can result in memory corruption from data race or other undefined...

8.1CVSS3.1AI score0.00766EPSS
Exploits0
OSV
OSV
added 2020/12/08 12:0 p.m.22 views

RUSTSEC-2020-0118 Future<T> lacks bounds on Send and Sync.

tinyfuture contains a light-weight implementation of Futures. The Future type it has lacked bound on its Send and Sync traits. This allows for a bug where non-thread safe types such as Cell can be used in Futures and cause data races in concurrent programs. The flaw was corrected in commit c79191...

8.1CVSS7.9AI score0.00766EPSS
Exploits0References3
OSV
OSV
added 2020/12/08 12:0 p.m.12 views

RUSTSEC-2020-0104 ImageChunkMut needs bounds on its Send and Sync traits

In the affected versions of this crate, ImageChunkMut unconditionally implements Send and Sync, allowing to create data races. This can result in a memory corruption or undefined behavior when non thread-safe types are moved and referenced across thread boundaries. The flaw was corrected in commi...

7CVSS6.9AI score0.00344EPSS
Exploits1References3
OSV
OSV
added 2020/12/08 12:0 p.m.19 views

RUSTSEC-2020-0124 ArcGuard's Send and Sync should have bounds on RC

Affected versions of this crate implement Send/Sync for ArcGuard with no trait bounds on RC. This allows users to send RC: !Send to other threads and also allows users to concurrently access Rc: !Sync from multiple threads. This can result in memory corruption from data race or other undefined...

8.1CVSS8.2AI score0.00766EPSS
Exploits0References3
Rows per page
Query Builder