Lucene search
K

18 matches found

Github Security Blog
Github Security Blog
added 2021/08/25 9:0 p.m.13 views

Duplicate Advisory: Data races on syncpool

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-vp6r-mrq9-8f4h. This link is maintained to preserve external references. Original Description Affected versions of this crate unconditionally implements Send for Bucket2. This allows sending non-Send types to...

5.5AI score
Exploits0References5Affected Software1
OSV
OSV
added 2021/08/25 9:0 p.m.9 views

GHSA-R88H-6987-G79F Duplicate Advisory: Data races on syncpool

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-vp6r-mrq9-8f4h. This link is maintained to preserve external references. Original Description Affected versions of this crate unconditionally implements Send for Bucket2. This allows sending non-Send types to...

8.1CVSS7.5AI score0.00477EPSS
Exploits1References5
Github Security Blog
Github Security Blog
added 2021/08/25 9:0 p.m.20 views

Slock<T> allows sending non-Send types across thread boundaries

Slock unconditionally implements Send/Sync. Affected versions of this crate allows sending non-Send types to other threads, which can lead to data races and memory corruption due to the data race...

5AI score
Exploits0References3Affected Software1
Github Security Blog
Github Security Blog
added 2021/08/25 8:58 p.m.18 views

Data race in syncpool

Affected versions of this crate unconditionally implements Send for Bucket2. This allows sending non-Send types to other threads. This can lead to data races when non Send types like Cell or Rc are contained inside Bucket2 and sent across thread boundaries. The data races can potentially lead to...

8.1CVSS7.9AI score0.00477EPSS
Exploits1References6Affected Software1
Github Security Blog
Github Security Blog
added 2021/08/25 8:57 p.m.19 views

Data races in lever

An issue was discovered in the lever crate before 0.1.1 for Rust. AtomicBox implements the Send and Sync traits for all types T. This allows non-Send types such as Rc and non-Sync types such as Cell to be used across thread boundaries which can trigger undefined behavior and memory corruption...

8.1CVSS7.8AI score0.00477EPSS
Exploits1References6Affected Software1
OSV
OSV
added 2021/08/25 8:57 p.m.13 views

GHSA-9PP4-8P8V-G78W Data races in lever

An issue was discovered in the lever crate before 0.1.1 for Rust. AtomicBox implements the Send and Sync traits for all types T. This allows non-Send types such as Rc and non-Sync types such as Cell to be used across thread boundaries which can trigger undefined behavior and memory corruption...

8.1CVSS7.9AI score0.00477EPSS
Exploits1References6
Github Security Blog
Github Security Blog
added 2021/08/25 8:56 p.m.25 views

Data races in noise_search

Affected versions of the noisesearch crate unconditionally implement Send/Sync for MvccRwLock. This can lead to data races when types that are either !Send or !Sync e.g. Rc, Arc are contained inside MvccRwLock and sent across thread boundaries. The data races can potentially lead to memory...

8.1CVSS8AI score0.00477EPSS
Exploits1References4Affected Software1
OSV
OSV
added 2021/08/25 8:51 p.m.16 views

GHSA-3HJ2-HH36-HV9V Data race in va-ts

In the affected versions of this crate, Demuxer unconditionally implemented Send with no trait bounds on T. This allows sending a non-Send type T across thread boundaries, which can cause undefined behavior like unlocking a mutex from a thread that didn't lock the mutex, or memory corruption from...

5.9CVSS5.8AI score0.00301EPSS
Exploits1References4
Github Security Blog
Github Security Blog
added 2021/08/25 8:51 p.m.26 views

Data race in va-ts

In the affected versions of this crate, Demuxer unconditionally implemented Send with no trait bounds on T. This allows sending a non-Send type T across thread boundaries, which can cause undefined behavior like unlocking a mutex from a thread that didn't lock the mutex, or memory corruption from...

5.9CVSS5.9AI score0.00301EPSS
Exploits1References4Affected Software1
Github Security Blog
Github Security Blog
added 2021/08/25 8:50 p.m.27 views

Data races in gfwx

In the affected versions of this crate, ImageChunkMut unconditionally implements Send and Sync, allowing to create data races. This can result in a memory corruption or undefined behavior when non thread-safe types are moved and referenced across thread boundaries. The flaw was corrected in commi...

7CVSS6.7AI score0.00068EPSS
Exploits1References4Affected Software1
OSV
OSV
added 2020/12/22 12:0 p.m.16 views

RUSTSEC-2020-0114 `Demuxer` can carry non-Send types across thread boundaries

In the affected versions of this crate, Demuxer unconditionally implemented Send with no trait bounds on T. This allows sending a non-Send type T across thread boundaries, which can cause undefined behavior like unlocking a mutex from a thread that didn't lock the mutex, or memory corruption from...

5.9CVSS5.8AI score0.00301EPSS
Exploits1References3
RustSec
RustSec
added 2020/12/22 12:0 p.m.18 views

`Demuxer` can carry non-Send types across thread boundaries

In the affected versions of this crate, Demuxer unconditionally implemented Send with no trait bounds on T. This allows sending a non-Send type T across thread boundaries, which can cause undefined behavior like unlocking a mutex from a thread that didn't lock the mutex, or memory corruption from...

5.9CVSS2.7AI score0.00301EPSS
Exploits1Affected Software1
RustSec
RustSec
added 2020/12/10 12:0 p.m.15 views

MvccRwLock allows data races & aliasing violations

Affected versions of this crate unconditionally implement Send/Sync for MvccRwLock. This can lead to data races when types that are either !Send or !Sync e.g. Rc, Arc are contained inside MvccRwLock and sent across thread boundaries. The data races can potentially lead to memory corruption as...

8.1CVSS3AI score0.00477EPSS
Exploits1
RustSec
RustSec
added 2020/12/08 12:0 p.m.16 views

ImageChunkMut needs bounds on its Send and Sync traits

In the affected versions of this crate, ImageChunkMut unconditionally implements Send and Sync, allowing to create data races. This can result in a memory corruption or undefined behavior when non thread-safe types are moved and referenced across thread boundaries. The flaw was corrected in commi...

7CVSS1.9AI score0.00068EPSS
Exploits1Affected Software1
OSV
OSV
added 2020/11/29 12:0 p.m.15 views

RUSTSEC-2020-0142 Send bound needed on T (for Send impl of `Bucket2`)

Affected versions of this crate unconditionally implements Send for Bucket2. This allows sending non-Send types to other threads. This can lead to data races when non Send types like Cell or Rc are contained inside Bucket2 and sent across thread boundaries. The data races can potentially lead to...

8.1CVSS8.1AI score0.00477EPSS
Exploits1References3
OSV
OSV
added 2020/11/17 12:0 p.m.14 views

RUSTSEC-2020-0135 Slock<T> allows sending non-Send types across thread boundaries

Slock unconditionally implements Send/Sync. Affected versions of this crate allows sending non-Send types to other threads, which can lead to data races and memory corruption due to the data race...

8.1CVSS8.2AI score0.00513EPSS
Exploits1References3
RustSec
RustSec
added 2020/11/17 12:0 p.m.16 views

Slock<T> allows sending non-Send types across thread boundaries

Slock unconditionally implements Send/Sync. Affected versions of this crate allows sending non-Send types to other threads, which can lead to data races and memory corruption due to the data race...

8.1CVSS5AI score0.00513EPSS
Exploits1Affected Software1
OSV
OSV
added 2020/10/31 12:0 p.m.13 views

RUSTSEC-2020-0113 AtomicOption should have Send + Sync bound on its type argument.

In the affected versions of this crate, AtomicOption unconditionally implements Sync. This allows programmers to move non-Sync types across thread boundaries e.g. Rc, Arc, which can lead to data races and undefined behavior. It is also possible to send non-Send types like std::sync::MutexGuard to...

5.9CVSS5.6AI score0.00389EPSS
Exploits1References3
Rows per page
Query Builder