3 matches found
SUSE CVE-2019-11366
An issue was discovered in atftpd in atftp 0.7.1. It does not lock the threadlistmutex mutex before assigning the current thread data structure. As a result, the daemon is vulnerable to a denial of service attack due to a NULL pointer dereference. If threaddata is NULL when assigned to current, a...
CVE-2020-35897: Concurrent Execution using Shared Resource with Improper Synchronization
An issue was discovered in the atom crate before 0.3.6 for Rust. An unsafe Send implementation allows a cross-thread data race...
PT-2020-17529
Name of the Vulnerable Software and Affected Versions atom crate versions prior to 0.3.6 Description The issue revolves around the atom crate's implementation of the Send trait, which incorrectly allows any arbitrary type to be sent across threads. This can potentially lead to use-after-free issu...