Files
advisory-db/crates/crossbeam/RUSTSEC-2022-0029.md
2023-06-13 15:10:24 +02:00

555 B

[advisory]
id = "RUSTSEC-2022-0029"
package = "crossbeam"
date = "2022-06-07"
categories = ["thread-safety", "memory-corruption"]
url = "https://github.com/crossbeam-rs/crossbeam/pull/98"
aliases = ["GHSA-rwf4-gx62-rqfw"]

[versions]
patched = [">= 0.3.0"]

MsQueue push/pop use the wrong orderings

Affected versions of this crate use orderings which are too weak to support this data structure. It is likely this has caused memory corruption in the wild: https://github.com/crossbeam-rs/crossbeam/issues/97#issuecomment-412785919.