OMGeeky/advisory-db
1
0
Fork 0
mirror of https://github.com/OMGeeky/advisory-db.git synced 2026-02-13 21:18:11 +01:00
Code Issues Packages Projects Releases Wiki Activity
Files
3ee42e2f72b278f85baa54b22ff8211c8a1fff22
advisory-db/crates/aovec/RUSTSEC-2020-0099.md
Alexis Mousset 8c05fea5fa Add cvss information from nvd (#1085)
2021-10-19 16:14:35 -06:00

605 B
Raw Blame History 

[advisory]
id = "RUSTSEC-2020-0099"
package = "aovec"
aliases = ["CVE-2020-36207"]
cvss = "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H"
date = "2020-12-10"
categories = ["memory-corruption", "thread-safety"]
keywords = ["concurrency"]

[versions]
patched = []

Aovec lacks bound on its Send and Sync traits allowing data races

aovec::Aovec<T> is a vector type that implements Send and Sync for all types T.

This allows non-Send types such as Rc and non-Sync types such as Cell to be used across thread boundaries which can trigger undefined behavior and memory corruption.