OMGeeky/advisory-db
1
0
Fork 0
mirror of https://github.com/OMGeeky/advisory-db.git synced 2026-02-23 15:38:27 +01:00
Code Issues Packages Projects Releases Wiki Activity
Files
460ac8be0db4e17f517287b16a024dec0ba617e9
advisory-db/crates/aovec/RUSTSEC-2020-0099.md
Yechan Bae b724f12a5b Update CVE numbers (#777) 
* Update CVE numbers

* Fix RUSTSEC-2020-0093

* Add another alias for async-h1 crate
2021-02-25 20:00:25 -05:00

551 B
Raw Blame History 

[advisory]
id = "RUSTSEC-2020-0099"
package = "aovec"
aliases = ["CVE-2020-36207"]
date = "2020-12-10"
categories = ["memory-corruption", "thread-safety"]
keywords = ["concurrency"]

[versions]
patched = []

Aovec lacks bound on its Send and Sync traits allowing data races

aovec::Aovec<T> is a vector type that implements Send and Sync for all types T.

This allows non-Send types such as Rc and non-Sync types such as Cell to be used across thread boundaries which can trigger undefined behavior and memory corruption.