OMGeeky/advisory-db
1
0
Fork 0
mirror of https://github.com/OMGeeky/advisory-db.git synced 2026-02-13 21:18:11 +01:00
Code Issues Packages Projects Releases Wiki Activity
Files
9e93a3df4a54e70f2539a2ecdc3d70beef64c856
advisory-db/crates/lever/RUSTSEC-2020-0137.md
Alexis Mousset 8c05fea5fa Add cvss information from nvd (#1085)
2021-10-19 16:14:35 -06:00

725 B
Raw Blame History 

[advisory]
id = "RUSTSEC-2020-0137"
package = "lever"
date = "2020-11-10"
url = "https://github.com/vertexclique/lever/issues/15"
categories = ["memory-corruption", "thread-safety"]
keywords = ["concurrency"]
aliases = ["CVE-2020-36457"]
cvss = "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"

[versions]
patched = [">= 0.1.1"]

AtomicBox lacks bound on its Send and Sync traits allowing data races

AtomicBox<T> is a Box type designed to be used across threads, however, it implements the Send and Sync traits for all types T.

This allows non-Send types such as Rc and non-Sync types such as Cell to be used across thread boundaries which can trigger undefined behavior and memory corruption.