OMGeeky/advisory-db
1
0
Fork 0
mirror of https://github.com/OMGeeky/advisory-db.git synced 2026-01-06 19:49:45 +01:00
Code Issues Packages Projects Releases Wiki Activity
Files
d8701fad2d40aeca8e8564692f14a8d7c30a5136
advisory-db/crates/atom/RUSTSEC-2020-0044.md
Yechan Bae a19397dee4 Add thread-safety category to relevant bugs
2021-01-30 23:02:50 -05:00

546 B
Raw Blame History 

[advisory]
id = "RUSTSEC-2020-0044"
package = "atom"
aliases = ["CVE-2020-35897"]
date = "2020-09-21"
informational = "unsound"
url = "https://github.com/slide-rs/atom/issues/13"
categories = ["thread-safety"]

[versions]
patched = [">= 0.3.6"]

Unsafe Send implementation in Atom allows data races

The atom crate contains a security issue revolving around its implementation of the Send trait. It incorrectly allows any arbitrary type to be sent across threads potentially leading to use-after-free issues through memory races.