GitHub Advisoryadvisory · crates.io

GHSA-4xj5-vv9x-63jp Data races in concread

MEDIUM Published 2021-08-25 Modified 2021-08-19 Official page ↗
Aliases
CVE-2020-35928
Ecosystem
crates.io
Packages
concread
Severity
Moderate
CVSS vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-362
Reviewed
2021-08-19

Affected packages

• crates.io concread: < 0.2.6 → fixed in 0.2.6

Description

An issue was discovered in the concread crate before 0.2.6 for Rust. Attackers can cause an ARCache data race by sending types that do not implement Send/Sync.

Related

Alias · CVE (1)

  • CVE-2020-35928 An issue was discovered in the concread crate before 0.2.6 for Rust. vulnerability

Weakness · CWE (1)

  • CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization weakness

References