GitHub Advisoryadvisory · crates.io

GHSA-g489-xrw3-3v8w Data races in aovec

HIGH Published 2021-08-25 Modified 2021-08-19 Official page ↗
Aliases
CVE-2020-36207
Ecosystem
crates.io
Packages
aovec
Severity
High
CVSS vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-662, CWE-787
Reviewed
2021-08-19

Affected packages

• crates.io aovec: <= 1.1.0 (no fix yet)

Description

An issue was discovered in the aovec crate through 2020-12-10 for Rust. Because Aovec does not have bounds on its Send trait or Sync trait, a data race and memory corruption can occur.

Related

Alias · CVE (1)

  • CVE-2020-36207 An issue was discovered in the aovec crate through 2020-12-10 for Rust. vulnerability

Weakness · CWE (2)

  • CWE-662 Improper Synchronization weakness
  • CWE-787 Out-of-bounds Write weakness

References