GitHub Advisoryadvisory · crates.io

GHSA-gvvv-w559-2hg6 Data races in scottqueue

HIGH Published 2021-08-25 Modified 2021-08-24 Official page ↗
Aliases
CVE-2020-36453
Ecosystem
crates.io
Packages
scottqueue
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-362
Reviewed
2021-08-18

Affected packages

• crates.io scottqueue: <= 0.1.0 (no fix yet)

Description

An issue was discovered in the scottqueue crate through 2020-11-15 for Rust. There are unconditional implementations of Send and Sync for Queue. This allows (1) creating data races to a `T: !Sync` and (2) sending `T: !Send` to other threads, resulting in memory corruption or other undefined behavior.

Related

Alias · CVE (1)

  • CVE-2020-36453 An issue was discovered in the scottqueue crate through 2020-11-15 for Rust. vulnerability

Weakness · CWE (1)

  • CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization weakness

References