Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-mxv6-q98x-h958

Опубликовано: 25 авг. 2021
Источник: github
Github: Прошло ревью
CVSS3: 8.1

Описание

Data races in model

Shared data structure in model crate implements Send and Sync traits regardless of the inner type. This allows safe Rust code to trigger a data race, which is undefined behavior in Rust.

Users are advised to treat Shared as an unsafe type. It should not be used outside of the testing context, and care must be taken so that the testing code does not have a data race besides a race condition that is expected to be caught by the test.

Пакеты

Наименование

model

rust
Затронутые версииВерсия исправления

<= 0.1.2

Отсутствует

EPSS

Процентиль: 58%
0.00363
Низкий

8.1 High

CVSS3

Дефекты

CWE-362
CWE-843

Связанные уязвимости

CVSS3: 8.1
nvd
больше 4 лет назад

An issue was discovered in the model crate through 2020-11-10 for Rust. The Shared data structure has an implementation of the Send and Sync traits without regard for the inner type.

EPSS

Процентиль: 58%
0.00363
Низкий

8.1 High

CVSS3

Дефекты

CWE-362
CWE-843