Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-rmff-f8w9-c9rm

Опубликовано: 25 авг. 2021
Источник: github
Github: Прошло ревью
CVSS3: 5.9

Описание

Data races in max7301

The ImmediateIO and TransactionalIO types implement Sync for all contained Expander<EI> types regardless of if the Expander itself is safe to use across threads.

As the IO types allow retrieving the Expander, this can lead to non-thread safe types being sent across threads as part of the Expander leading to data races.

Пакеты

Наименование

max7301

rust
Затронутые версииВерсия исправления

< 0.2.0

0.2.0

EPSS

Процентиль: 51%
0.0028
Низкий

5.9 Medium

CVSS3

Дефекты

CWE-362

Связанные уязвимости

CVSS3: 5.9
nvd
больше 4 лет назад

An issue was discovered in the max7301 crate before 0.2.0 for Rust. The ImmediateIO and TransactionalIO types implement Sync for all Expander<EI> types that they contain.

EPSS

Процентиль: 51%
0.0028
Низкий

5.9 Medium

CVSS3

Дефекты

CWE-362