Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-wv4p-jp67-jr97

Опубликовано: 25 авг. 2021
Источник: github
Github: Прошло ревью
CVSS3: 5.5

Описание

Data races in magnetic

Affected versions of this crate unconditionally implemented Sync and Send traits for MPMCConsumer and MPMCProducer types. This allows users to send types that do not implement Send trait across thread boundaries, which can cause a data race. The flaw was corrected in the 2.0.1 release by adding T: Send bound to affected Sync/Send trait implementations.

Пакеты

Наименование

magnetic

rust
Затронутые версииВерсия исправления

< 2.0.1

2.0.1

EPSS

Процентиль: 17%
0.00054
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-362

Связанные уязвимости

CVSS3: 5.5
nvd
около 5 лет назад

An issue was discovered in the magnetic crate before 2.0.1 for Rust. MPMCConsumer and MPMCProducer allow cross-thread sending of a non-Send type.

EPSS

Процентиль: 17%
0.00054
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-362