PT-2020-17621
CVE-2020-36441
·
تاريخ النشر
2020-11-10
·
تاريخ التحديث
2021-08-25
الوصف من
CVSS 3.1
8.1
عاليةالمقاييسAV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
abox crate versions prior to 0.4.1
Description
An issue in the abox crate allows the implementation of
Send and Sync for AtomicBox<T> without requiring T: Send and T: Sync. This enables the creation of data races to T: !Sync and sending T: !Send to another thread, breaking Rust's compile-time thread safety guarantees and potentially leading to undefined behavior, such as memory corruption from data races.Recommendations
For abox crate versions prior to 0.4.1, update to version 0.4.1 or later, which includes the corrected implementation with added trait bounds
T: Send and T: Sync for Send and Sync impl respectively. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾