PT-2020-17629
CVE-2020-36449
·
تاريخ النشر
2020-12-18
·
تاريخ التحديث
2021-08-25
الوصف من
CVSS 3.1
8.1
عاليةالمقاييسAV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
kekbit crate versions prior to 0.3.4
Description
The issue allows users to send
H: !Send to other threads, which can potentially lead to data races and undefined behavior. This is because Send is implemented for ShmWriter<H> without requiring H: Send.Recommendations
For versions prior to 0.3.4, update to version 0.3.4 or later to resolve the issue. As a temporary workaround, consider restricting the use of
ShmWriter<H> to prevent sending H: !Send to other threads until a patch is available. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾