PT-2020-17632

CVE-2020-36451

·

تاريخ النشر

2020-11-14

·

تاريخ التحديث

2021-08-25

الوصف من

CVSS 3.1
8.1
عالية
المقاييسAV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions rcu cell crate through 2020-11-14
Description The issue allows users to send T: !Send to other threads while T is enclosed within RcuCell<T>, and allows users to concurrently access T: !Sync by using the APIs of RcuCell<T> that provide access to &T. This can result in memory corruption caused by data races.
Recommendations For versions of the rcu cell crate through 2020-11-14, consider restricting the use of RcuCell<T> to prevent sending T: !Send to other threads and concurrently accessing T: !Sync until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
قابلية الاستغلال
استغلال
التأثيرات
المورّدون
المنتجات المتأثرة
المعرّفات ذات الصلة
GHSA-686H-J8R8-WMFM
RUSTSEC-2020-0131
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾