CVE-2020-36441

Name of the Vulnerable Software and Affected Versions abox crate versions prior to 0.4.1

Description An issue in the abox crate allows the implementation of Send and Sync for AtomicBox<T> without requiring T: Send and T: Sync. This enables the creation of data races to T: !Sync and sending T: !Send to another thread, breaking Rust's compile-time thread safety guarantees and potentially leading to undefined behavior, such as memory corruption from data races.

Recommendations For abox crate versions prior to 0.4.1, update to version 0.4.1 or later, which includes the corrected implementation with added trait bounds T: Send and T: Sync for Send and Sync impl respectively.