PT-2020-17629

CVE-2020-36449

·

Published

2020-12-18

·

Updated

2021-08-25

Description by

CVSS 3.1
8.1
High
MetricsAV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions kekbit crate versions prior to 0.3.4
Description The issue allows users to send H: !Send to other threads, which can potentially lead to data races and undefined behavior. This is because Send is implemented for ShmWriter<H> without requiring H: Send.
Recommendations For versions prior to 0.3.4, update to version 0.3.4 or later to resolve the issue. As a temporary workaround, consider restricting the use of ShmWriter<H> to prevent sending H: !Send to other threads until a patch is available.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Related identifiers
GHSA-G83M-67WH-WHPW
RUSTSEC-2020-0129
Found an issue in the description? Have something to add? Feel free to write us 👾