CVE-2020-35928 - An issue was discovered in the concread crate before 0.2.6 for Rust

Back Back to CVE browser

MEDIUM

An issue was discovered in the concread crate before 0.2.6 for Rust

Published Dec 31, 2020

4.7

MEDIUM

CVSS 3.1

EPSS 0.24%

Description

An issue was discovered in the concread crate before 0.2.6 for Rust. Attackers can cause an ARCache<K,V> data race by sending types that do not implement Send/Sync.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-362

Race Condition

References (5)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-1567
Advisory
https://github.com/advisories/GHSA-4xj5-vv9x-63jp
Advisory
https://github.com/kanidm/concread/issues/48
https://nvd.nist.gov/vuln/detail/CVE-2020-35928
https://rustsec.org/advisories/RUSTSEC-2020-0092.html
x_refsource_MISCExploitThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-1567		Advisory
https://github.com/advisories/GHSA-4xj5-vv9x-63jp		Advisory
https://github.com/kanidm/concread/issues/48
https://nvd.nist.gov/vuln/detail/CVE-2020-35928
https://rustsec.org/advisories/RUSTSEC-2020-0092.html		x_refsource_MISCExploitThird Party Advisory