CVE-2020-36216 - An issue was discovered in Input<R> in the eventio crate before 0.5.1 for Rust

Back Back to CVE browser

MEDIUM

An issue was discovered in Input<R> in the eventio crate before 0.5.1 for Rust

Published Jan 22, 2021

5.9

MEDIUM

CVSS 3.1

EPSS 1.07%

Description

An issue was discovered in Input<R> in the eventio crate before 0.5.1 for Rust. Because a non-Send type can be sent to a different thread, a data race and memory corruption can occur.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-662

CWE-787

Out-of-bounds Write

References (4)

https://github.com/advisories/GHSA-69vj-xx27-g45w
Advisory
https://github.com/petabi/eventio/issues/33
https://nvd.nist.gov/vuln/detail/CVE-2020-36216
https://rustsec.org/advisories/RUSTSEC-2020-0108.html
x_refsource_MISCExploitVendor Advisory

Link	Providers	Tags
https://github.com/advisories/GHSA-69vj-xx27-g45w		Advisory
https://github.com/petabi/eventio/issues/33
https://nvd.nist.gov/vuln/detail/CVE-2020-36216
https://rustsec.org/advisories/RUSTSEC-2020-0108.html		x_refsource_MISCExploitVendor Advisory