~ / search / GHSA-9pp4-8p8v-g78w

GHSA-9pp4-8p8v-g78w

Data races in lever

Source: GitHub Advisory Database (reviewed) High CVE-2020-36457

Packages

EcosystemPackageAffectedFixed in
crates.io lever < 0.1.1 0.1.1

Details

As written in the advisory (Markdown source, shown as plain text).

An issue was discovered in the lever crate before 0.1.1 for Rust. AtomicBox<T> implements the Send and Sync traits for all types T. This allows non-Send types such as Rc and non-Sync types such as Cell to be used across thread boundaries which can trigger undefined behavior and memory corruption.

References

External links from the advisory. They lead to third-party sites.