~ / search / GHSA-gvvv-w559-2hg6

GHSA-gvvv-w559-2hg6

Data races in scottqueue

Source: GitHub Advisory Database (reviewed) High CVE-2020-36453

Packages

EcosystemPackageAffectedFixed in
crates.io scottqueue <= 0.1.0 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

An issue was discovered in the scottqueue crate through 2020-11-15 for Rust. There are unconditional implementations of Send and Sync for Queue<T>. This allows (1) creating data races to a `T: !Sync` and (2) sending `T: !Send` to other threads, resulting in memory corruption or other undefined behavior.

References

External links from the advisory. They lead to third-party sites.