icon

We found results for “

WS-2020-0282

Good to know:

icon

Date: November 29, 2020

syncpool crate before 0.1.6 unconditionally implements Send for Bucket2. This allows sending non-Send types to other threads. This can lead to data races when non Send types like Cell<T> or Rc<T> are contained inside Bucket2 and sent across thread boundaries. The data races can potentially lead to memory corruption (as demonstrated in the PoC from the original report issue).

Language: RUST

Severity Score

Weakness Type (CWE)

Race Conditions

CWE-362

Top Fix

icon

Upgrade Version

Upgrade to version syncpool - 0.1.6

Learn More

Do you need more information?

Contact Us