CVE-2020-36204

Medium

An issue was discovered in the im crate through 2020-11-09 for Rust. Because TreeFocus does not have bounds on its Send trait or Sync…

mitre·NVD-CWE-noinfo·Published 2021-01-22

CVSS

4.7

EPSS

0.00

KEV

Exploits

cve.orgen

163 chars

An issue was discovered in the im crate through 2020-11-09 for Rust. Because TreeFocus does not have bounds on its Send trait or Sync trait, a data race can occur.

NVDen

163 chars

An issue was discovered in the im crate through 2020-11-09 for Rust. Because TreeFocus does not have bounds on its Send trait or Sync trait, a data race can occur.

Affected versions of `im` contains `TreeFocus` that unconditionally implements `Send` and `Sync`. This allows a data race in safe Rust code if `TreeFocus` is extracted from `Focus` type. Typical users that only use `Focus` type are not affected.

GHSAen

160 chars

An issue was discovered in the im crate prior to 15.1.0 for Rust. Because TreeFocus does not have bounds on its Send trait or Sync trait, a data race can occur.

NVDes

176 chars

Se detectó un problema en la crate im hasta el 09-11-2020 para Rust. Debido a que TreeFocus no posee límites en su atributo Send o Sync, una carrera de datos puede ocurrir

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	1.9	3.4	2.9	AV:L/AC:M/Au:N/C:N/I:N/A:P
3.1	Primary	NVD	4.7	1.0	3.6	CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
3.1	Secondary	GHSA	4.7	—	—	CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H