CVE-2020-36207

High

An issue was discovered in the aovec crate through 2020-12-10 for Rust. Because Aovec<T> does not have bounds on its Send trait or Sync…

mitre·CWE-662·Published 2021-01-22

CVSS

7.0

EPSS

0.00

KEV

Exploits

cve.orgen

187 chars

An issue was discovered in the aovec crate through 2020-12-10 for Rust. Because Aovec<T> does not have bounds on its Send trait or Sync trait, a data race and memory corruption can occur.

NVDen

187 chars

An issue was discovered in the aovec crate through 2020-12-10 for Rust. Because Aovec<T> does not have bounds on its Send trait or Sync trait, a data race and memory corruption can occur.

`aovec::Aovec<T>` is a vector type that implements `Send` and `Sync` for all types `T`. This allows non-Send types such as `Rc` and non-Sync types such as `Cell` to be used across thread boundaries which can trigger undefined behavior and memory corruption.

GHSAen

187 chars

An issue was discovered in the aovec crate through 2020-12-10 for Rust. Because Aovec<T> does not have bounds on its Send trait or Sync trait, a data race and memory corruption can occur.

NVDes

214 chars

Se detectó un problema en la crate aovec hasta el 10-12-2020 para Rust. Debido a que Aovec(T) no posee límites en su atributo Send o atributo Sync, una carrera de datos y corrupción de la memoria puede ocurrir

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	4.4	3.4	6.4	AV:L/AC:M/Au:N/C:P/I:P/A:P
3.1	Primary	NVD	7.0	1.0	5.9	CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
3.1	Secondary	GHSA	7.0	—	—	CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H