CVE-2020-36216

Medium

An issue was discovered in Input<R> in the eventio crate before 0.5.1 for Rust. Because a non-Send type can be sent to a different thread,…

mitre·CWE-662·Published 2021-01-22

CVSS

5.9

EPSS

0.01

KEV

Exploits

cve.orgen

183 chars

An issue was discovered in Input<R> in the eventio crate before 0.5.1 for Rust. Because a non-Send type can be sent to a different thread, a data race and memory corruption can occur.

NVDen

183 chars

An issue was discovered in Input<R> in the eventio crate before 0.5.1 for Rust. Because a non-Send type can be sent to a different thread, a data race and memory corruption can occur.

`Input<R>` implements `Send` without requiring `R: Send`. Affected versions of this crate allows users to send non-Send types to other threads, which can lead to undefined behavior such as data race and memory corruption. The flaw was corrected in version 0.5.1 by adding `R: Send` bound to the `Send` impl of `Input<R>`.

GHSAen

311 chars

Input<R> implements Send without requiring R: Send. Affected versions of this crate allows users to send non-Send types to other threads, which can lead to undefined behavior such as data race and memory corruption. The flaw was corrected in version 0.5.1 by adding R: Send bound to the Send impl of Input<R>.

NVDes

240 chars

Se detectó un problema en Input(R) en la crate eventio versiones anteriores a 0.5.1 para Rust. Debido a que un tipo non-Send puede ser enviado a un subproceso diferente, una carrera de datos y una corrupción de la memoria puede ocurrir

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	4.3	8.6	2.9	AV:N/AC:M/Au:N/C:N/I:N/A:P
3.1	Primary	NVD	5.9	2.2	3.6	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
3.1	Secondary	GHSA	5.9	—	—	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H