CVE-2020-36219

Medium

An issue was discovered in the atomic-option crate through 2020-10-31 for Rust. Because AtomicOption<T> implements Sync unconditionally, a…

mitre·NVD-CWE-noinfo·Published 2021-01-22

CVSS

5.9

EPSS

0.01

KEV

Exploits

cve.orgen

159 chars

An issue was discovered in the atomic-option crate through 2020-10-31 for Rust. Because AtomicOption<T> implements Sync unconditionally, a data race can occur.

NVDen

159 chars

An issue was discovered in the atomic-option crate through 2020-10-31 for Rust. Because AtomicOption<T> implements Sync unconditionally, a data race can occur.

In the affected versions of this crate, `AtomicOption<T>` unconditionally implements `Sync`. This allows programmers to move non-Sync types across thread boundaries (e.g. `Rc<T>`, `Arc<Cell<T>>`), which can lead to data races and undefined behavior. It is also possible to send non-Send types like `std::sync::MutexGuard` to other threads, which can lead to undefined behavior.

GHSAen

159 chars

An issue was discovered in the atomic-option crate through 2020-10-31 for Rust. Because AtomicOption<T> implements Sync unconditionally, a data race can occur.

NVDes

198 chars

Se detectó un problema en la crate atomic-option versiones hasta el 31-10-2020 para Rust. Debido a que AtomicOption(T) implementa una Sync incondicionalmente, una carrera de datos puede ocurrir

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	4.3	8.6	2.9	AV:N/AC:M/Au:N/C:N/I:N/A:P
3.1	Primary	NVD	5.9	2.2	3.6	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
3.1	Secondary	GHSA	5.9	—	—	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H