GHSA-WV4P-JP67-JR97中危已审查

Data races in magnetic

OSV 1.4.0 · github-reviewed · 修改于 2023-06-14 02:44

发布时间

2021-08-26 04:50

GitHub 审查时间

2021-08-20 02:56

NVD 发布时间

—

源文件

advisories/github-reviewed/2021/08/GHSA-wv4p-jp67-jr97/GHSA-wv4p-jp67-jr97.json

公告说明

Affected versions of this crate unconditionally implemented Sync and Send traits for MPMCConsumer and MPMCProducer types. This allows users to send types that do not implement Send trait across thread boundaries, which can cause a data race. The flaw was corrected in the 2.0.1 release by adding T: Send bound to affected Sync/Send trait implementations.

受影响的软件包

crates.io

magnetic

ECOSYSTEM

引入0修复2.0.1

标识信息

别名 / CVE

CVE-2020-35925

CWE

CWE-362

软件生态

crates.io

扩展资料

暂无扩展资料。

CVSS 评分

CVSS_V3

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

原始 OSV JSON

{
  "id": "GHSA-wv4p-jp67-jr97",
  "aliases": [
    "CVE-2020-35925"
  ],
  "details": "Affected versions of this crate unconditionally implemented Sync and Send traits for MPMCConsumer and MPMCProducer types. This allows users to send types that do not implement Send trait across thread boundaries, which can cause a data race. The flaw was corrected in the 2.0.1 release by adding T: Send bound to affected Sync/Send trait implementations.",
  "summary": "Data races in magnetic",
  "affected": [
    {
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.0.1"
            }
          ]
        }
      ],
      "package": {
        "name": "magnetic",
        "ecosystem": "crates.io"
      }
    }
  ],
  "modified": "2023-06-13T18:44:57Z",
  "severity": [
    {
      "type": "CVSS_V3",
      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
    }
  ],
  "published": "2021-08-25T20:50:05Z",
  "references": [
    {
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-35925",
      "type": "ADVISORY"
    },
    {
      "url": "https://github.com/johnshaw/magnetic/issues/9",
      "type": "WEB"
    },
    {
      "url": "https://github.com/johnshaw/magnetic",
      "type": "PACKAGE"
    },
    {
      "url": "https://rustsec.org/advisories/RUSTSEC-2020-0088.html",
      "type": "WEB"
    }
  ],
  "schema_version": "1.4.0",
  "database_specific": {
    "cwe_ids": [
      "CWE-362"
    ],
    "severity": "MODERATE",
    "github_reviewed": true,
    "nvd_published_at": null,
    "github_reviewed_at": "2021-08-19T18:56:44Z"
  }
}