{"id":"CVE-2020-36451","aliases":["RUSTSEC-2020-0131"],"url":"https://o3.security/vulnerability/CVE-2020-36451","summary":"Data races in rcu_cell","details":"Affected versions of this crate unconditionally implement Send/Sync for `RcuCell<T>`.\nThis allows users to send `T: !Send` to other threads (while `T` enclosed within `RcuCell<T>`), and allows users to concurrently access `T: !Sync` by using the APIs of `RcuCell<T>` that provide access to `&T`.\n\nThis can result in memory corruption caused by data races.","published":"2021-08-25T20:57:14Z","modified":"2023-11-08T04:03:45.643060Z","cvss":{"score":8.1,"severity":"HIGH","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"},"epss":null,"cisaKev":null,"exploitsKnown":1,"affectedPackages":[{"ecosystem":"crates.io","name":"rcu_cell","fixedVersion":"0.1.9"}],"fix":{"url":"https://github.com/Xudong-Huang/rcu_cell/pull/4","label":"Xudong-Huang/rcu_cell#4"},"references":[{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2020-36451"},{"type":"WEB","url":"https://github.com/Xudong-Huang/rcu_cell/issues/3"},{"type":"WEB","url":"https://github.com/Xudong-Huang/rcu_cell/pull/4"},{"type":"WEB","url":"https://github.com/Xudong-Huang/rcu_cell/pull/4/commits/1faf18eee11f14969b77ae0f76dcd9ebd437d0c2"},{"type":"PACKAGE","url":"https://github.com/Xudong-Huang/rcu_cell"},{"type":"WEB","url":"https://rustsec.org/advisories/RUSTSEC-2020-0131.html"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2023-11-08T04:03:45.643060Z"}}