{"id":"CVE-2020-36469","aliases":["RUSTSEC-2020-0149"],"url":"https://o3.security/vulnerability/CVE-2020-36469","summary":"Data races in appendix","details":"The `appendix` crate implements a key-value mapping data structure called\n`Index<K, V>` that is stored on disk. The crate allows for any type to inhabit\nthe generic `K` and `V` type parameters and implements Send and Sync for them\nunconditionally.\n\nUsing a type that is not marked as `Send` or `Sync` with `Index` can allow it\nto be used across multiple threads leading to data races. Additionally using\nreference types for the keys or values will lead to the segmentation faults\nin the crate's code.","published":"2021-08-25T20:57:02Z","modified":"2023-11-08T04:03:46.748675Z","cvss":{"score":5.9,"severity":"MEDIUM","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"},"epss":null,"cisaKev":null,"exploitsKnown":1,"affectedPackages":[{"ecosystem":"crates.io","name":"appendix","fixedVersion":null}],"fix":null,"references":[{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2020-36469"},{"type":"WEB","url":"https://github.com/krl/appendix/issues/6"},{"type":"PACKAGE","url":"https://github.com/krl/appendix"},{"type":"WEB","url":"https://rustsec.org/advisories/RUSTSEC-2020-0149.html"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2023-11-08T04:03:46.748675Z"}}