{"id":"CVE-2021-45704","aliases":["GHSA-cwvc-87xq-pc5m","RUSTSEC-2021-0113"],"url":"https://o3.security/vulnerability/CVE-2021-45704","summary":"AtomicBucket<T> unconditionally implements Send/Sync","details":"In the affected versions of the crate, `AtomicBucket<T>` unconditionally implements `Send`/`Sync` traits. Therefore, users can create a data race to the inner\n`T: !Sync` by using the `AtomicBucket::data_with()` API.\nSuch data races can potentially cause memory corruption or other undefined behavior.\n\nThe flaw was fixed in commit 8e6daab by adding appropriate Send/Sync bounds to the Send/Sync impl of struct `Block<T>` (which is a data type contained inside `AtomicBucket<T>`).\n","published":"2022-06-17T00:13:03Z","modified":"2023-11-08T04:07:22.868706Z","cvss":null,"epss":{"score":0.00741,"percentile":0.51526,"asOf":"2026-08-23"},"cisaKev":null,"exploitsKnown":0,"affectedPackages":[{"ecosystem":"crates.io","name":"metrics-util","fixedVersion":"0.7.0"}],"fix":null,"references":[{"type":"WEB","url":"https://github.com/metrics-rs/metrics/issues/190"},{"type":"PACKAGE","url":"https://github.com/metrics-rs/metrics"},{"type":"WEB","url":"https://rustsec.org/advisories/RUSTSEC-2021-0113.html"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2023-11-08T04:07:22.868706Z"}}