icon

We found results for “

WS-2020-0235

Good to know:

icon

Date: January 24, 2020

0.1.0--0.3.1 are affected versions of the futures had an unsound Sync implementation on the FuturesUnordered structure, which used a Cell for interior mutablity without any code to handle synchronized access to the underlying task list’s length and head safely. This could of lead to data corruption since two threads modifying the list at once could see incorrect values due to the lack of access synchronization. The issue was fixed in 0.3.2 by adding access synchronization code around insertion of tasks into the list.

Language: RUST

Severity Score

Severity Score

Weakness Type (CWE)

Code

CWE-17

Top Fix

icon

Upgrade Version

Upgrade to version 0.3.2

Learn More

CVSS v3.1

Base Score:
Attack Vector (AV): LOCAL
Attack Complexity (AC): LOW
Privileges Required (PR): NONE
User Interaction (UI): REQUIRED
Scope (S): UNCHANGED
Confidentiality (C): NONE
Integrity (I): NONE
Availability (A): HIGH

Do you need more information?

Contact Us