GHSA-mxv6-q98x-h958

    Dashboard / Vulnerabilities / GHSA-mxv6-q98x-h958

    GHSA-mxv6-q98x-h958

    Published: 25 Aug 2021Last Modified: 8 Nov 2023

    Summary: Data races in model

    Details: `Shared` data structure in `model` crate implements `Send` and `Sync` traits regardless of the inner type. This allows safe Rust code to trigger a data race, which is undefined behavior in Rust. Users are advised to treat `Shared` as an unsafe type. It should not be used outside of the testing context, and care must be taken so that the testing code does not have a data race besides a race condition that is expected to be caught by the test.

    References: https://nvd.nist.gov/vuln/detail/CVE-2020-36460, https://github.com/spacejam/model/issues/3, https://github.com/spacejam/model, https://rustsec.org/advisories/RUSTSEC-2020-0140.html

    Affected packages

    Package

    Name: model

    Purl: pkg:cargo/model

    Affected ranges

    Type: SEMVER

    Events:

    Introduced- 0
    Fixed -None

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    GHSA-mxv6-q98x-h958 | CVE-DB