ALPINE-CVE-2021-32810

Source
https://security.alpinelinux.org/vuln/CVE-2021-32810
Import Source
https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2021-32810.json
JSON Data
https://api.osv.dev/v1/vulns/ALPINE-CVE-2021-32810
Upstream
Published
2021-08-02T19:15:08Z
Modified
2026-11-03T06:32:58Z
Severity
  • 9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

crossbeam-deque is a package of work-stealing deques for building task schedulers when programming in Rust. In versions prior to 0.7.4 and 0.8.0, the result of the race condition is that one or more tasks in the worker queue can be popped twice instead of other tasks that are forgotten and never popped. If tasks are allocated on the heap, this can cause double free and a memory leak. If not, this still can cause a logical bug. Crates using Stealer::steal, Stealer::steal_batch, or Stealer::steal_batch_and_pop are affected by this issue. This has been fixed in crossbeam-deque 0.8.1 and 0.7.4.

References

Affected packages

Alpine:v3.15
firefox

Package

Name
firefox
Purl
pkg:apk/alpine/firefox?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
93.0-r0

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2021-32810.json"
firefox-esr

Package

Name
firefox-esr
Purl
pkg:apk/alpine/firefox-esr?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
91.2.0-r0

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2021-32810.json"
Alpine:v3.16
firefox

Package

Name
firefox
Purl
pkg:apk/alpine/firefox?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
93.0-r0

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2021-32810.json"
firefox-esr

Package

Name
firefox-esr
Purl
pkg:apk/alpine/firefox-esr?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
91.2.0-r0

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2021-32810.json"
thunderbird

Package

Name
thunderbird
Purl
pkg:apk/alpine/thunderbird?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
91.3.2-r0

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2021-32810.json"
Alpine:v3.17
firefox

Package

Name
firefox
Purl
pkg:apk/alpine/firefox?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
93.0-r0

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2021-32810.json"
firefox-esr

Package

Name
firefox-esr
Purl
pkg:apk/alpine/firefox-esr?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
91.2.0-r0

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2021-32810.json"
thunderbird

Package

Name
thunderbird
Purl
pkg:apk/alpine/thunderbird?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
91.3.2-r0

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2021-32810.json"
Alpine:v3.18
firefox

Package

Name
firefox
Purl
pkg:apk/alpine/firefox?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
93.0-r0

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2021-32810.json"
firefox-esr

Package

Name
firefox-esr
Purl
pkg:apk/alpine/firefox-esr?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
91.2.0-r0

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2021-32810.json"
thunderbird

Package

Name
thunderbird
Purl
pkg:apk/alpine/thunderbird?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
91.3.2-r0

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2021-32810.json"
Alpine:v3.19
firefox

Package

Name
firefox
Purl
pkg:apk/alpine/firefox?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
93.0-r0

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2021-32810.json"
firefox-esr

Package

Name
firefox-esr
Purl
pkg:apk/alpine/firefox-esr?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
91.2.0-r0

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2021-32810.json"
thunderbird

Package

Name
thunderbird
Purl
pkg:apk/alpine/thunderbird?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
91.3.2-r0

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2021-32810.json"
Alpine:v3.20
firefox

Package

Name
firefox
Purl
pkg:apk/alpine/firefox?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
93.0-r0

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2021-32810.json"
firefox-esr

Package

Name
firefox-esr
Purl
pkg:apk/alpine/firefox-esr?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
91.2.0-r0

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2021-32810.json"
thunderbird

Package

Name
thunderbird
Purl
pkg:apk/alpine/thunderbird?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
91.3.2-r0

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2021-32810.json"
Alpine:v3.21
firefox

Package

Name
firefox
Purl
pkg:apk/alpine/firefox?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
93.0-r0

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2021-32810.json"
firefox-esr

Package

Name
firefox-esr
Purl
pkg:apk/alpine/firefox-esr?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
91.2.0-r0

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2021-32810.json"
librewolf

Package

Name
librewolf
Purl
pkg:apk/alpine/librewolf?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
93.0-r0

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2021-32810.json"
thunderbird

Package

Name
thunderbird
Purl
pkg:apk/alpine/thunderbird?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
91.3.2-r0

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2021-32810.json"
Alpine:v3.22
firefox

Package

Name
firefox
Purl
pkg:apk/alpine/firefox?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
93.0-r0

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2021-32810.json"
firefox-esr

Package

Name
firefox-esr
Purl
pkg:apk/alpine/firefox-esr?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
91.2.0-r0

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2021-32810.json"
librewolf

Package

Name
librewolf
Purl
pkg:apk/alpine/librewolf?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
93.0-r0

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2021-32810.json"
thunderbird

Package

Name
thunderbird
Purl
pkg:apk/alpine/thunderbird?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
91.3.2-r0

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2021-32810.json"
Alpine:v3.23
firefox

Package

Name
firefox
Purl
pkg:apk/alpine/firefox?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
93.0-r0

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2021-32810.json"
firefox-esr

Package

Name
firefox-esr
Purl
pkg:apk/alpine/firefox-esr?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
91.2.0-r0

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2021-32810.json"
librewolf

Package

Name
librewolf
Purl
pkg:apk/alpine/librewolf?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
93.0-r0

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2021-32810.json"
thunderbird

Package

Name
thunderbird
Purl
pkg:apk/alpine/thunderbird?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
91.3.2-r0

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2021-32810.json"
Alpine:v3.24
librewolf

Package

Name
librewolf
Purl
pkg:apk/alpine/librewolf?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
93.0-r0

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2021-32810.json"