GHSA-3hxh-7jxm-59x4

Suggest an improvement
Source
https://github.com/advisories/GHSA-3hxh-7jxm-59x4
Import Source
https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/06/GHSA-3hxh-7jxm-59x4/GHSA-3hxh-7jxm-59x4.json
JSON Data
https://api.osv.dev/v1/vulns/GHSA-3hxh-7jxm-59x4
Aliases
Published
2022-06-17T00:13:03Z
Modified
2023-11-08T04:07:22.868706Z
Summary
AtomicBucket<T> unconditionally implements Send/Sync
Details

In the affected versions of the crate, AtomicBucket<T> unconditionally implements Send/Sync traits. Therefore, users can create a data race to the inner T: !Sync by using the AtomicBucket::data_with() API. Such data races can potentially cause memory corruption or other undefined behavior.

The flaw was fixed in commit 8e6daab by adding appropriate Send/Sync bounds to the Send/Sync impl of struct Block<T> (which is a data type contained inside AtomicBucket<T>).

Database specific 
{
    "nvd_published_at": null,
    "severity": "MODERATE",
    "github_reviewed_at": "2022-06-17T00:13:03Z",
    "github_reviewed": true,
    "cwe_ids": []
}
References

Affected packages

crates.io / metrics-util

Package

Name
metrics-util
View open source insights on deps.dev
Purl
pkg:cargo/metrics-util

Affected ranges

Type
SEMVER
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.7.0