GHSA-mpg5-fvwp-42m2

Source

https://github.com/advisories/GHSA-mpg5-fvwp-42m2

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/06/GHSA-mpg5-fvwp-42m2/GHSA-mpg5-fvwp-42m2.json

JSON Data

https://api.osv.dev/v1/vulns/GHSA-mpg5-fvwp-42m2

Aliases

RUSTSEC-2022-0002

Published

2022-06-16T23:52:24Z

Modified

2023-11-08T04:21:12.292742Z

Summary

Unsoundness in `dashmap` references

Details

Reference returned by some methods of Ref (and similar types) may outlive the Ref and escape the lock. This causes undefined behavior and may result in a segfault.

More information in dashmap#167 issue.

Database specific

{
    "nvd_published_at": null,
    "cwe_ids": [],
    "severity": "HIGH",
    "github_reviewed": true,
    "github_reviewed_at": "2022-06-16T23:52:24Z"
}

References

Affected packages

crates.io / dashmap

Package

Name: dashmap; View open source insights on deps.dev
Purl: pkg:cargo/dashmap

Affected ranges

Type: SEMVER
Events: Introduced

5.0.0

Fixed

5.1.0

Affected versions

5.*

5.0.0

Ecosystem specific

{
    "affected_functions": [
        "dashmap::mapref::multiple::RefMulti::key",
        "dashmap::mapref::multiple::RefMulti::pair",
        "dashmap::mapref::multiple::RefMulti::value",
        "dashmap::mapref::multiple::RefMutMulti::key",
        "dashmap::mapref::multiple::RefMutMulti::pair",
        "dashmap::mapref::multiple::RefMutMulti::pair_mut",
        "dashmap::mapref::one::Ref::key",
        "dashmap::mapref::one::Ref::pair",
        "dashmap::mapref::one::Ref::value",
        "dashmap::mapref::one::RefMut::key",
        "dashmap::mapref::one::RefMut::pair",
        "dashmap::mapref::one::RefMut::pair_mut",
        "dashmap::setref::multiple::RefMulti::key",
        "dashmap::setref::one::Ref::key"
    ]
}