GHSA-rwf4-gx62-rqfw

Suggest an improvement
Source
https://github.com/advisories/GHSA-rwf4-gx62-rqfw
Import Source
https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/06/GHSA-rwf4-gx62-rqfw/GHSA-rwf4-gx62-rqfw.json
JSON Data
https://api.osv.dev/v1/vulns/GHSA-rwf4-gx62-rqfw
Aliases
Published
2022-06-08T22:28:27Z
Modified
2023-11-08T04:22:56Z
Summary
`MsQueue` `push`/`pop` use the wrong orderings
Details

Affected versions of this crate use orderings which are too weak to support this data structure. It is likely this has caused memory corruption in the wild: https://github.com/crossbeam-rs/crossbeam/issues/97#issuecomment-412785919.

Database specific 
{
    "cwe_ids":  [],
    "github_reviewed":  true,
    "github_reviewed_at":  "2022-06-08T22:28:27Z",
    "nvd_published_at":  null,
    "severity":  "MODERATE"
}
References

Affected packages

crates.io / crossbeam

Package

Name
crossbeam
View open source insights on deps.dev
Purl
pkg:cargo/crossbeam

Affected ranges

Type
SEMVER
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0.3.0

Database specific

source 
"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/06/GHSA-rwf4-gx62-rqfw/GHSA-rwf4-gx62-rqfw.json"