RUSTSEC-2022-0029

See a problem?
Please try reporting it to the source first.

Source

https://rustsec.org/advisories/RUSTSEC-2022-0029

Import Source

JSON Data

https://api.osv.dev/v1/vulns/RUSTSEC-2022-0029

Aliases

Published

2022-06-07T12:00:00Z

Modified

2023-11-08T04:22:56Z

Summary

`MsQueue` `push`/`pop` use the wrong orderings

Details

Affected versions of this crate use orderings which are too weak to support this data structure. It is likely this has caused memory corruption in the wild: https://github.com/crossbeam-rs/crossbeam/issues/97#issuecomment-412785919.

Database specific

{
    "license": "CC0-1.0"
}

References

Affected packages

{
    "affected_functions": null,
    "affects": {
        "arch": [],
        "functions": [],
        "os": []
    }
}