CVE Daily

CVE-2020-35928

An issue was discovered in the concread crate before 0.2.6 for Rust. Attackers c...

Medium CVSS 4.7

Overview

An issue was discovered in the concread crate before 0.2.6 for Rust. Attackers can cause an ARCache<K,V> data race by sending types that do not implement Send/Sync.

CWE: CWE-362 Published: 2020-12-31T09:15:16.507
Risk analysis

This vulnerability is rated 🟡 MEDIUM.

  • CVSS: 4.7 (MEDIUM)
  • Detected tags: none (tag impact: LOW)

Recommended actions:

  • Prioritize remediation based on business criticality and exposure.
  • Limit exposure and increase monitoring until fixed.

Recommended tools

Tags