PT-2021-24442 · Unknown · Noise Search
Published
2021-08-25
·
Updated
2021-08-25
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Name of the Vulnerable Software and Affected Versions:
noise search crate (affected versions not specified)
Description:
The issue arises from the unconditional implementation of Send/Sync for
MvccRwLock in the noise search crate. This can cause data races when types that are either !Send or !Sync, such as Rc<T> or Arc<Cell< >>, are contained inside MvccRwLock and sent across thread boundaries, potentially leading to memory corruption. Additionally, the safe APIs of MvccRwLock allow aliasing violations by permitting &T and LockResult<MutexGuard<Box<T>>> to co-exist in conflicting lifetime regions.Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Race Condition
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Noise Search