PT-2021-8573 · Rust+2 · Rust+2

Ralf Jung · Published 2017-07-24 · Updated 2021-04-20 · CVE-2017-20004

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Rust versions prior to 1.19.0

Description The issue is related to a synchronization problem in the MutexGuard object within the standard library. This problem can lead to memory safety issues due to race conditions when MutexGuards are used across threads with any types.

Recommendations For versions prior to 1.19.0, update to version 1.19.0 or later to resolve the synchronization issue in the MutexGuard object.

Fix

Race Condition

Weakness Enumeration

CWE-362

Related Identifiers

ALT-PU-2017-1926

CVE-2017-20004

Affected Products

Alt Linux

Astra Linux

Rust

References · 9

• https://github.com/rust-lang/rust/pull/41624 · Patch
• https://github.com/rust-lang/rust/issues/41622 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2017-20004 · Security Note
• https://cve.org/CVERecord?id=CVE-2017-20004 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2017-20004 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2017-20004 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-20004 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2017-20004 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2017-20004 · Vendor Advisory