What is GHSA-83r8-p8v6-6gfm?

GHSA-83r8-p8v6-6gfm is a security advisory published by GitHub Security Advisories with High severity. Slock\u003cT\u003e allows sending non-Send types across thread boundaries

Why does GHSA-83r8-p8v6-6gfm have no CVE ID yet?

GitHub Security Advisories published this advisory directly to customers before NVD assigned a CVE ID. This is the embargo-window disclosure pattern — vendors notify customers on day 0; NVD's public record follows days to weeks later.

What is the CVSS v3 score of GHSA-83r8-p8v6-6gfm?

GHSA-83r8-p8v6-6gfm has a CVSS v3 base score of 8.1, published by GitHub Security Advisories.

Which products are affected by GHSA-83r8-p8v6-6gfm?

GHSA-83r8-p8v6-6gfm affects 1 product, including: rust/slock:\u003c 0.2.0.

GHSA-83r8-p8v6-6gfmHighCVSS 8.1Disclosed before NVD

Slock<T> allows sending non-Send types across thread boundaries

Vendor

GitHub Security Advisories

Published

August 25, 2021

Last Modified

June 13, 2023

📋 Description

Slock<T> unconditionally implements Send/Sync.

Affected versions of this crate allows sending non-Send types to other threads, which can lead to data races and memory corruption due to the data race.

🎯 Affected products1

rust/slock:< 0.2.0

🔗 References (3)

https://github.com/BrokenLamp/slock-rs/issues/2
https://rustsec.org/advisories/RUSTSEC-2020-0135.html
https://github.com/advisories/GHSA-83r8-p8v6-6gfm