{"id":"GHSA-3hxh-7jxm-59x4","summary":"AtomicBucket\u003cT\u003e unconditionally implements Send/Sync","details":"In the affected versions of the crate, `AtomicBucket\u003cT\u003e` unconditionally implements `Send`/`Sync` traits. Therefore, users can create a data race to the inner\n`T: !Sync` by using the `AtomicBucket::data_with()` API.\nSuch data races can potentially cause memory corruption or other undefined behavior.\n\nThe flaw was fixed in commit 8e6daab by adding appropriate Send/Sync bounds to the Send/Sync impl of struct `Block\u003cT\u003e` (which is a data type contained inside `AtomicBucket\u003cT\u003e`).\n","aliases":["CVE-2021-45704","GHSA-cwvc-87xq-pc5m","RUSTSEC-2021-0113"],"modified":"2023-11-08T04:07:22.868706Z","published":"2022-06-17T00:13:03Z","database_specific":{"github_reviewed_at":"2022-06-17T00:13:03Z","nvd_published_at":null,"cwe_ids":[],"severity":"MODERATE","github_reviewed":true},"references":[{"type":"WEB","url":"https://github.com/metrics-rs/metrics/issues/190"},{"type":"PACKAGE","url":"https://github.com/metrics-rs/metrics"},{"type":"WEB","url":"https://rustsec.org/advisories/RUSTSEC-2021-0113.html"}],"affected":[{"package":{"name":"metrics-util","ecosystem":"crates.io","purl":"pkg:cargo/metrics-util"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"0.7.0"}]}],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/06/GHSA-3hxh-7jxm-59x4/GHSA-3hxh-7jxm-59x4.json"}}],"schema_version":"1.9.0"}