{"id":"GHSA-rwf4-gx62-rqfw","summary":"`MsQueue` `push`/`pop` use the wrong orderings","details":"Affected versions of this crate use orderings which are too weak to support this data structure.\nIt is likely this has caused memory corruption in the wild: \u003chttps://github.com/crossbeam-rs/crossbeam/issues/97#issuecomment-412785919\u003e.\n","aliases":["RUSTSEC-2022-0029"],"modified":"2023-11-08T04:22:56.497356Z","published":"2022-06-08T22:28:27Z","database_specific":{"github_reviewed_at":"2022-06-08T22:28:27Z","nvd_published_at":null,"cwe_ids":[],"severity":"MODERATE","github_reviewed":true},"references":[{"type":"WEB","url":"https://github.com/crossbeam-rs/crossbeam/issues/97#issuecomment-412785919"},{"type":"WEB","url":"https://github.com/crossbeam-rs/crossbeam/pull/98"},{"type":"PACKAGE","url":"https://github.com/crossbeam-rs/crossbeam"},{"type":"WEB","url":"https://rustsec.org/advisories/RUSTSEC-2022-0029.html"}],"affected":[{"package":{"name":"crossbeam","ecosystem":"crates.io","purl":"pkg:cargo/crossbeam"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"0.3.0"}]}],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/06/GHSA-rwf4-gx62-rqfw/GHSA-rwf4-gx62-rqfw.json"}}],"schema_version":"1.9.0"}