Ecosyste.ms: Advisories

Security Advisories: GSA_kwCzR0hTQS1wOW01LTNoajctY3A1cs4AAnD2

futures_task::noop_waker_ref can segfault due to dereferencing a NULL pointer

Affected versions of the crate used a UnsafeCell in thread-local storage to return a noop waker reference, assuming that the reference would never be returned from another thread.

This resulted in a segmentation fault crash if Waker::wake_by_ref() was called on a waker returned from another thread due to it attempting to dereference a pointer that wasn't accessible from the main thread.

Permalink: https://github.com/advisories/GHSA-p9m5-3hj7-cp5r
JSON: https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1wOW01LTNoajctY3A1cs4AAnD2
Source: GitHub Advisory Database
Origin: Unspecified
Severity: Moderate
Classification: General
Published: almost 2 years ago
Updated: 11 months ago

CVSS Score: 5.5
CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Identifiers: GHSA-p9m5-3hj7-cp5r, CVE-2020-35907
References:

• https://nvd.nist.gov/vuln/detail/CVE-2020-35907
• https://rustsec.org/advisories/RUSTSEC-2020-0061.html
• https://github.com/rust-lang/futures-rs/issues/2091
• https://github.com/advisories/GHSA-p9m5-3hj7-cp5r

Repository: https://github.com/rust-lang/futures-rs
Blast Radius: 25.7

Affected Packages