CVE-2020-36470: Data race in disrustor

August 25, 2021 (updated January 24, 2023)

An issue was discovered in the disrustor crate through 2020-12-17 for Rust. RingBuffer doe not properly limit the number of mutable references.

References

github.com/advisories/GHSA-w9r2-qrpm-4rmj
github.com/sklose/disrustor
github.com/sklose/disrustor/commit/0be7aed40adbac51a50a3b95c815349a40d79ca6
github.com/sklose/disrustor/issues/1
nvd.nist.gov/vuln/detail/CVE-2020-36470
rustsec.org/advisories/RUSTSEC-2020-0150.html

Detect and mitigate CVE-2020-36470 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →