Skip to content

Unsoundness in `dashmap` references

High severity GitHub Reviewed Published Jun 16, 2022 to the GitHub Advisory Database • Updated Jun 13, 2023

Package

cargo dashmap (Rust)

Affected versions

= 5.0.0

Patched versions

5.1.0

Description

Reference returned by some methods of Ref (and similar types) may outlive the Ref and escape the lock.
This causes undefined behavior and may result in a segfault.

More information in dashmap#167 issue.

References

Published to the GitHub Advisory Database Jun 16, 2022
Reviewed Jun 16, 2022
Last updated Jun 13, 2023

Severity

High

Weaknesses

No CWEs

CVE ID

No known CVE

GHSA ID

GHSA-mpg5-fvwp-42m2

Source code

Credits

Checking history
See something to contribute? Suggest improvements for this vulnerability.