An issue was discovered in the kekbit crate before 0.3.4 for Rust. For ShmWriter<H>, Send is implemented without requiring H: Send.
The product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component.
Link | Tags |
---|---|
https://rustsec.org/advisories/RUSTSEC-2020-0129.html | exploit third party advisory patch |
https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/kekbit/RUSTSEC-2020-0129.md | third party advisory |