CVE-2021-38191
- Source
- https://cve.org/CVERecord?id=CVE-2021-38191
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2021-38191.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2021-38191
- Aliases
- Downstream
- Related
- Published
- 2021-08-08T06:15:08.967Z
- Modified
- 2026-02-11T14:33:11.846034Z
- Severity
-
- 5.9 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
- Summary
- [none]
- Details
-
An issue was discovered in the tokio crate before 1.8.1 for Rust. Upon a JoinHandle::abort, a Task may be dropped in the wrong thread.
- References
-
- https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/tokio/RUSTSEC-2021-0072.md
- https://rustsec.org/advisories/RUSTSEC-2021-0072.html
- https://rustsec.org/advisories/RUSTSEC-2021-0072.html
- https://rustsec.org/advisories/RUSTSEC-2021-0072.html
- https://rustsec.org/advisories/RUSTSEC-2021-0072.html
Affected packages
Git / github.com/tokio-rs/tokio
Affected versions
tokio-0.*
tokio-0.3.0
tokio-0.3.1
tokio-0.3.2
tokio-0.3.3
tokio-0.3.4
tokio-0.3.5
tokio-1.*
tokio-1.0.0
tokio-1.0.1
tokio-1.0.2
tokio-1.0.3
tokio-1.1.0
tokio-1.1.1
tokio-1.10.0
tokio-1.10.1
tokio-1.11.0
tokio-1.12.0
tokio-1.2.0
tokio-1.3.0
tokio-1.4.0
tokio-1.5.0
tokio-1.5.1
tokio-1.6.0
tokio-1.6.1
tokio-1.6.2
tokio-1.6.3
tokio-1.7.0
tokio-1.7.1
tokio-1.7.2
tokio-1.8.0
tokio-1.8.1
tokio-1.8.2
tokio-1.8.3
tokio-1.9.0
tokio-macros-0.*
tokio-macros-0.3.1
tokio-macros-1.*
tokio-macros-1.1.0
tokio-macros-1.2.0
tokio-macros-1.3.0
tokio-macros-1.4.0
tokio-macros-1.4.1
tokio-macros-1.5.0
tokio-stream-0.*
tokio-stream-0.1.1
tokio-stream-0.1.2
tokio-stream-0.1.3
tokio-stream-0.1.4
tokio-stream-0.1.5
tokio-stream-0.1.6
tokio-stream-0.1.7
tokio-test-0.*
tokio-test-0.4.1
tokio-test-0.4.2
tokio-util-0.*
tokio-util-0.5.0
tokio-util-0.5.1
tokio-util-0.6.0
tokio-util-0.6.1
tokio-util-0.6.2
tokio-util-0.6.3
tokio-util-0.6.4
tokio-util-0.6.5
tokio-util-0.6.6
tokio-util-0.6.7
tokio-util-0.6.8