CVE-2021-45710

An issue was discovered in the tokio crate before 1.8.4, and 1.9.x through 1.13.x before 1.13.1, for Rust. In certain circumstances involving a closed oneshot channel, there is a data race and memory corruption.

References

Affected packages

Git / github.com/tokio-rs/tokio

Affected ranges

Type

GIT

Repo

https://github.com/tokio-rs/tokio

Events

Introduced

62f34e15ce6294f6273c33548772a70d76f2ea61

Fixed

2273eb1a1a9c9cfa2bd998c2215239e6fe1ed57a

Introduced

b280c6dcd72b2607cde68d2b2192480932f48ecb

Fixed

2a3c803dd1c487868eabcef547066952cc07624e

Database specific

{
    "cpe": "cpe:2.3:a:tokio:tokio:*:*:*:*:*:rust:*:*",
    "extracted_events": [
        {
            "introduced": "0.1.14"
        },
        {
            "fixed": "1.8.4"
        },
        {
            "introduced": "1.9.0"
        },
        {
            "fixed": "1.13.1"
        }
    ],
    "source": "CPE_RANGE"
}

Affected versions

tokio-0.*

tokio-0.1.19

tokio-0.2.0

tokio-0.2.0-alpha.1

tokio-0.2.0-alpha.3

tokio-0.2.0-alpha.4

tokio-0.2.0-alpha.5

tokio-0.2.0-alpha.6

tokio-0.2.1

tokio-0.2.10

tokio-0.2.11

tokio-0.2.12

tokio-0.2.13

tokio-0.2.14

tokio-0.2.15

tokio-0.2.16

tokio-0.2.17

tokio-0.2.18

tokio-0.2.19

tokio-0.2.2

tokio-0.2.20

tokio-0.2.21

tokio-0.2.22

tokio-0.2.3

tokio-0.2.4

tokio-0.2.5

tokio-0.2.6

tokio-0.2.7

tokio-0.2.8

tokio-0.2.9

tokio-0.3.0

tokio-0.3.1

tokio-0.3.2

tokio-0.3.3

tokio-0.3.4

tokio-0.3.5

tokio-1.*

tokio-1.0.0

tokio-1.0.1

tokio-1.1.0

tokio-1.10.0

tokio-1.11.0

tokio-1.12.0

tokio-1.13.0

tokio-1.2.0

tokio-1.3.0

tokio-1.4.0

tokio-1.5.0

tokio-1.6.0

tokio-1.7.0

tokio-1.8.0

tokio-1.8.1

tokio-1.8.2

tokio-1.8.3

tokio-buf-0.*

tokio-buf-0.1.1

tokio-macros-0.*

tokio-macros-0.2.1

tokio-macros-0.2.4

tokio-macros-0.2.5

tokio-macros-0.3.1

tokio-macros-1.*

tokio-macros-1.1.0

tokio-macros-1.2.0

tokio-macros-1.4.0

tokio-macros-1.4.1

tokio-macros-1.5.0

tokio-macros-1.5.1

tokio-stream-0.*

tokio-stream-0.1.1

tokio-stream-0.1.2

tokio-stream-0.1.3

tokio-stream-0.1.4

tokio-stream-0.1.5

tokio-stream-0.1.6

tokio-sync-0.*

tokio-sync-0.1.5

tokio-test-0.*

tokio-test-0.4.1

tokio-test-0.4.2

tokio-threadpool-0.*

tokio-threadpool-0.1.14

tokio-util-0.*

tokio-util-0.5.0

tokio-util-0.5.1

tokio-util-0.6.0

tokio-util-0.6.1

tokio-util-0.6.2

tokio-util-0.6.3

tokio-util-0.6.4

tokio-util-0.6.5

tokio-util-0.6.6

tokio-util-0.6.7

tokio-util-0.6.8

Database specific

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2021-45710.json"