First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2020-36462

HighCVSS 8.1/10Last modified Jun 17, 2026

Description

An issue was discovered in the syncpool crate before 0.1.6 for Rust. There is an unconditional implementation of Send for Bucket2.

Metrics

CVSS 3.1 8.1/10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/syncpool/RUSTSEC-2020-0142.mdThird Party Advisory
https://rustsec.org/advisories/RUSTSEC-2020-0142.htmlExploit, Issue Tracking, Patch, Third Party Advisory
https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/syncpool/RUSTSEC-2020-0142.mdThird Party Advisory
https://rustsec.org/advisories/RUSTSEC-2020-0142.htmlExploit, Issue Tracking, Patch, Third Party Advisory

Timeline

Published: Aug 8, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-364638.1An issue was discovered in the multiqueue crate through 2020-12-25 for Rust. There are unconditional implementations of Send for InnerSend<R CVE-2020-364647.5An issue was discovered in the heapless crate before 0.6.1 for Rust. The IntoIter Clone implementation clones an entire underlying Vec witho CVE-2020-364657.5An issue was discovered in the generic-array crate before 0.13.3 for Rust. It violates soundness by using the arr! macro to extend lifetimes CVE-2020-364665.9An issue was discovered in the cgc crate through 2020-12-10 for Rust. Ptr implements Send and Sync for all types.CVE-2020-364675.9An issue was discovered in the cgc crate through 2020-12-10 for Rust. Ptr::get returns more than one mutable reference to the same object.CVE-2020-364685.9An issue was discovered in the cgc crate through 2020-12-10 for Rust. Ptr::write performs non-atomic write operations on an underlying point CVE-2020-364695.9An issue was discovered in the appendix crate through 2020-11-15 for Rust. For the generic K and V type parameters, Send and Sync are implem CVE-2020-36477.8u'Potential buffer overflow when accessing npu debugfs node "off"/"log" with large buffer size' in Snapdragon Compute, Snapdragon Industrial CVE-2020-364705.9An issue was discovered in the disrustor crate through 2020-12-17 for Rust. RingBuffer doe not properly limit the number of mutable referenc CVE-2020-364715.9An issue was discovered in the generator crate before 0.7.0 for Rust. It does not ensure that a function (for yielding values) has Send boun CVE-2020-364725.9An issue was discovered in the max7301 crate before 0.2.0 for Rust. The ImmediateIO and TransactionalIO types implement Sync for all Expande CVE-2020-364733.7UCWeb UC 12.12.3.1219 through 12.12.3.1226 uses cleartext HTTP, and thus man-in-the-middle attackers can discover visited URLs.