CVE-2020-36463

HighCVSS 8.1/10Last modified Jun 17, 2026

Description

An issue was discovered in the multiqueue crate through 2020-12-25 for Rust. There are unconditional implementations of Send for InnerSend<RW, T>, InnerRecv<RW, T>, FutInnerSend<RW, T>, and FutInnerRecv<RW, T>.

Metrics

CVSS 3.1 8.1/10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-77

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/multiqueue/RUSTSEC-2020-0143.mdThird Party Advisory
https://rustsec.org/advisories/RUSTSEC-2020-0143.htmlExploit, Issue Tracking, Patch, Third Party Advisory
https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/multiqueue/RUSTSEC-2020-0143.mdThird Party Advisory
https://rustsec.org/advisories/RUSTSEC-2020-0143.htmlExploit, Issue Tracking, Patch, Third Party Advisory

Timeline

Published: Aug 8, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-364647.5An issue was discovered in the heapless crate before 0.6.1 for Rust. The IntoIter Clone implementation clones an entire underlying Vec witho CVE-2020-364657.5An issue was discovered in the generic-array crate before 0.13.3 for Rust. It violates soundness by using the arr! macro to extend lifetimes CVE-2020-364665.9An issue was discovered in the cgc crate through 2020-12-10 for Rust. Ptr implements Send and Sync for all types.CVE-2020-364675.9An issue was discovered in the cgc crate through 2020-12-10 for Rust. Ptr::get returns more than one mutable reference to the same object.CVE-2020-364685.9An issue was discovered in the cgc crate through 2020-12-10 for Rust. Ptr::write performs non-atomic write operations on an underlying point CVE-2020-364695.9An issue was discovered in the appendix crate through 2020-11-15 for Rust. For the generic K and V type parameters, Send and Sync are implem CVE-2020-36477.8u'Potential buffer overflow when accessing npu debugfs node "off"/"log" with large buffer size' in Snapdragon Compute, Snapdragon Industrial CVE-2020-364705.9An issue was discovered in the disrustor crate through 2020-12-17 for Rust. RingBuffer doe not properly limit the number of mutable referenc CVE-2020-364715.9An issue was discovered in the generator crate before 0.7.0 for Rust. It does not ensure that a function (for yielding values) has Send boun CVE-2020-364725.9An issue was discovered in the max7301 crate before 0.2.0 for Rust. The ImmediateIO and TransactionalIO types implement Sync for all Expande CVE-2020-364733.7UCWeb UC 12.12.3.1219 through 12.12.3.1226 uses cleartext HTTP, and thus man-in-the-middle attackers can discover visited URLs.CVE-2020-364749.8SafeCurl before 0.9.2 has a DNS rebinding vulnerability.