CVE-2017-20004 - CVE House

Status published Medium CVE-2017-20004

In the standard library in Rust before 1.19.0, there is...

5.9 CVSS

Vulnerability Description

In the standard library in Rust before 1.19.0, there is a synchronization problem in the MutexGuard object. MutexGuards can be used across threads with any types, allowing for memory safety issues through race conditions.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2017-20004

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from rust-lang

View All →

CVE-2024-43402

Rust OS Command Injection/Argument Injection vulnerability

High 8.2

CVE-2024-24576

Rusts's `std::process::Command` did not properly escape arguments of batch files on Windows

Critical 10

CVE-2023-40030

Malicious dependencies can inject arbitrary JavaScript into cargo-generated timing reports

Medium 6.1

CVE-2023-38497

Cargo not respecting umask when extracting crate archives

High 7.8

CVE-2022-46176

Cargo did not verify SSH host keys

Medium 5.3

Affected Vendor

rust-lang

View all reports →

Affected Software

rust

Vulnerable Versions:

Timeline

Official Publish: April 14th, 2021

Last Modified: August 5th, 2024

Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.