CVE-2021-32810
Summary
| CVE | CVE-2021-32810 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2021-08-02 19:15:00 UTC |
| Updated | 2023-11-07 03:35:00 UTC |
| Description | crossbeam-deque is a package of work-stealing deques for building task schedulers when programming in Rust. In versions prior to 0.7.4 and 0.8.0, the result of the race condition is that one or more tasks in the worker queue can be popped twice instead of other tasks that are forgotten and never popped. If tasks are allocated on the heap, this can cause double free and a memory leak. If not, this still can cause a logical bug. Crates using `Stealer::steal`, `Stealer::steal_batch`, or `Stealer::steal_batch_and_pop` are affected by this issue. This has been fixed in crossbeam-deque 0.8.1 and 0.7.4. |
Risk And Classification
Problem Types: CWE-362
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Crossbeam Project | Crossbeam | All | All | All | All |
| Operating System | Fedoraproject | Fedora | 34 | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| [SECURITY] Fedora 34 Update: rust-weezl-0.1.5-3.fc34 - package-announce - Fedora Mailing-Lists | FEDORA | lists.fedoraproject.org | |
| [SECURITY] Fedora 34 Update: rust-tokei-12.0.4-7.fc34 - package-announce - Fedora Mailing-Lists | FEDORA | lists.fedoraproject.org | |
| [SECURITY] Fedora 34 Update: rust-sd-0.7.6-4.fc34 - package-announce - Fedora Mailing-Lists | FEDORA | lists.fedoraproject.org | |
| [SECURITY] Fedora 34 Update: rust-sd-0.7.6-4.fc34 - package-announce - Fedora Mailing-Lists | lists.fedoraproject.org | ||
| [SECURITY] Fedora 34 Update: rust-gettext-sys-0.21.2-1.fc34 - package-announce - Fedora Mailing-Lists | lists.fedoraproject.org | ||
| [SECURITY] Fedora 34 Update: rust-heatseeker-1.7.1-6.fc34 - package-announce - Fedora Mailing-Lists | lists.fedoraproject.org | ||
| [SECURITY] Fedora 34 Update: rust-diskonaut-0.11.0-5.fc34 - package-announce - Fedora Mailing-Lists | FEDORA | lists.fedoraproject.org | |
| [SECURITY] Fedora 34 Update: rust-git-version-0.3.4-1.fc34 - package-announce - Fedora Mailing-Lists | lists.fedoraproject.org | ||
| [SECURITY] Fedora 34 Update: rust-jql-2.9.4-2.fc34 - package-announce - Fedora Mailing-Lists | FEDORA | lists.fedoraproject.org | |
| [SECURITY] Fedora 34 Update: rust-dua-cli-2.11.1-3.fc34 - package-announce - Fedora Mailing-Lists | FEDORA | lists.fedoraproject.org | |
| [SECURITY] Fedora 34 Update: rust-weezl-0.1.5-3.fc34 - package-announce - Fedora Mailing-Lists | lists.fedoraproject.org | ||
| [SECURITY] Fedora 34 Update: rust-rav1e-0.4.1-4.fc34 - package-announce - Fedora Mailing-Lists | FEDORA | lists.fedoraproject.org | |
| [SECURITY] Fedora 34 Update: rust-dua-cli-2.11.1-3.fc34 - package-announce - Fedora Mailing-Lists | lists.fedoraproject.org | ||
| [SECURITY] Fedora 34 Update: rust-jql-2.9.4-2.fc34 - package-announce - Fedora Mailing-Lists | lists.fedoraproject.org | ||
| [SECURITY] Fedora 34 Update: rust-askalono-cli-0.4.3-5.fc34 - package-announce - Fedora Mailing-Lists | FEDORA | lists.fedoraproject.org | |
| [SECURITY] Fedora 34 Update: rust-askalono-cli-0.4.3-5.fc34 - package-announce - Fedora Mailing-Lists | lists.fedoraproject.org | ||
| [SECURITY] Fedora 34 Update: zola-0.12.2-6.fc34 - package-announce - Fedora Mailing-Lists | FEDORA | lists.fedoraproject.org | |
| [SECURITY] Fedora 34 Update: rust-tokei-12.0.4-7.fc34 - package-announce - Fedora Mailing-Lists | lists.fedoraproject.org | ||
| [SECURITY] Fedora 34 Update: rust-skim-0.9.4-4.fc34 - package-announce - Fedora Mailing-Lists | lists.fedoraproject.org | ||
| [SECURITY] Fedora 34 Update: rust-pulldown-cmark-0.8.0-4.fc34 - package-announce - Fedora Mailing-Lists | FEDORA | lists.fedoraproject.org | |
| Data race in crossbeam-deque · Advisory · crossbeam-rs/crossbeam · GitHub | CONFIRM | github.com | |
| [SECURITY] Fedora 34 Update: rust-heatseeker-1.7.1-6.fc34 - package-announce - Fedora Mailing-Lists | FEDORA | lists.fedoraproject.org | |
| [SECURITY] Fedora 34 Update: rust-git-version-0.3.4-1.fc34 - package-announce - Fedora Mailing-Lists | FEDORA | lists.fedoraproject.org | |
| [SECURITY] Fedora 34 Update: rust-gettext-sys-0.21.2-1.fc34 - package-announce - Fedora Mailing-Lists | FEDORA | lists.fedoraproject.org | |
| [SECURITY] Fedora 34 Update: zola-0.12.2-6.fc34 - package-announce - Fedora Mailing-Lists | lists.fedoraproject.org | ||
| [SECURITY] Fedora 34 Update: rust-pulldown-cmark-0.8.0-4.fc34 - package-announce - Fedora Mailing-Lists | lists.fedoraproject.org | ||
| [SECURITY] Fedora 34 Update: rust-rav1e-0.4.1-4.fc34 - package-announce - Fedora Mailing-Lists | lists.fedoraproject.org | ||
| [SECURITY] Fedora 34 Update: rust-diskonaut-0.11.0-5.fc34 - package-announce - Fedora Mailing-Lists | lists.fedoraproject.org | ||
| [SECURITY] Fedora 34 Update: rust-skim-0.9.4-4.fc34 - package-announce - Fedora Mailing-Lists | FEDORA | lists.fedoraproject.org | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 159412 Oracle Enterprise Linux Security Update for firefox (ELSA-2021-3755)
- 159428 Oracle Enterprise Linux Security Update for firefox (ELSA-2021-3791)
- 159429 Oracle Enterprise Linux Security Update for thunderbird (ELSA-2021-3838)
- 159430 Oracle Enterprise Linux Security Update for thunderbird (ELSA-2021-3841)
- 182439 Debian Security Update for rust-crossbeam-deque (CVE-2021-32810)
- 198534 Ubuntu Security Notification for Firefox Vulnerabilities (USN-5107-1)
- 198559 Ubuntu Security Notification for Thunderbird Vulnerabilities (USN-5132-1)
- 239664 Red Hat Update for firefox (RHSA-2021:3757)
- 239665 Red Hat Update for firefox (RHSA-2021:3756)
- 239666 Red Hat Update for firefox (RHSA-2021:3755)
- 239677 Red Hat Update for firefox (RHSA-2021:3791)
- 239682 Red Hat Update for thunderbird (RHSA-2021:3841)
- 239683 Red Hat Update for thunderbird (RHSA-2021:3840)
- 239684 Red Hat Update for thunderbird (RHSA-2021:3839)
- 239685 Red Hat Update for thunderbird (RHSA-2021:3838)
- 257116 CentOS Security Update for firefox (CESA-2021:3791)
- 257126 CentOS Security Update for thunderbird (CESA-2021:3841)
- 281774 Fedora Security Update for rust (FEDORA-2021-a5161737c3)
- 281800 Fedora Security Update for rust (FEDORA-2021-3cf88e44b4)
- 281801 Fedora Security Update for zola (FEDORA-2021-e37a366b00)
- 281802 Fedora Security Update for rust (FEDORA-2021-67d6c34e5b)
- 281803 Fedora Security Update for rust (FEDORA-2021-60f0e1bb35)
- 281804 Fedora Security Update for rust (FEDORA-2021-5e99655cca)
- 281805 Fedora Security Update for rust (FEDORA-2021-0f82e9d6d5)
- 281806 Fedora Security Update for rust (FEDORA-2021-2db6c84087)
- 281807 Fedora Security Update for rust (FEDORA-2021-9dc0bd0072)
- 281808 Fedora Security Update for rust (FEDORA-2021-32c9adf002)
- 281809 Fedora Security Update for rust (FEDORA-2021-af2eb94426)
- 281810 Fedora Security Update for rust (FEDORA-2021-e5ec6d55bf)
- 281811 Fedora Security Update for rust (FEDORA-2021-537541ceae)
- 281813 Fedora Security Update for rust (FEDORA-2021-64e9e98eb4)
- 281825 Fedora Security Update for newsboat (FEDORA-2021-79ce3cb64a)
- 296066 Oracle Solaris 11.4 Support Repository Update (SRU) 40.107.3 Missing (CPUOCT2021)
- 353982 Amazon Linux Security Advisory for thunderbird : ALAS2-2022-1818
- 375943 Mozilla Firefox ESR Multiple Vulnerabilities (MFSA2021-45)
- 375945 Mozilla Firefox Multiple Vulnerabilities (MFSA2021-43)
- 375959 Mozilla Thunderbird Multiple Vulnerabilities (MFSA2021-47)
- 502069 Alpine Linux Security Update for firefox-esr
- 502081 Alpine Linux Security Update for firefox
- 502381 Alpine Linux Security Update for thunderbird
- 503632 Alpine Linux Security Update for thunderbird
- 503634 Alpine Linux Security Update for thunderbird
- 503650 Alpine Linux Security Update for thunderbird
- 503669 Alpine Linux Security Update for thunderbird
- 503852 Alpine Linux Security Update for firefox
- 504812 Alpine Linux Security Update for firefox-esr
- 506260 Alpine Linux Security Update for thunderbird
- 751210 SUSE Enterprise Linux Security Update for MozillaFirefox (SUSE-SU-2021:3331-1)
- 751226 OpenSUSE Security Update for MozillaFirefox (openSUSE-SU-2021:3331-1)
- 751230 SUSE Enterprise Linux Security Update for MozillaFirefox (SUSE-SU-2021:3446-1)
- 751237 OpenSUSE Security Update for MozillaFirefox (openSUSE-SU-2021:3451-1)
- 751246 OpenSUSE Security Update for MozillaFirefox (openSUSE-SU-2021:1367-1)
- 751542 OpenSUSE Security Update for MozillaThunderbird (openSUSE-SU-2021:4150-1)
- 751566 OpenSUSE Security Update for MozillaThunderbird (openSUSE-SU-2021:1635-1)
- 940182 AlmaLinux Security Update for firefox (ALSA-2021:3755)
- 940268 AlmaLinux Security Update for thunderbird (ALSA-2021:3838)
- 960080 Rocky Linux Security Update for firefox (RLSA-2021:3755)