CVSS 3.1
8.1 highCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:HCVE-2021-45710
High (8.1) in tokio tokio. EPSS 1.2% chance of exploitation in the next 30 days. Fixed in tokio 1.13.1, 1.8.4.
An issue was discovered in the tokio crate before 1.8.4, and 1.9.x through 1.13.x before 1.13.1, for Rust. In certain circumstances involving a closed oneshot channel, there is a data race and memory corruption.
Severity
- EPSS
- 1.2% chance of exploitation in the next 30 days; higher than 69% of CVEs (scores of 2026-10-31)
- CWE
- CWE-362
- Published
- Modified
- Record from
- the NVD, synced
Affected
- tokio:tokio
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-fg7r-2g4j-5cgr | crates.io | tokio | >=0.1.14 <1.8.4 | 1.8.4 |
| GHSA-fg7r-2g4j-5cgr | crates.io | tokio | >=1.9.0 <1.13.1 | 1.13.1 |
| RUSTSEC-2021-0124 | crates.io | tokio | >=0.1.14 <1.8.4 >=1.9.0 <1.13.1 | 1.8.4, 1.13.1 |