CVE catalog

CVE-2021-45710

rust-tokio: CVE-2021-45710

[CVE catalog]

Severity
Medium
Published
Source
[NVD] · [CVE record]
EPSS
1.24% · Oct 22, 2026

An issue was discovered in the tokio crate before 1.8.4, and 1.9.x through 1.13.x before 1.13.1, for Rust. In certain circumstances involving a closed oneshot channel, there is a data race and memory corruption.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianrust-tokiosid1.53.2-1fixed
Debianrust-tokioforky1.53.1-1fixed
Debianrust-tokiotrixie1.43.1-1fixed
Debianrust-tokiobookworm1.24.2-1fixed
Opensusegreetdtumbleweed0.8.0-2.1fixed
Susesccachelinux enterprise module for development tools 15 sp40.4.2~3-150400.3.3.1fixed
Susesccachelinux enterprise module for development tools 15 sp50.4.2~3-150400.3.3.1fixed
Opensusesccacheleap 15.40.4.2~3-150400.3.3.1fixed
Opensusesccacheleap 15.50.4.2~3-150400.3.3.1fixed
Opensusesccachetumbleweed0.2.15~git0.6b6d2f7-8.1fixed
Opensusetuigreettumbleweed0.7.1-3.1fixed
Suse389-dslinux enterprise module for server applications 15 sp31.4.4.19~git59.136fc84-150300.3.27.1fixed
Opensuse389-dsleap 15.31.4.4.19~git59.136fc84-150300.3.27.1fixed
Opensusetealdeertumbleweed1.5.0+0-1.1fixed
Suse389-dslinux enterprise module for server applications 15 sp42.0.16~git56.d15a0a7-150400.3.15.1fixed
Opensuse389-dsleap 15.42.0.16~git56.d15a0a7-150400.3.15.1fixed
Susesccachelinux enterprise module for development tools 15 sp30.3.0~git5.14a4b8b-150300.7.9.1fixed
Opensusesccacheleap 15.30.3.0~git5.14a4b8b-150300.7.9.1fixed
Opensuserustuptumbleweed1.24.3~git1.0a74fef5-2.1fixed
Opensuserustscantumbleweed2.0.1+0-1.1fixed
Opensusespotifydtumbleweed0.3.3-2.1fixed
Suserustuplinux enterprise module for development tools 15 sp31.25.1~0-150300.7.13.2fixed
Opensuserustupleap 15.31.25.1~0-150300.7.13.2fixed
Susekanidmpackage hub 15 sp61.3.3~git0.f075d13-bp156.4.1fixed
Opensusekanidmleap 15.61.3.3~git0.f075d13-bp156.4.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianrust-tokiosourcesid1.15.0-1not yet assignedNot reportedNot reported
Debianrust-tokiosourceforky1.15.0-1not yet assignedNot reportedNot reported
Debianrust-tokiosourcetrixie1.15.0-1not yet assignedNot reportedNot reported
Debianrust-tokiosourcebookworm1.15.0-1not yet assignedNot reportedNot reported
Opensusegreetdrpmtumbleweed0.8.0-2.1Not reportedOPENSUSE-SU-2024:11710-1Not reported
Susesccacherpmlinux enterprise module for development tools 15 sp40.4.2~3-150400.3.3.1Not reportedSUSE-SU-2023:3526-1Not reported
Susesccacherpmlinux enterprise module for development tools 15 sp50.4.2~3-150400.3.3.1Not reportedSUSE-SU-2023:3526-1Not reported
Opensusesccacherpmleap 15.40.4.2~3-150400.3.3.1Not reportedSUSE-SU-2023:3526-1Not reported
Opensusesccacherpmleap 15.50.4.2~3-150400.3.3.1Not reportedSUSE-SU-2023:3526-1Not reported
Opensusesccacherpmtumbleweed0.2.15~git0.6b6d2f7-8.1Not reportedOPENSUSE-SU-2024:11716-1Not reported
Opensusetuigreetrpmtumbleweed0.7.1-3.1Not reportedOPENSUSE-SU-2024:11717-1Not reported
Suse389-dsrpmlinux enterprise module for server applications 15 sp31.4.4.19~git59.136fc84-150300.3.27.1Not reportedSUSE-SU-2022:4124-1Not reported
Opensuse389-dsrpmleap 15.31.4.4.19~git59.136fc84-150300.3.27.1Not reportedSUSE-SU-2022:4124-1Not reported
Opensusetealdeerrpmtumbleweed1.5.0+0-1.1Not reportedOPENSUSE-SU-2024:11916-1Not reported
Suse389-dsrpmlinux enterprise module for server applications 15 sp42.0.16~git56.d15a0a7-150400.3.15.1Not reportedSUSE-SU-2022:3996-1Not reported
Opensuse389-dsrpmleap 15.42.0.16~git56.d15a0a7-150400.3.15.1Not reportedSUSE-SU-2022:3996-1Not reported
Susesccacherpmlinux enterprise module for development tools 15 sp30.3.0~git5.14a4b8b-150300.7.9.1Not reportedSUSE-SU-2022:4073-1Not reported
Opensusesccacherpmleap 15.30.3.0~git5.14a4b8b-150300.7.9.1Not reportedSUSE-SU-2022:4073-1Not reported
Opensuserustuprpmtumbleweed1.24.3~git1.0a74fef5-2.1Not reportedOPENSUSE-SU-2024:11715-1Not reported
Opensuserustscanrpmtumbleweed2.0.1+0-1.1Not reportedOPENSUSE-SU-2024:11714-1Not reported
Opensusespotifydrpmtumbleweed0.3.3-2.1Not reportedOPENSUSE-SU-2024:11722-1Not reported
Suserustuprpmlinux enterprise module for development tools 15 sp31.25.1~0-150300.7.13.2Not reportedSUSE-SU-2022:3949-1Not reported
Opensuserustuprpmleap 15.31.25.1~0-150300.7.13.2Not reportedSUSE-SU-2022:3949-1Not reported
Susekanidmrpmpackage hub 15 sp61.3.3~git0.f075d13-bp156.4.1Not reportedOPENSUSE-SU-2024:0294-1Not reported
Opensusekanidmrpmleap 15.61.3.3~git0.f075d13-bp156.4.1Not reportedOPENSUSE-SU-2024:0294-1Not reported

OpenFactory catalog packages

[openSUSE Tumbleweed]

  • [greetd-agreety]Unknown

    Source package: [greetd]

    Details (1)

    • 0.10.3-2.5 · x86_64 · tumbleweed

      Unknown · Fixed: 0.8.0-2.1

      Version impact unknown

      dsa · greetd · opensuse · tumbleweed

  • [greetd-branding-upstream]Unknown

    Source package: [greetd]

    Details (1)

    • 0.10.3-2.5 · noarch · tumbleweed

      Unknown · Fixed: 0.8.0-2.1

      Version impact unknown

      dsa · greetd · opensuse · tumbleweed

  • [greetd-fakegreet]Unknown

    Source package: [greetd]

    Details (1)

    • 0.10.3-2.5 · x86_64 · tumbleweed

      Unknown · Fixed: 0.8.0-2.1

      Version impact unknown

      dsa · greetd · opensuse · tumbleweed

  • [tealdeer-bash-completion]Unknown

    Source package: [tealdeer]

    Details (1)

    • 1.8.0-1.5 · noarch · tumbleweed

      Unknown · Fixed: 1.5.0+0-1.1

      Version impact unknown

      dsa · tealdeer · opensuse · tumbleweed

  • [tealdeer-fish-completion]Unknown

    Source package: [tealdeer]

    Details (1)

    • 1.8.0-1.5 · noarch · tumbleweed

      Unknown · Fixed: 1.5.0+0-1.1

      Version impact unknown

      dsa · tealdeer · opensuse · tumbleweed

  • [tealdeer-zsh-completion]Unknown

    Source package: [tealdeer]

    Details (1)

    • 1.8.0-1.5 · noarch · tumbleweed

      Unknown · Fixed: 1.5.0+0-1.1

      Version impact unknown

      dsa · tealdeer · opensuse · tumbleweed

  • [greetd]Fixed

    Source package: [greetd]

    Details (1)

    • 0.10.3-2.5 · x86_64 · tumbleweed

      Fixed · Fixed: 0.8.0-2.1

      dsa · greetd · opensuse · tumbleweed

  • [rustscan]Fixed

    Source package: [rustscan]

    Details (1)

    • 2.4.1+0-1.6 · x86_64 · tumbleweed

      Fixed · Fixed: 2.0.1+0-1.1

      dsa · rustscan · opensuse · tumbleweed

  • [rustup]Fixed

    Source package: [rustup]

    Details (1)

    • 1.29.0~0-1.1 · x86_64 · tumbleweed

      Fixed · Fixed: 1.24.3~git1.0a74fef5-2.1

      dsa · rustup · opensuse · tumbleweed

  • [sccache]Fixed

    Source package: [sccache]

    Details (1)

    • 0.17.0~1-2.1 · x86_64 · tumbleweed

      Fixed · Fixed: 0.2.15~git0.6b6d2f7-8.1

      dsa · sccache · opensuse · tumbleweed

  • [spotifyd]Fixed

    Source package: [spotifyd]

    Details (1)

    • 0.4.2-1.4 · x86_64 · tumbleweed

      Fixed · Fixed: 0.3.3-2.1

      dsa · spotifyd · opensuse · tumbleweed

  • [tealdeer]Fixed

    Source package: [tealdeer]

    Details (1)

    • 1.8.0-1.5 · x86_64 · tumbleweed

      Fixed · Fixed: 1.5.0+0-1.1

      dsa · tealdeer · opensuse · tumbleweed

  • [tuigreet]Fixed

    Source package: [tuigreet]

    Details (1)

    • 0.9.1-1.7 · x86_64 · tumbleweed

      Fixed · Fixed: 0.7.1-3.1

      dsa · tuigreet · opensuse · tumbleweed

[Debian 12 (Bookworm)]

  • [librust-tokio-dev]Fixed

    Source package: [rust-tokio]

    Details (2)

    • 1.24.2-1 · amd64 · bookworm

      Fixed · Fixed: 1.15.0-1

      dsa · rust-tokio · debian · bookworm; dsa · rust-tokio · debian · 12

    • 1.24.2-1 · arm64 · bookworm

      Fixed · Fixed: 1.15.0-1

      dsa · rust-tokio · debian · bookworm; dsa · rust-tokio · debian · 12

[Debian 13 (Trixie)]

  • [librust-tokio-dev]Fixed

    Source package: [rust-tokio]

    Details (2)

    • 1.43.1-1 · amd64 · trixie

      Fixed · Fixed: 1.15.0-1

      dsa · rust-tokio · debian · 13

    • 1.43.1-1 · arm64 · trixie

      Fixed · Fixed: 1.15.0-1

      dsa · rust-tokio · debian · 13

Observed:

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database]