RUSTSEC-2020-0059: 
Rust vulnerability analysis and mitigation

An issue was discovered in the futures-util crate before 0.3.7 for Rust, identified as RUSTSEC-2020-0059 and CVE-2020-35905. The vulnerability involves MutexGuard::map, which can cause a data race for certain closure situations in safe code (NVD CVE).

The vulnerability is related to concurrent execution using shared resources with improper synchronization, classified as CWE-362. The issue received a CVSS v3.1 Base Score of 4.7 (MEDIUM) with the vector string CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H, indicating local access requirements and high availability impact (NVD CVE).

The vulnerability primarily affects the availability of the system through potential data races. The CVSS scoring indicates no impact on confidentiality or integrity, but a high impact on availability when successfully exploited (NVD CVE).

The vulnerability requires local access with high attack complexity and low privileges. No user interaction is needed for exploitation. The attack vector is local, meaning the attacker needs local access to the vulnerable system to exploit this vulnerability (NVD CVE).

The recommended mitigation is to upgrade the futures-util crate to version 0.3.7 or higher, which contains the fix for this vulnerability (Snyk Advisory).