In the standard library in Rust before 1.49.0, VecDeque::make_contiguous has a bug that pops the same element more than once under certain condition. This bug could result in a use-after-free or double free.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rust-analysisUpgrade rust-docUpgrade cargo-docUpgrade rust-srcUpgrade rustfmtUpgrade cargoUpgrade rlsUpgrade rust-std-staticUpgrade clippyUpgrade rust-lldbUpgrade rust-toolsetUpgrade rust-gdbUpgrade rust-debugger-commonUpgrade rust | May 4, 2022 | Apr 11, 2021 |
| Centos_linux | — | Upgrade rust-srcUpgrade rust-analysisUpgrade rust-debuginfoUpgrade rust-docUpgrade rls-debuginfoUpgrade rustfmtUpgrade rustfmt-debuginfoUpgrade rust-gdbUpgrade cargo-docUpgrade rust-toolsetUpgrade rust-lldbUpgrade clippy-debuginfoUpgrade rust-std-staticUpgrade rust-debugsourceUpgrade clippyUpgrade cargo-debuginfoUpgrade cargoUpgrade rustUpgrade rust-debugger-commonUpgrade rls | Jun 1, 2021 | Apr 11, 2021 |
| Debian | — | Upgrade rustc | Jul 30, 2024 | Apr 11, 2021 |
| Oracle Solaris | — | Upgrade developer/rust/cargo to version 1.53.0-11.4.39.0.1.107.0 on Solaris 11.4Upgrade developer/rust/rustc to version 1.53.0-11.4.39.0.1.107.0 on Solaris 11.4 | Nov 17, 2021 | Apr 11, 2021 |
| Oracle_linux | — | Upgrade clippyUpgrade rust-debugger-commonUpgrade rust-docUpgrade rust-std-staticUpgrade rlsUpgrade cargoUpgrade rustUpgrade rust-srcUpgrade cargo-docUpgrade rust-gdbUpgrade rust-analysisUpgrade rust-lldbUpgrade rust-toolsetUpgrade rustfmt | May 26, 2021 | Dec 7, 2020 |
| Redhat_linux | — | Upgrade rust-srcUpgrade rls-debuginfoUpgrade cargo-debuginfoUpgrade rust-docUpgrade clippyUpgrade rust-debugsourceUpgrade rustfmt-debuginfoUpgrade cargoUpgrade rust-lldbUpgrade rust-gdbUpgrade rust-toolsetUpgrade rustfmtUpgrade cargo-docUpgrade rustUpgrade rust-std-staticUpgrade rust-debuginfoUpgrade rust-analysisUpgrade rust-debugger-commonUpgrade clippy-debuginfoUpgrade rls | May 21, 2021 | Apr 11, 2021 |
| Rocky_linux | — | Upgrade rustfmtUpgrade rls-debuginfoUpgrade rust-toolsetUpgrade cargo-debuginfoUpgrade rustfmt-debuginfoUpgrade rust-docUpgrade rust-analysisUpgrade rlsUpgrade rust-std-staticUpgrade clippyUpgrade rust-debuginfoUpgrade rust-debugsourceUpgrade rustUpgrade clippy-debuginfoUpgrade cargo | Mar 12, 2024 | Apr 11, 2021 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Apr 11, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub