In the standard library in Rust before 1.52.0, there is an optimization for joining strings that can cause uninitialized bytes to be exposed (or the program to crash) if the borrowed string changes after its length is checked.
CVSS Details
- CVSS 3.1 Base Score: 8.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rust-srcUpgrade rust-toolsetUpgrade rust-analysisUpgrade rustfmtUpgrade rust-gdbUpgrade rlsUpgrade cargo-docUpgrade rust-lldbUpgrade rust-std-staticUpgrade rust-docUpgrade cargoUpgrade rust-debugger-commonUpgrade rustUpgrade clippy | May 4, 2022 | Apr 14, 2021 |
| Alpine Linux | — | Upgrade rust | Mar 26, 2024 | Apr 14, 2021 |
| Amazon Linux Ami 2 | — | Upgrade rust-debugger-commonUpgrade cargo-docUpgrade rust-std-staticUpgrade rust-analysisUpgrade rust-debuginfoUpgrade rustfmtUpgrade clippyUpgrade rustUpgrade rlsUpgrade rust-srcUpgrade rust-docUpgrade rust-gdbUpgrade cargo | Sep 30, 2022 | Apr 14, 2021 |
| Centos_linux | — | Upgrade clippyUpgrade clippy-debuginfoUpgrade cargo-docUpgrade cargoUpgrade rlsUpgrade rust-gdbUpgrade rust-toolsetUpgrade rust-analysisUpgrade cargo-debuginfoUpgrade rust-docUpgrade rustfmt-debuginfoUpgrade rust-srcUpgrade rust-std-staticUpgrade rust-debugger-commonUpgrade rust-debugsourceUpgrade rust-lldbUpgrade rust-debuginfoUpgrade rustUpgrade rustfmtUpgrade rls-debuginfo | Aug 12, 2021 | Apr 14, 2021 |
| Debian | — | Upgrade rustc | Jul 30, 2024 | Apr 14, 2021 |
| Oracle_linux | — | Upgrade rust-gdbUpgrade rust-docUpgrade rustfmtUpgrade cargo-docUpgrade rust-toolsetUpgrade rust-analysisUpgrade rust-srcUpgrade rust-debugger-commonUpgrade rust-std-staticUpgrade rustUpgrade rust-lldbUpgrade rlsUpgrade cargoUpgrade clippy | Aug 12, 2021 | Dec 23, 2020 |
| Redhat_linux | — | Upgrade cargo-debuginfoUpgrade rust-lldbUpgrade clippy-debuginfoUpgrade rlsUpgrade rustfmt-debuginfoUpgrade clippyUpgrade rust-debugger-commonUpgrade rust-std-staticUpgrade rust-docUpgrade cargoUpgrade rustUpgrade rust-gdbUpgrade rust-srcUpgrade rls-debuginfoUpgrade cargo-docUpgrade rust-debugsourceUpgrade rust-debuginfoUpgrade rustfmtUpgrade rust-analysisUpgrade rust-toolset | Aug 12, 2021 | Apr 14, 2021 |
| Rocky_linux | — | Upgrade clippy-debuginfoUpgrade rust-debugsourceUpgrade cargo-debuginfoUpgrade rustfmtUpgrade rust-debuginfoUpgrade rustUpgrade rust-std-staticUpgrade rls-debuginfoUpgrade clippyUpgrade rustfmt-debuginfoUpgrade rust-docUpgrade rlsUpgrade rust-toolsetUpgrade rust-analysisUpgrade cargo | May 5, 2022 | Apr 14, 2021 |
| Ubuntu | — | Upgrade rustc | Nov 19, 2024 | Apr 14, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 14, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub