In the standard library in Rust before 1.50.0, read_to_end() does not validate the return value from Read in an unsafe context. This bug could lead to a buffer overflow.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rust-gdbUpgrade rust-srcUpgrade rust-analysisUpgrade rustfmtUpgrade rust-docUpgrade rust-toolsetUpgrade cargoUpgrade cargo-docUpgrade rust-debugger-commonUpgrade rust-lldbUpgrade rust-std-staticUpgrade rlsUpgrade rustUpgrade clippy | May 4, 2022 | Apr 11, 2021 |
| Centos_linux | — | Upgrade rustfmt-debuginfoUpgrade rustfmtUpgrade rust-analysisUpgrade clippyUpgrade rust-docUpgrade rustUpgrade rust-debugger-commonUpgrade rlsUpgrade rust-srcUpgrade cargo-docUpgrade rust-std-staticUpgrade cargoUpgrade cargo-debuginfoUpgrade rls-debuginfoUpgrade rust-gdbUpgrade rust-lldbUpgrade rust-debugsourceUpgrade rust-toolsetUpgrade clippy-debuginfoUpgrade rust-debuginfo | Aug 12, 2021 | Apr 11, 2021 |
| Debian | — | Upgrade rustc | Jul 30, 2024 | Apr 11, 2021 |
| Gentoo Linux | — | Upgrade dev-lang/rust-bin.Upgrade dev-lang/rust. | Oct 17, 2022 | Apr 11, 2021 |
| Oracle Solaris | — | Upgrade developer/rust/rustc to version 1.53.0-11.4.39.0.1.107.0 on Solaris 11.4Upgrade developer/rust/cargo to version 1.53.0-11.4.39.0.1.107.0 on Solaris 11.4 | Nov 17, 2021 | Apr 11, 2021 |
| Oracle_linux | — | Upgrade rust-analysisUpgrade cargo-docUpgrade rust-lldbUpgrade rust-debugger-commonUpgrade rustUpgrade rust-std-staticUpgrade clippyUpgrade rust-docUpgrade rlsUpgrade cargoUpgrade rust-srcUpgrade rust-toolsetUpgrade rust-gdbUpgrade rustfmt | Aug 12, 2021 | Jan 10, 2021 |
| Redhat_linux | — | Upgrade clippy-debuginfoUpgrade rlsUpgrade cargo-debuginfoUpgrade rustUpgrade rust-debugger-commonUpgrade rust-debugsourceUpgrade rust-std-staticUpgrade cargoUpgrade rls-debuginfoUpgrade clippyUpgrade cargo-docUpgrade rust-analysisUpgrade rust-lldbUpgrade rust-debuginfoUpgrade rustfmtUpgrade rust-docUpgrade rust-gdbUpgrade rustfmt-debuginfoUpgrade rust-srcUpgrade rust-toolset | Aug 12, 2021 | Apr 11, 2021 |
| Rocky_linux | — | Upgrade cargoUpgrade clippyUpgrade rust-debugsourceUpgrade rust-std-staticUpgrade rust-docUpgrade rust-debuginfoUpgrade clippy-debuginfoUpgrade rlsUpgrade rustUpgrade cargo-debuginfoUpgrade rustfmtUpgrade rust-analysisUpgrade rls-debuginfoUpgrade rustfmt-debuginfoUpgrade rust-toolset | May 5, 2022 | Apr 11, 2021 |
| Ubuntu | — | Upgrade rustc | Nov 19, 2024 | Apr 11, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub