In the standard library in Rust before 1.52.0, the Zip implementation has a panic safety issue. It calls __iterator_get_unchecked() more than once for the same index when the underlying iterator panics (in certain conditions). This bug could lead to a memory safety violation due to an unmet safety requirement for the TrustedRandomAccess trait.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rust-gdbUpgrade rust-toolsetUpgrade cargoUpgrade rust-std-staticUpgrade clippyUpgrade rust-debugger-commonUpgrade rustUpgrade rust-srcUpgrade rust-lldbUpgrade rust-docUpgrade rustfmtUpgrade cargo-docUpgrade rust-analysisUpgrade rls | May 4, 2022 | Apr 11, 2021 |
| Amazon Linux Ami 2 | — | Upgrade rust-docUpgrade cargo-docUpgrade rust-analysisUpgrade clippyUpgrade rust-std-staticUpgrade rust-debugger-commonUpgrade rlsUpgrade rustUpgrade rust-srcUpgrade cargoUpgrade rustfmtUpgrade rust-gdbUpgrade rust-debuginfo | Sep 30, 2022 | Apr 11, 2021 |
| Centos_linux | — | Upgrade rust-analysisUpgrade rlsUpgrade cargo-docUpgrade rust-debugger-commonUpgrade rust-std-staticUpgrade rustfmtUpgrade rustfmt-debuginfoUpgrade cargo-debuginfoUpgrade cargoUpgrade rustUpgrade rust-toolsetUpgrade rust-gdbUpgrade rust-debugsourceUpgrade rust-docUpgrade clippy-debuginfoUpgrade rls-debuginfoUpgrade rust-srcUpgrade rust-lldbUpgrade clippyUpgrade rust-debuginfo | Aug 12, 2021 | Apr 11, 2021 |
| Debian | — | Upgrade rustc | Jul 30, 2024 | Apr 11, 2021 |
| Gentoo Linux | — | Upgrade dev-lang/rust.Upgrade dev-lang/rust-bin. | Oct 17, 2022 | Apr 11, 2021 |
| Oracle Solaris | — | Upgrade developer/rust/rustc to version 1.53.0-11.4.39.0.1.107.0 on Solaris 11.4Upgrade developer/rust/cargo to version 1.53.0-11.4.39.0.1.107.0 on Solaris 11.4 | Nov 17, 2021 | Apr 11, 2021 |
| Oracle_linux | — | Upgrade rust-analysisUpgrade cargo-docUpgrade rust-lldbUpgrade rustfmtUpgrade rust-srcUpgrade rust-docUpgrade cargoUpgrade rust-toolsetUpgrade rust-gdbUpgrade clippyUpgrade rust-debugger-commonUpgrade rustUpgrade rlsUpgrade rust-std-static | Aug 12, 2021 | Feb 4, 2021 |
| Redhat_linux | — | Upgrade rustUpgrade rustfmtUpgrade rust-srcUpgrade cargo-docUpgrade rust-std-staticUpgrade rustfmt-debuginfoUpgrade rust-debugger-commonUpgrade rust-lldbUpgrade rust-debugsourceUpgrade rust-debuginfoUpgrade rust-analysisUpgrade rls-debuginfoUpgrade rust-docUpgrade rlsUpgrade cargoUpgrade clippyUpgrade rust-toolsetUpgrade cargo-debuginfoUpgrade rust-gdbUpgrade clippy-debuginfo | Aug 12, 2021 | Apr 11, 2021 |
| Rocky_linux | — | Upgrade rustfmt-debuginfoUpgrade rlsUpgrade clippyUpgrade clippy-debuginfoUpgrade rust-toolsetUpgrade cargoUpgrade cargo-debuginfoUpgrade rust-docUpgrade rust-debuginfoUpgrade rustfmtUpgrade rust-std-staticUpgrade rust-debugsourceUpgrade rustUpgrade rls-debuginfoUpgrade rust-analysis | May 5, 2022 | Apr 11, 2021 |
| Ubuntu | — | Upgrade rustc | Nov 19, 2024 | Apr 11, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 11, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub