In the standard library in Rust before 1.51.0, the Zip implementation calls __iterator_get_unchecked() for the same index more than once when nested. This bug can lead to a memory safety violation due to an unmet safety requirement for the TrustedRandomAccess trait.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rust-gdbUpgrade rust-docUpgrade rust-toolsetUpgrade rust-srcUpgrade rlsUpgrade rustfmtUpgrade cargo-docUpgrade rust-lldbUpgrade rust-analysisUpgrade rust-std-staticUpgrade rustUpgrade clippyUpgrade cargoUpgrade rust-debugger-common | May 4, 2022 | Apr 11, 2021 |
| Centos_linux | — | Upgrade cargo-docUpgrade rust-gdbUpgrade rls-debuginfoUpgrade rlsUpgrade rust-toolsetUpgrade rust-analysisUpgrade rust-docUpgrade rust-debuginfoUpgrade cargoUpgrade rustfmtUpgrade rustUpgrade rustfmt-debuginfoUpgrade clippy-debuginfoUpgrade rust-debugsourceUpgrade cargo-debuginfoUpgrade rust-std-staticUpgrade rust-lldbUpgrade clippyUpgrade rust-debugger-commonUpgrade rust-src | Aug 12, 2021 | Apr 11, 2021 |
| Debian | — | Upgrade rustc | Jul 30, 2024 | Apr 11, 2021 |
| Gentoo Linux | — | Upgrade dev-lang/rust.Upgrade dev-lang/rust-bin. | Oct 17, 2022 | Apr 11, 2021 |
| Oracle Solaris | — | Upgrade developer/rust/rustc to version 1.53.0-11.4.39.0.1.107.0 on Solaris 11.4Upgrade developer/rust/cargo to version 1.53.0-11.4.39.0.1.107.0 on Solaris 11.4 | Nov 17, 2021 | Apr 11, 2021 |
| Oracle_linux | — | Upgrade rlsUpgrade rust-debugger-commonUpgrade rustUpgrade clippyUpgrade rust-lldbUpgrade rust-std-staticUpgrade rust-gdbUpgrade rust-docUpgrade rust-toolsetUpgrade cargo-docUpgrade rust-srcUpgrade rust-analysisUpgrade rustfmtUpgrade cargo | Aug 12, 2021 | Jan 16, 2021 |
| Redhat_linux | — | Upgrade rust-gdbUpgrade clippy-debuginfoUpgrade rust-debuginfoUpgrade rust-debugsourceUpgrade cargo-debuginfoUpgrade rls-debuginfoUpgrade rust-toolsetUpgrade rustfmtUpgrade cargo-docUpgrade cargoUpgrade rust-srcUpgrade rustfmt-debuginfoUpgrade rust-debugger-commonUpgrade clippyUpgrade rust-docUpgrade rlsUpgrade rust-lldbUpgrade rustUpgrade rust-std-staticUpgrade rust-analysis | Aug 12, 2021 | Apr 11, 2021 |
| Rocky_linux | — | Upgrade rustUpgrade clippyUpgrade rust-debugsourceUpgrade cargoUpgrade cargo-debuginfoUpgrade rustfmt-debuginfoUpgrade rlsUpgrade rust-std-staticUpgrade rust-docUpgrade clippy-debuginfoUpgrade rust-debuginfoUpgrade rust-analysisUpgrade rustfmtUpgrade rust-toolsetUpgrade rls-debuginfo | May 5, 2022 | Apr 11, 2021 |
| Ubuntu | — | Upgrade rustc | Nov 19, 2024 | Apr 11, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub