In the standard library in Rust before 1.52.0, the Zip implementation calls __iterator_get_unchecked() more than once for the same index (under certain conditions) when next_back() and next() are used together. This bug could lead to a memory safety violation due to an unmet safety requirement for the TrustedRandomAccess trait.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rustUpgrade rust-lldbUpgrade cargo-docUpgrade rust-std-staticUpgrade rust-debugger-commonUpgrade rust-analysisUpgrade rustfmtUpgrade rust-gdbUpgrade rust-srcUpgrade rust-docUpgrade rust-toolsetUpgrade rlsUpgrade cargoUpgrade clippy | May 4, 2022 | Apr 11, 2021 |
| Amazon Linux Ami 2 | — | Upgrade rust-std-staticUpgrade rustUpgrade rust-debuginfoUpgrade rust-analysisUpgrade cargo-docUpgrade rustfmtUpgrade rust-debugger-commonUpgrade rust-docUpgrade cargoUpgrade rust-gdbUpgrade clippyUpgrade rlsUpgrade rust-src | Sep 30, 2022 | Apr 11, 2021 |
| Centos_linux | — | Upgrade rust-docUpgrade cargo-debuginfoUpgrade cargoUpgrade rust-toolsetUpgrade clippyUpgrade clippy-debuginfoUpgrade rlsUpgrade rust-gdbUpgrade cargo-docUpgrade rustfmt-debuginfoUpgrade rustfmtUpgrade rust-srcUpgrade rust-debugger-commonUpgrade rust-debuginfoUpgrade rust-debugsourceUpgrade rust-analysisUpgrade rust-std-staticUpgrade rust-lldbUpgrade rls-debuginfoUpgrade rust | Aug 12, 2021 | Apr 11, 2021 |
| Debian | — | Upgrade rustc | Jul 30, 2024 | Apr 11, 2021 |
| Gentoo Linux | — | Upgrade dev-lang/rust-bin.Upgrade dev-lang/rust. | Oct 17, 2022 | Apr 11, 2021 |
| Oracle Solaris | — | Upgrade developer/rust/cargo to version 1.53.0-11.4.39.0.1.107.0 on Solaris 11.4Upgrade developer/rust/rustc to version 1.53.0-11.4.39.0.1.107.0 on Solaris 11.4 | Nov 17, 2021 | Apr 11, 2021 |
| Oracle_linux | — | Upgrade rust-std-staticUpgrade cargo-docUpgrade rustfmtUpgrade rust-analysisUpgrade rust-lldbUpgrade rust-debugger-commonUpgrade rust-srcUpgrade rustUpgrade cargoUpgrade rust-docUpgrade rlsUpgrade rust-toolsetUpgrade rust-gdbUpgrade clippy | Aug 12, 2021 | Mar 7, 2021 |
| Redhat_linux | — | Upgrade rlsUpgrade clippyUpgrade rust-debugger-commonUpgrade rustUpgrade rust-debugsourceUpgrade clippy-debuginfoUpgrade cargoUpgrade cargo-debuginfoUpgrade rust-std-staticUpgrade rust-srcUpgrade rust-analysisUpgrade rust-docUpgrade rls-debuginfoUpgrade cargo-docUpgrade rustfmtUpgrade rust-debuginfoUpgrade rust-lldbUpgrade rust-gdbUpgrade rustfmt-debuginfoUpgrade rust-toolset | Aug 12, 2021 | Apr 11, 2021 |
| Rocky_linux | — | Upgrade rust-debugsourceUpgrade clippy-debuginfoUpgrade rustUpgrade rlsUpgrade cargo-debuginfoUpgrade rust-std-staticUpgrade rls-debuginfoUpgrade cargoUpgrade rust-debuginfoUpgrade clippyUpgrade rust-analysisUpgrade rustfmtUpgrade rust-toolsetUpgrade rust-docUpgrade rustfmt-debuginfo | May 5, 2022 | Apr 11, 2021 |
| Ubuntu | — | Upgrade rustc | Nov 19, 2024 | Apr 11, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 11, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub