In the standard library in Rust before 1.52.0, the Zip implementation can report an incorrect size due to an integer overflow. This bug can lead to a buffer overflow when a consumed Zip iterator is used again.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rust-gdbUpgrade rust-srcUpgrade rust-toolsetUpgrade rust-docUpgrade rlsUpgrade cargoUpgrade rustfmtUpgrade rust-analysisUpgrade cargo-docUpgrade rust-debugger-commonUpgrade rustUpgrade rust-lldbUpgrade clippyUpgrade rust-std-static | May 4, 2022 | Apr 11, 2021 |
| Amazon Linux Ami 2 | — | Upgrade cargo-docUpgrade clippyUpgrade rust-gdbUpgrade rust-docUpgrade cargoUpgrade rlsUpgrade rust-analysisUpgrade rust-srcUpgrade rust-debuginfoUpgrade rust-std-staticUpgrade rustfmtUpgrade rustUpgrade rust-debugger-common | Sep 30, 2022 | Apr 11, 2021 |
| Centos_linux | — | Upgrade clippyUpgrade rustUpgrade rlsUpgrade cargo-debuginfoUpgrade clippy-debuginfoUpgrade rust-std-staticUpgrade cargoUpgrade rust-docUpgrade rust-debugger-commonUpgrade rls-debuginfoUpgrade rust-debuginfoUpgrade rustfmtUpgrade rust-gdbUpgrade cargo-docUpgrade rustfmt-debuginfoUpgrade rust-debugsourceUpgrade rust-toolsetUpgrade rust-lldbUpgrade rust-analysisUpgrade rust-src | Aug 12, 2021 | Apr 11, 2021 |
| Debian | — | Upgrade rustc | Jul 30, 2024 | Apr 11, 2021 |
| Gentoo Linux | — | Upgrade dev-lang/rust.Upgrade dev-lang/rust-bin. | Oct 17, 2022 | Apr 11, 2021 |
| Oracle Solaris | — | Upgrade developer/rust/cargo to version 1.53.0-11.4.39.0.1.107.0 on Solaris 11.4Upgrade developer/rust/rustc to version 1.53.0-11.4.39.0.1.107.0 on Solaris 11.4 | Nov 17, 2021 | Apr 11, 2021 |
| Oracle_linux | — | Upgrade rust-lldbUpgrade rust-std-staticUpgrade rust-debugger-commonUpgrade rustfmtUpgrade rust-gdbUpgrade rust-srcUpgrade cargoUpgrade clippyUpgrade rust-toolsetUpgrade cargo-docUpgrade rust-analysisUpgrade rlsUpgrade rustUpgrade rust-doc | Aug 12, 2021 | Mar 5, 2021 |
| Redhat_linux | — | Upgrade rust-debugsourceUpgrade rustfmt-debuginfoUpgrade clippy-debuginfoUpgrade rust-toolsetUpgrade rust-srcUpgrade rust-gdbUpgrade rust-lldbUpgrade cargoUpgrade rustUpgrade clippyUpgrade rust-debugger-commonUpgrade cargo-debuginfoUpgrade rust-debuginfoUpgrade rust-docUpgrade rlsUpgrade rustfmtUpgrade rls-debuginfoUpgrade rust-std-staticUpgrade rust-analysisUpgrade cargo-doc | Aug 12, 2021 | Apr 11, 2021 |
| Rocky_linux | — | Upgrade rls-debuginfoUpgrade rust-analysisUpgrade rustfmtUpgrade rust-debuginfoUpgrade rust-toolsetUpgrade rustfmt-debuginfoUpgrade cargoUpgrade cargo-debuginfoUpgrade clippy-debuginfoUpgrade rust-debugsourceUpgrade rust-std-staticUpgrade rustUpgrade rust-docUpgrade rlsUpgrade clippy | May 5, 2022 | Apr 11, 2021 |
| Ubuntu | — | Upgrade rustc | Nov 19, 2024 | Apr 11, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 11, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub