library/std/src/net/parser.rs in Rust before 1.53.0 does not properly consider extraneous zero characters at the beginning of an IP address string, which (in some situations) allows attackers to bypass access control that is based on IP addresses, because of unexpected octal interpretation.
CVSS Details
- CVSS 3.1 Base Score: 9.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rust-toolset | May 4, 2022 | Aug 7, 2021 |
| Alpine Linux | — | Upgrade rust | Mar 26, 2024 | Aug 7, 2021 |
| Centos_linux | — | Upgrade rust-std-static-wasm32-unknown-unknownUpgrade rlsUpgrade rustUpgrade rust-std-staticUpgrade cargo-debuginfoUpgrade rust-gdbUpgrade clippy-debuginfoUpgrade cargoUpgrade rust-debugger-commonUpgrade rust-docUpgrade clippyUpgrade rust-toolsetUpgrade rustfmtUpgrade cargo-docUpgrade rust-srcUpgrade rust-debuginfoUpgrade rust-analysisUpgrade rust-debugsourceUpgrade rls-debuginfoUpgrade rust-lldbUpgrade rustfmt-debuginfo | Nov 10, 2021 | Aug 7, 2021 |
| Debian | — | Upgrade rustc | Jul 30, 2024 | Aug 7, 2021 |
| Gentoo Linux | — | Upgrade dev-lang/rust.Upgrade dev-lang/rust-bin. | Oct 17, 2022 | Aug 7, 2021 |
| Oracle Solaris | — | Upgrade developer/rust/rustc to version 1.53.0-11.4.39.0.1.107.0 on Solaris 11.4Upgrade developer/rust/cargo to version 1.53.0-11.4.39.0.1.107.0 on Solaris 11.4 | Nov 17, 2021 | Aug 7, 2021 |
| Oracle_linux | — | Upgrade rust-docUpgrade rust-lldbUpgrade cargo-docUpgrade rust-std-static-wasm32-unknown-unknownUpgrade cargoUpgrade rustfmtUpgrade rust-analysisUpgrade rust-toolsetUpgrade rust-srcUpgrade rust-gdbUpgrade rustUpgrade rust-debugger-commonUpgrade rlsUpgrade clippyUpgrade rust-std-static | Nov 17, 2021 | Mar 29, 2021 |
| Redhat_linux | — | Upgrade rust-docUpgrade cargo-docUpgrade rust-std-staticUpgrade rustUpgrade rust-analysisUpgrade rustfmt-debuginfoUpgrade clippyUpgrade rust-lldbUpgrade rust-debugger-commonUpgrade rust-debugsourceUpgrade cargoUpgrade rust-debuginfoUpgrade rustfmtUpgrade rls-debuginfoUpgrade clippy-debuginfoUpgrade rust-gdbUpgrade rust-toolsetUpgrade rlsUpgrade cargo-debuginfoUpgrade rust-srcUpgrade rust-std-static-wasm32-unknown-unknown | Nov 10, 2021 | Aug 7, 2021 |
| Rocky_linux | — | Upgrade rust-analysisUpgrade rust-docUpgrade clippyUpgrade cargoUpgrade clippy-debuginfoUpgrade rust-debugsourceUpgrade rustfmt-debuginfoUpgrade rustUpgrade rust-std-staticUpgrade rlsUpgrade rust-std-static-wasm32-unknown-unknownUpgrade rls-debuginfoUpgrade rust-debuginfoUpgrade rust-toolsetUpgrade rustfmtUpgrade cargo-debuginfo | Mar 12, 2024 | Aug 7, 2021 |
| Ubuntu | — | Upgrade rustc | Nov 19, 2024 | Aug 7, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 7, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub