In the standard library in Rust before 1.50.0, read_to_end() does not validate the return value from Read in an unsafe context. This bug could lead to a buffer overflow.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rust-std-staticUpgrade rustUpgrade rust-lldbUpgrade rlsUpgrade clippyUpgrade rust-debugger-commonUpgrade cargo-docUpgrade rust-analysisUpgrade rust-docUpgrade rust-toolsetUpgrade cargoUpgrade rust-srcUpgrade rust-gdbUpgrade rustfmt | May 4, 2022 | Apr 11, 2021 |
| Centos_linux | — | Upgrade rustUpgrade rust-debugger-commonUpgrade rustfmtUpgrade rust-docUpgrade cargoUpgrade rlsUpgrade rustfmt-debuginfoUpgrade rust-analysisUpgrade rust-srcUpgrade cargo-docUpgrade rust-std-staticUpgrade clippyUpgrade cargo-debuginfoUpgrade rust-gdbUpgrade rls-debuginfoUpgrade rust-debuginfoUpgrade rust-toolsetUpgrade clippy-debuginfoUpgrade rust-lldbUpgrade rust-debugsource | Aug 12, 2021 | Apr 11, 2021 |
| Debian | — | Upgrade rustc | Jul 30, 2024 | Apr 11, 2021 |
| Gentoo Linux | — | Upgrade dev-lang/rust-bin.Upgrade dev-lang/rust. | Oct 17, 2022 | Apr 11, 2021 |
| Oracle Solaris | — | Upgrade developer/rust/cargo to version 1.53.0-11.4.39.0.1.107.0 on Solaris 11.4Upgrade developer/rust/rustc to version 1.53.0-11.4.39.0.1.107.0 on Solaris 11.4 | Nov 17, 2021 | Apr 11, 2021 |
| Oracle_linux | — | Upgrade cargoUpgrade rlsUpgrade rustUpgrade cargo-docUpgrade rust-lldbUpgrade rust-debugger-commonUpgrade rust-analysisUpgrade clippyUpgrade rust-std-staticUpgrade rust-docUpgrade rust-srcUpgrade rust-toolsetUpgrade rust-gdbUpgrade rustfmt | Aug 12, 2021 | Jan 10, 2021 |
| Redhat_linux | — | Upgrade clippy-debuginfoUpgrade cargo-debuginfoUpgrade rust-std-staticUpgrade rust-debugsourceUpgrade rust-debugger-commonUpgrade rustUpgrade rlsUpgrade cargoUpgrade rust-toolsetUpgrade clippyUpgrade rust-gdbUpgrade cargo-docUpgrade rust-lldbUpgrade rls-debuginfoUpgrade rust-debuginfoUpgrade rustfmtUpgrade rust-analysisUpgrade rust-srcUpgrade rust-docUpgrade rustfmt-debuginfo | Aug 12, 2021 | Apr 11, 2021 |
| Rocky_linux | — | Upgrade rustfmtUpgrade rust-analysisUpgrade rust-toolsetUpgrade rls-debuginfoUpgrade rustfmt-debuginfoUpgrade rust-debugsourceUpgrade cargo-debuginfoUpgrade rlsUpgrade rust-debuginfoUpgrade clippyUpgrade cargoUpgrade rust-docUpgrade rust-std-staticUpgrade clippy-debuginfoUpgrade rust | May 5, 2022 | Apr 11, 2021 |
| Ubuntu | — | Upgrade rustc | Nov 19, 2024 | Apr 11, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub