In the standard library in Rust before 1.50.0, read_to_end() does not validate the return value from Read in an unsafe context. This bug could lead to a buffer overflow.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rustUpgrade rlsUpgrade rust-lldbUpgrade cargo-docUpgrade rust-debugger-commonUpgrade rust-std-staticUpgrade clippyUpgrade rustfmtUpgrade rust-docUpgrade rust-srcUpgrade cargoUpgrade rust-toolsetUpgrade rust-gdbUpgrade rust-analysis | May 4, 2022 | Apr 11, 2021 |
| Centos_linux | — | Upgrade rustUpgrade rust-debugger-commonUpgrade cargoUpgrade rlsUpgrade rust-docUpgrade rustfmtUpgrade rust-std-staticUpgrade cargo-docUpgrade clippyUpgrade rust-srcUpgrade rust-analysisUpgrade rustfmt-debuginfoUpgrade rust-toolsetUpgrade clippy-debuginfoUpgrade rust-debuginfoUpgrade cargo-debuginfoUpgrade rust-debugsourceUpgrade rust-gdbUpgrade rls-debuginfoUpgrade rust-lldb | Aug 12, 2021 | Apr 11, 2021 |
| Debian | — | Upgrade rustc | Jul 30, 2024 | Apr 11, 2021 |
| Gentoo Linux | — | Upgrade dev-lang/rust-bin.Upgrade dev-lang/rust. | Oct 17, 2022 | Apr 11, 2021 |
| Oracle Solaris | — | Upgrade developer/rust/rustc to version 1.53.0-11.4.39.0.1.107.0 on Solaris 11.4Upgrade developer/rust/cargo to version 1.53.0-11.4.39.0.1.107.0 on Solaris 11.4 | Nov 17, 2021 | Apr 11, 2021 |
| Oracle_linux | — | Upgrade rust-analysisUpgrade rust-std-staticUpgrade rust-docUpgrade clippyUpgrade cargoUpgrade rlsUpgrade rustUpgrade rust-debugger-commonUpgrade cargo-docUpgrade rust-lldbUpgrade rustfmtUpgrade rust-srcUpgrade rust-toolsetUpgrade rust-gdb | Aug 12, 2021 | Jan 10, 2021 |
| Redhat_linux | — | Upgrade clippy-debuginfoUpgrade rust-std-staticUpgrade rust-debugsourceUpgrade cargo-debuginfoUpgrade rust-debugger-commonUpgrade rustUpgrade rlsUpgrade rust-toolsetUpgrade cargo-docUpgrade rust-srcUpgrade rustfmtUpgrade rust-analysisUpgrade rust-lldbUpgrade rust-docUpgrade rust-gdbUpgrade rustfmt-debuginfoUpgrade rls-debuginfoUpgrade clippyUpgrade cargoUpgrade rust-debuginfo | Aug 12, 2021 | Apr 11, 2021 |
| Rocky_linux | — | Upgrade rust-toolsetUpgrade rustfmt-debuginfoUpgrade rust-analysisUpgrade rustfmtUpgrade rls-debuginfoUpgrade cargo-debuginfoUpgrade rust-debugsourceUpgrade rust-debuginfoUpgrade rustUpgrade rlsUpgrade clippy-debuginfoUpgrade rust-docUpgrade rust-std-staticUpgrade clippyUpgrade cargo | May 5, 2022 | Apr 11, 2021 |
| Ubuntu | — | Upgrade rustc | Nov 19, 2024 | Apr 11, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub