In the standard library in Rust before 1.50.0, read_to_end() does not validate the return value from Read in an unsafe context. This bug could lead to a buffer overflow.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rustUpgrade clippyUpgrade cargo-docUpgrade rust-debugger-commonUpgrade rlsUpgrade rust-std-staticUpgrade rust-lldbUpgrade cargoUpgrade rust-docUpgrade rust-toolsetUpgrade rust-srcUpgrade rust-gdbUpgrade rust-analysisUpgrade rustfmt | May 4, 2022 | Apr 11, 2021 |
| Centos_linux | — | Upgrade rustfmtUpgrade cargoUpgrade rust-debugger-commonUpgrade rust-std-staticUpgrade rustUpgrade cargo-docUpgrade rlsUpgrade rust-srcUpgrade rust-analysisUpgrade rustfmt-debuginfoUpgrade clippyUpgrade rust-docUpgrade cargo-debuginfoUpgrade rust-debugsourceUpgrade rust-lldbUpgrade rls-debuginfoUpgrade rust-gdbUpgrade rust-debuginfoUpgrade rust-toolsetUpgrade clippy-debuginfo | Aug 12, 2021 | Apr 11, 2021 |
| Debian | — | Upgrade rustc | Jul 30, 2024 | Apr 11, 2021 |
| Gentoo Linux | — | Upgrade dev-lang/rust.Upgrade dev-lang/rust-bin. | Oct 17, 2022 | Apr 11, 2021 |
| Oracle Solaris | — | Upgrade developer/rust/rustc to version 1.53.0-11.4.39.0.1.107.0 on Solaris 11.4Upgrade developer/rust/cargo to version 1.53.0-11.4.39.0.1.107.0 on Solaris 11.4 | Nov 17, 2021 | Apr 11, 2021 |
| Oracle_linux | — | Upgrade rustfmtUpgrade rust-srcUpgrade rust-gdbUpgrade rust-toolsetUpgrade rustUpgrade rust-debugger-commonUpgrade rust-analysisUpgrade rlsUpgrade cargoUpgrade rust-std-staticUpgrade rust-lldbUpgrade cargo-docUpgrade rust-docUpgrade clippy | Aug 12, 2021 | Jan 10, 2021 |
| Redhat_linux | — | Upgrade rust-toolsetUpgrade rust-srcUpgrade rustfmtUpgrade cargoUpgrade rust-docUpgrade rust-gdbUpgrade rust-lldbUpgrade cargo-docUpgrade rust-analysisUpgrade rust-debuginfoUpgrade rls-debuginfoUpgrade clippyUpgrade rustfmt-debuginfoUpgrade clippy-debuginfoUpgrade rust-debugsourceUpgrade rust-debugger-commonUpgrade cargo-debuginfoUpgrade rlsUpgrade rustUpgrade rust-std-static | Aug 12, 2021 | Apr 11, 2021 |
| Rocky_linux | — | Upgrade rls-debuginfoUpgrade rust-toolsetUpgrade rustfmt-debuginfoUpgrade rust-analysisUpgrade rustfmtUpgrade cargoUpgrade rust-debugsourceUpgrade clippyUpgrade clippy-debuginfoUpgrade rust-std-staticUpgrade rust-docUpgrade rlsUpgrade cargo-debuginfoUpgrade rustUpgrade rust-debuginfo | May 5, 2022 | Apr 11, 2021 |
| Ubuntu | — | Upgrade rustc | Nov 19, 2024 | Apr 11, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub