In the standard library in Rust before 1.51.0, the Zip implementation calls __iterator_get_unchecked() for the same index more than once when nested. This bug can lead to a memory safety violation due to an unmet safety requirement for the TrustedRandomAccess trait.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rust-analysisUpgrade rust-std-staticUpgrade rustUpgrade rust-debugger-commonUpgrade cargoUpgrade clippyUpgrade rust-lldbUpgrade rustfmtUpgrade cargo-docUpgrade rlsUpgrade rust-gdbUpgrade rust-srcUpgrade rust-docUpgrade rust-toolset | May 4, 2022 | Apr 11, 2021 |
| Centos_linux | — | Upgrade rust-docUpgrade clippy-debuginfoUpgrade rust-debugsourceUpgrade rust-debuginfoUpgrade rust-std-staticUpgrade cargo-debuginfoUpgrade rust-srcUpgrade clippyUpgrade rust-lldbUpgrade cargoUpgrade rust-debugger-commonUpgrade rustfmt-debuginfoUpgrade rustUpgrade rustfmtUpgrade rust-toolsetUpgrade cargo-docUpgrade rls-debuginfoUpgrade rust-analysisUpgrade rlsUpgrade rust-gdb | Aug 12, 2021 | Apr 11, 2021 |
| Debian | — | Upgrade rustc | Jul 30, 2024 | Apr 11, 2021 |
| Gentoo Linux | — | Upgrade dev-lang/rust.Upgrade dev-lang/rust-bin. | Oct 17, 2022 | Apr 11, 2021 |
| Oracle Solaris | — | Upgrade developer/rust/rustc to version 1.53.0-11.4.39.0.1.107.0 on Solaris 11.4Upgrade developer/rust/cargo to version 1.53.0-11.4.39.0.1.107.0 on Solaris 11.4 | Nov 17, 2021 | Apr 11, 2021 |
| Oracle_linux | — | Upgrade rust-lldbUpgrade rlsUpgrade rust-debugger-commonUpgrade rustUpgrade rust-std-staticUpgrade clippyUpgrade rust-toolsetUpgrade rust-docUpgrade cargoUpgrade rustfmtUpgrade rust-srcUpgrade rust-gdbUpgrade cargo-docUpgrade rust-analysis | Aug 12, 2021 | Jan 16, 2021 |
| Redhat_linux | — | Upgrade rust-std-staticUpgrade rust-analysisUpgrade rlsUpgrade rustfmt-debuginfoUpgrade rustUpgrade cargo-docUpgrade clippyUpgrade rust-srcUpgrade cargoUpgrade rust-docUpgrade rust-lldbUpgrade rust-debugger-commonUpgrade cargo-debuginfoUpgrade rust-debugsourceUpgrade rust-gdbUpgrade rust-toolsetUpgrade rls-debuginfoUpgrade clippy-debuginfoUpgrade rust-debuginfoUpgrade rustfmt | Aug 12, 2021 | Apr 11, 2021 |
| Rocky_linux | — | Upgrade rust-analysisUpgrade rls-debuginfoUpgrade rust-toolsetUpgrade rustfmtUpgrade rust-docUpgrade cargoUpgrade rust-debuginfoUpgrade rlsUpgrade cargo-debuginfoUpgrade rustUpgrade clippy-debuginfoUpgrade rustfmt-debuginfoUpgrade clippyUpgrade rust-std-staticUpgrade rust-debugsource | May 5, 2022 | Apr 11, 2021 |
| Ubuntu | — | Upgrade rustc | Nov 19, 2024 | Apr 11, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub