In the standard library in Rust before 1.51.0, the Zip implementation calls __iterator_get_unchecked() for the same index more than once when nested. This bug can lead to a memory safety violation due to an unmet safety requirement for the TrustedRandomAccess trait.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rust-lldbUpgrade rustfmtUpgrade rust-std-staticUpgrade cargoUpgrade rust-analysisUpgrade cargo-docUpgrade rust-debugger-commonUpgrade rustUpgrade clippyUpgrade rlsUpgrade rust-gdbUpgrade rust-srcUpgrade rust-toolsetUpgrade rust-doc | May 4, 2022 | Apr 11, 2021 |
| Centos_linux | — | Upgrade rust-lldbUpgrade rust-std-staticUpgrade rust-docUpgrade rustfmtUpgrade cargo-debuginfoUpgrade clippy-debuginfoUpgrade rust-debuginfoUpgrade rust-debugger-commonUpgrade rust-debugsourceUpgrade rust-srcUpgrade clippyUpgrade rustUpgrade rustfmt-debuginfoUpgrade cargoUpgrade rust-analysisUpgrade rust-toolsetUpgrade rls-debuginfoUpgrade cargo-docUpgrade rust-gdbUpgrade rls | Aug 12, 2021 | Apr 11, 2021 |
| Debian | — | Upgrade rustc | Jul 30, 2024 | Apr 11, 2021 |
| Gentoo Linux | — | Upgrade dev-lang/rust-bin.Upgrade dev-lang/rust. | Oct 17, 2022 | Apr 11, 2021 |
| Oracle Solaris | — | Upgrade developer/rust/rustc to version 1.53.0-11.4.39.0.1.107.0 on Solaris 11.4Upgrade developer/rust/cargo to version 1.53.0-11.4.39.0.1.107.0 on Solaris 11.4 | Nov 17, 2021 | Apr 11, 2021 |
| Oracle_linux | — | Upgrade rlsUpgrade rust-debugger-commonUpgrade clippyUpgrade rust-std-staticUpgrade rustUpgrade rust-lldbUpgrade cargo-docUpgrade rust-gdbUpgrade cargoUpgrade rust-docUpgrade rust-analysisUpgrade rustfmtUpgrade rust-srcUpgrade rust-toolset | Aug 12, 2021 | Jan 16, 2021 |
| Redhat_linux | — | Upgrade rust-debugger-commonUpgrade rustUpgrade rust-docUpgrade clippyUpgrade rust-srcUpgrade rust-std-staticUpgrade rust-lldbUpgrade cargoUpgrade rust-analysisUpgrade rlsUpgrade cargo-docUpgrade rustfmt-debuginfoUpgrade rustfmtUpgrade rust-debuginfoUpgrade clippy-debuginfoUpgrade cargo-debuginfoUpgrade rust-gdbUpgrade rust-debugsourceUpgrade rls-debuginfoUpgrade rust-toolset | Aug 12, 2021 | Apr 11, 2021 |
| Rocky_linux | — | Upgrade rust-std-staticUpgrade rust-docUpgrade rust-debuginfoUpgrade rustUpgrade rlsUpgrade rustfmt-debuginfoUpgrade clippy-debuginfoUpgrade rust-debugsourceUpgrade cargoUpgrade clippyUpgrade cargo-debuginfoUpgrade rust-toolsetUpgrade rls-debuginfoUpgrade rust-analysisUpgrade rustfmt | May 5, 2022 | Apr 11, 2021 |
| Ubuntu | — | Upgrade rustc | Nov 19, 2024 | Apr 11, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub