In the standard library in Rust before 1.52.0, the Zip implementation calls __iterator_get_unchecked() more than once for the same index (under certain conditions) when next_back() and next() are used together. This bug could lead to a memory safety violation due to an unmet safety requirement for the TrustedRandomAccess trait.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rust-analysisUpgrade rustUpgrade rust-std-staticUpgrade rust-debugger-commonUpgrade cargo-docUpgrade rust-lldbUpgrade rustfmtUpgrade rust-docUpgrade rust-toolsetUpgrade cargoUpgrade rust-gdbUpgrade rust-srcUpgrade clippyUpgrade rls | May 4, 2022 | Apr 11, 2021 |
| Amazon Linux Ami 2 | — | Upgrade rustUpgrade rustfmtUpgrade rust-debuginfoUpgrade cargo-docUpgrade rust-analysisUpgrade rust-debugger-commonUpgrade rust-std-staticUpgrade rlsUpgrade cargoUpgrade rust-srcUpgrade clippyUpgrade rust-gdbUpgrade rust-doc | Sep 30, 2022 | Apr 11, 2021 |
| Centos_linux | — | Upgrade rust-docUpgrade cargo-debuginfoUpgrade rust-gdbUpgrade rlsUpgrade clippyUpgrade clippy-debuginfoUpgrade rust-toolsetUpgrade cargoUpgrade rustfmtUpgrade rust-debuginfoUpgrade rust-lldbUpgrade rls-debuginfoUpgrade rust-std-staticUpgrade rustUpgrade cargo-docUpgrade rust-debugsourceUpgrade rust-analysisUpgrade rustfmt-debuginfoUpgrade rust-debugger-commonUpgrade rust-src | Aug 12, 2021 | Apr 11, 2021 |
| Debian | — | Upgrade rustc | Jul 30, 2024 | Apr 11, 2021 |
| Gentoo Linux | — | Upgrade dev-lang/rust-bin.Upgrade dev-lang/rust. | Oct 17, 2022 | Apr 11, 2021 |
| Oracle Solaris | — | Upgrade developer/rust/cargo to version 1.53.0-11.4.39.0.1.107.0 on Solaris 11.4Upgrade developer/rust/rustc to version 1.53.0-11.4.39.0.1.107.0 on Solaris 11.4 | Nov 17, 2021 | Apr 11, 2021 |
| Oracle_linux | — | Upgrade rust-lldbUpgrade rust-gdbUpgrade clippyUpgrade rlsUpgrade rustUpgrade rust-debugger-commonUpgrade cargoUpgrade rust-docUpgrade rust-toolsetUpgrade rust-srcUpgrade rustfmtUpgrade cargo-docUpgrade rust-analysisUpgrade rust-std-static | Aug 12, 2021 | Mar 7, 2021 |
| Redhat_linux | — | Upgrade rust-docUpgrade rustfmt-debuginfoUpgrade rust-toolsetUpgrade rust-lldbUpgrade rust-gdbUpgrade rust-analysisUpgrade rust-debuginfoUpgrade rls-debuginfoUpgrade cargo-docUpgrade rust-srcUpgrade rustfmtUpgrade rust-debugger-commonUpgrade clippyUpgrade rustUpgrade cargoUpgrade rust-debugsourceUpgrade clippy-debuginfoUpgrade rust-std-staticUpgrade cargo-debuginfoUpgrade rls | Aug 12, 2021 | Apr 11, 2021 |
| Rocky_linux | — | Upgrade rust-toolsetUpgrade rustfmt-debuginfoUpgrade cargoUpgrade rust-analysisUpgrade rls-debuginfoUpgrade rustfmtUpgrade clippyUpgrade rust-docUpgrade rust-debuginfoUpgrade rustUpgrade clippy-debuginfoUpgrade cargo-debuginfoUpgrade rust-debugsourceUpgrade rlsUpgrade rust-std-static | May 5, 2022 | Apr 11, 2021 |
| Ubuntu | — | Upgrade rustc | Nov 19, 2024 | Apr 11, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 11, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub