In the standard library in Rust before 1.52.0, the Zip implementation calls __iterator_get_unchecked() more than once for the same index (under certain conditions) when next_back() and next() are used together. This bug could lead to a memory safety violation due to an unmet safety requirement for the TrustedRandomAccess trait.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rust-toolsetUpgrade rust-gdbUpgrade cargoUpgrade rust-srcUpgrade rust-docUpgrade clippyUpgrade rlsUpgrade rust-analysisUpgrade cargo-docUpgrade rust-debugger-commonUpgrade rust-std-staticUpgrade rustfmtUpgrade rustUpgrade rust-lldb | May 4, 2022 | Apr 11, 2021 |
| Amazon Linux Ami 2 | — | Upgrade rust-debuginfoUpgrade rust-std-staticUpgrade rustfmtUpgrade rust-debugger-commonUpgrade rust-analysisUpgrade rustUpgrade cargo-docUpgrade rust-srcUpgrade rust-gdbUpgrade rlsUpgrade cargoUpgrade clippyUpgrade rust-doc | Sep 30, 2022 | Apr 11, 2021 |
| Centos_linux | — | Upgrade clippyUpgrade clippy-debuginfoUpgrade cargoUpgrade rust-toolsetUpgrade rust-docUpgrade cargo-debuginfoUpgrade rlsUpgrade rust-gdbUpgrade rls-debuginfoUpgrade rustfmtUpgrade rustUpgrade cargo-docUpgrade rust-analysisUpgrade rustfmt-debuginfoUpgrade rust-lldbUpgrade rust-std-staticUpgrade rust-debugger-commonUpgrade rust-srcUpgrade rust-debuginfoUpgrade rust-debugsource | Aug 12, 2021 | Apr 11, 2021 |
| Debian | — | Upgrade rustc | Jul 30, 2024 | Apr 11, 2021 |
| Gentoo Linux | — | Upgrade dev-lang/rust-bin.Upgrade dev-lang/rust. | Oct 17, 2022 | Apr 11, 2021 |
| Oracle Solaris | — | Upgrade developer/rust/cargo to version 1.53.0-11.4.39.0.1.107.0 on Solaris 11.4Upgrade developer/rust/rustc to version 1.53.0-11.4.39.0.1.107.0 on Solaris 11.4 | Nov 17, 2021 | Apr 11, 2021 |
| Oracle_linux | — | Upgrade rlsUpgrade rust-gdbUpgrade rust-lldbUpgrade clippyUpgrade rust-srcUpgrade rustUpgrade rust-debugger-commonUpgrade cargoUpgrade rust-toolsetUpgrade rust-docUpgrade rust-std-staticUpgrade rust-analysisUpgrade cargo-docUpgrade rustfmt | Aug 12, 2021 | Mar 7, 2021 |
| Redhat_linux | — | Upgrade rust-std-staticUpgrade cargo-debuginfoUpgrade clippyUpgrade rust-debugsourceUpgrade rustUpgrade clippy-debuginfoUpgrade rlsUpgrade cargoUpgrade rust-debugger-commonUpgrade rust-analysisUpgrade rustfmtUpgrade rust-srcUpgrade rls-debuginfoUpgrade rustfmt-debuginfoUpgrade cargo-docUpgrade rust-debuginfoUpgrade rust-lldbUpgrade rust-docUpgrade rust-toolsetUpgrade rust-gdb | Aug 12, 2021 | Apr 11, 2021 |
| Rocky_linux | — | Upgrade rust-debuginfoUpgrade cargoUpgrade rls-debuginfoUpgrade rust-analysisUpgrade rustfmtUpgrade rustfmt-debuginfoUpgrade rust-docUpgrade rust-toolsetUpgrade clippyUpgrade clippy-debuginfoUpgrade rust-debugsourceUpgrade rust-std-staticUpgrade rlsUpgrade cargo-debuginfoUpgrade rust | May 5, 2022 | Apr 11, 2021 |
| Ubuntu | — | Upgrade rustc | Nov 19, 2024 | Apr 11, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 11, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub