In the standard library in Rust before 1.52.0, the Zip implementation calls __iterator_get_unchecked() more than once for the same index (under certain conditions) when next_back() and next() are used together. This bug could lead to a memory safety violation due to an unmet safety requirement for the TrustedRandomAccess trait.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rust-debugger-commonUpgrade rust-lldbUpgrade rust-std-staticUpgrade cargo-docUpgrade rust-analysisUpgrade rustUpgrade rustfmtUpgrade rust-toolsetUpgrade rust-docUpgrade cargoUpgrade rust-gdbUpgrade clippyUpgrade rlsUpgrade rust-src | May 4, 2022 | Apr 11, 2021 |
| Amazon Linux Ami 2 | — | Upgrade rust-gdbUpgrade cargoUpgrade rust-docUpgrade clippyUpgrade rlsUpgrade rust-srcUpgrade rust-debuginfoUpgrade rust-analysisUpgrade rustUpgrade rustfmtUpgrade rust-debugger-commonUpgrade cargo-docUpgrade rust-std-static | Sep 30, 2022 | Apr 11, 2021 |
| Centos_linux | — | Upgrade rust-lldbUpgrade rust-debugsourceUpgrade rustfmt-debuginfoUpgrade rust-std-staticUpgrade rls-debuginfoUpgrade rust-srcUpgrade rustUpgrade cargo-docUpgrade rust-analysisUpgrade rustfmtUpgrade rust-debugger-commonUpgrade rust-debuginfoUpgrade cargo-debuginfoUpgrade clippyUpgrade rust-gdbUpgrade cargoUpgrade clippy-debuginfoUpgrade rust-toolsetUpgrade rust-docUpgrade rls | Aug 12, 2021 | Apr 11, 2021 |
| Debian | — | Upgrade rustc | Jul 30, 2024 | Apr 11, 2021 |
| Gentoo Linux | — | Upgrade dev-lang/rust.Upgrade dev-lang/rust-bin. | Oct 17, 2022 | Apr 11, 2021 |
| Oracle Solaris | — | Upgrade developer/rust/rustc to version 1.53.0-11.4.39.0.1.107.0 on Solaris 11.4Upgrade developer/rust/cargo to version 1.53.0-11.4.39.0.1.107.0 on Solaris 11.4 | Nov 17, 2021 | Apr 11, 2021 |
| Oracle_linux | — | Upgrade rust-docUpgrade rust-toolsetUpgrade cargoUpgrade clippyUpgrade rustUpgrade rust-debugger-commonUpgrade rust-lldbUpgrade rust-srcUpgrade rust-gdbUpgrade rlsUpgrade rustfmtUpgrade cargo-docUpgrade rust-analysisUpgrade rust-std-static | Aug 12, 2021 | Mar 7, 2021 |
| Redhat_linux | — | Upgrade cargoUpgrade rustUpgrade rust-debugsourceUpgrade rust-std-staticUpgrade rlsUpgrade clippy-debuginfoUpgrade cargo-debuginfoUpgrade clippyUpgrade rust-debugger-commonUpgrade rustfmtUpgrade rust-toolsetUpgrade rust-analysisUpgrade rust-lldbUpgrade rust-gdbUpgrade rust-debuginfoUpgrade rust-srcUpgrade cargo-docUpgrade rust-docUpgrade rls-debuginfoUpgrade rustfmt-debuginfo | Aug 12, 2021 | Apr 11, 2021 |
| Rocky_linux | — | Upgrade rls-debuginfoUpgrade rust-debuginfoUpgrade rustfmt-debuginfoUpgrade clippyUpgrade rust-analysisUpgrade rust-toolsetUpgrade rustfmtUpgrade cargoUpgrade rust-docUpgrade clippy-debuginfoUpgrade cargo-debuginfoUpgrade rust-debugsourceUpgrade rustUpgrade rust-std-staticUpgrade rls | May 5, 2022 | Apr 11, 2021 |
| Ubuntu | — | Upgrade rustc | Nov 19, 2024 | Apr 11, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 11, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub