In the standard library in Rust before 1.52.0, the Zip implementation calls __iterator_get_unchecked() more than once for the same index (under certain conditions) when next_back() and next() are used together. This bug could lead to a memory safety violation due to an unmet safety requirement for the TrustedRandomAccess trait.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rust-debugger-commonUpgrade rustfmtUpgrade rust-lldbUpgrade rust-std-staticUpgrade cargo-docUpgrade rustUpgrade rust-analysisUpgrade rlsUpgrade rust-toolsetUpgrade clippyUpgrade cargoUpgrade rust-srcUpgrade rust-docUpgrade rust-gdb | May 4, 2022 | Apr 11, 2021 |
| Amazon Linux Ami 2 | — | Upgrade rust-srcUpgrade cargoUpgrade rlsUpgrade clippyUpgrade rust-docUpgrade rust-gdbUpgrade rust-analysisUpgrade rustfmtUpgrade rustUpgrade rust-debugger-commonUpgrade cargo-docUpgrade rust-debuginfoUpgrade rust-std-static | Sep 30, 2022 | Apr 11, 2021 |
| Centos_linux | — | Upgrade clippy-debuginfoUpgrade clippyUpgrade rust-docUpgrade cargoUpgrade rust-toolsetUpgrade cargo-debuginfoUpgrade rlsUpgrade rust-gdbUpgrade cargo-docUpgrade rust-analysisUpgrade rls-debuginfoUpgrade rust-debugsourceUpgrade rust-std-staticUpgrade rust-lldbUpgrade rustfmtUpgrade rustUpgrade rust-debugger-commonUpgrade rust-srcUpgrade rust-debuginfoUpgrade rustfmt-debuginfo | Aug 12, 2021 | Apr 11, 2021 |
| Debian | — | Upgrade rustc | Jul 30, 2024 | Apr 11, 2021 |
| Gentoo Linux | — | Upgrade dev-lang/rust-bin.Upgrade dev-lang/rust. | Oct 17, 2022 | Apr 11, 2021 |
| Oracle Solaris | — | Upgrade developer/rust/cargo to version 1.53.0-11.4.39.0.1.107.0 on Solaris 11.4Upgrade developer/rust/rustc to version 1.53.0-11.4.39.0.1.107.0 on Solaris 11.4 | Nov 17, 2021 | Apr 11, 2021 |
| Oracle_linux | — | Upgrade clippyUpgrade rlsUpgrade rust-gdbUpgrade rust-docUpgrade rust-lldbUpgrade rust-toolsetUpgrade cargoUpgrade rust-debugger-commonUpgrade rust-srcUpgrade rustUpgrade rustfmtUpgrade rust-analysisUpgrade cargo-docUpgrade rust-std-static | Aug 12, 2021 | Mar 7, 2021 |
| Redhat_linux | — | Upgrade cargo-debuginfoUpgrade rustUpgrade clippyUpgrade cargoUpgrade rust-debugsourceUpgrade rlsUpgrade rust-std-staticUpgrade rust-debugger-commonUpgrade clippy-debuginfoUpgrade rust-debuginfoUpgrade cargo-docUpgrade rust-docUpgrade rust-toolsetUpgrade rustfmtUpgrade rustfmt-debuginfoUpgrade rust-analysisUpgrade rust-srcUpgrade rust-lldbUpgrade rust-gdbUpgrade rls-debuginfo | Aug 12, 2021 | Apr 11, 2021 |
| Rocky_linux | — | Upgrade rust-std-staticUpgrade clippy-debuginfoUpgrade rust-debugsourceUpgrade rustUpgrade rlsUpgrade cargo-debuginfoUpgrade rustfmtUpgrade rustfmt-debuginfoUpgrade rust-toolsetUpgrade rust-debuginfoUpgrade rls-debuginfoUpgrade rust-analysisUpgrade cargoUpgrade rust-docUpgrade clippy | May 5, 2022 | Apr 11, 2021 |
| Ubuntu | — | Upgrade rustc | Nov 19, 2024 | Apr 11, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 11, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub