In the standard library in Rust before 1.52.0, the Zip implementation calls __iterator_get_unchecked() more than once for the same index (under certain conditions) when next_back() and next() are used together. This bug could lead to a memory safety violation due to an unmet safety requirement for the TrustedRandomAccess trait.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rust-srcUpgrade rlsUpgrade cargoUpgrade rust-toolsetUpgrade rust-gdbUpgrade rust-docUpgrade clippyUpgrade rustfmtUpgrade rust-std-staticUpgrade cargo-docUpgrade rust-analysisUpgrade rustUpgrade rust-debugger-commonUpgrade rust-lldb | May 4, 2022 | Apr 11, 2021 |
| Amazon Linux Ami 2 | — | Upgrade rust-gdbUpgrade rust-srcUpgrade clippyUpgrade rust-docUpgrade cargoUpgrade rlsUpgrade rust-debugger-commonUpgrade rust-analysisUpgrade rustUpgrade rust-debuginfoUpgrade rustfmtUpgrade cargo-docUpgrade rust-std-static | Sep 30, 2022 | Apr 11, 2021 |
| Centos_linux | — | Upgrade clippy-debuginfoUpgrade clippyUpgrade rust-docUpgrade cargo-debuginfoUpgrade cargoUpgrade rlsUpgrade rust-gdbUpgrade rust-toolsetUpgrade rust-debugsourceUpgrade rust-analysisUpgrade rustfmt-debuginfoUpgrade rustfmtUpgrade rustUpgrade cargo-docUpgrade rust-std-staticUpgrade rust-debugger-commonUpgrade rust-srcUpgrade rust-lldbUpgrade rls-debuginfoUpgrade rust-debuginfo | Aug 12, 2021 | Apr 11, 2021 |
| Debian | — | Upgrade rustc | Jul 30, 2024 | Apr 11, 2021 |
| Gentoo Linux | — | Upgrade dev-lang/rust-bin.Upgrade dev-lang/rust. | Oct 17, 2022 | Apr 11, 2021 |
| Oracle Solaris | — | Upgrade developer/rust/cargo to version 1.53.0-11.4.39.0.1.107.0 on Solaris 11.4Upgrade developer/rust/rustc to version 1.53.0-11.4.39.0.1.107.0 on Solaris 11.4 | Nov 17, 2021 | Apr 11, 2021 |
| Oracle_linux | — | Upgrade cargo-docUpgrade rustfmtUpgrade rust-analysisUpgrade rust-std-staticUpgrade clippyUpgrade rust-gdbUpgrade rust-srcUpgrade rust-lldbUpgrade rustUpgrade cargoUpgrade rust-debugger-commonUpgrade rust-toolsetUpgrade rust-docUpgrade rls | Aug 12, 2021 | Mar 7, 2021 |
| Redhat_linux | — | Upgrade rust-debugger-commonUpgrade clippy-debuginfoUpgrade clippyUpgrade cargoUpgrade rustUpgrade rust-debugsourceUpgrade rust-std-staticUpgrade rlsUpgrade cargo-debuginfoUpgrade rls-debuginfoUpgrade rust-docUpgrade rust-toolsetUpgrade rust-lldbUpgrade rust-srcUpgrade rust-analysisUpgrade rust-gdbUpgrade rustfmt-debuginfoUpgrade rustfmtUpgrade cargo-docUpgrade rust-debuginfo | Aug 12, 2021 | Apr 11, 2021 |
| Rocky_linux | — | Upgrade rlsUpgrade cargo-debuginfoUpgrade rust-std-staticUpgrade rust-debugsourceUpgrade clippy-debuginfoUpgrade rustUpgrade cargoUpgrade rust-debuginfoUpgrade rls-debuginfoUpgrade rustfmtUpgrade rust-analysisUpgrade rust-toolsetUpgrade rustfmt-debuginfoUpgrade rust-docUpgrade clippy | May 5, 2022 | Apr 11, 2021 |
| Ubuntu | — | Upgrade rustc | Nov 19, 2024 | Apr 11, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 11, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub