In the standard library in Rust before 1.52.0, the Zip implementation can report an incorrect size due to an integer overflow. This bug can lead to a buffer overflow when a consumed Zip iterator is used again.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade cargo-docUpgrade rust-analysisUpgrade rust-debugger-commonUpgrade rustUpgrade rust-lldbUpgrade rustfmtUpgrade rust-std-staticUpgrade clippyUpgrade cargoUpgrade rlsUpgrade rust-gdbUpgrade rust-srcUpgrade rust-docUpgrade rust-toolset | May 4, 2022 | Apr 11, 2021 |
| Amazon Linux Ami 2 | — | Upgrade rust-debuginfoUpgrade rustfmtUpgrade rust-std-staticUpgrade rustUpgrade rust-debugger-commonUpgrade rust-analysisUpgrade rust-srcUpgrade cargo-docUpgrade clippyUpgrade rust-docUpgrade rust-gdbUpgrade rlsUpgrade cargo | Sep 30, 2022 | Apr 11, 2021 |
| Centos_linux | — | Upgrade rust-docUpgrade cargoUpgrade rust-debugger-commonUpgrade clippy-debuginfoUpgrade rust-std-staticUpgrade cargo-debuginfoUpgrade clippyUpgrade rlsUpgrade rustUpgrade cargo-docUpgrade rust-toolsetUpgrade rust-lldbUpgrade rustfmtUpgrade rust-srcUpgrade rust-debuginfoUpgrade rls-debuginfoUpgrade rust-analysisUpgrade rustfmt-debuginfoUpgrade rust-debugsourceUpgrade rust-gdb | Aug 12, 2021 | Apr 11, 2021 |
| Debian | — | Upgrade rustc | Jul 30, 2024 | Apr 11, 2021 |
| Gentoo Linux | — | Upgrade dev-lang/rust-bin.Upgrade dev-lang/rust. | Oct 17, 2022 | Apr 11, 2021 |
| Oracle Solaris | — | Upgrade developer/rust/cargo to version 1.53.0-11.4.39.0.1.107.0 on Solaris 11.4Upgrade developer/rust/rustc to version 1.53.0-11.4.39.0.1.107.0 on Solaris 11.4 | Nov 17, 2021 | Apr 11, 2021 |
| Oracle_linux | — | Upgrade rust-docUpgrade cargo-docUpgrade rust-toolsetUpgrade rust-gdbUpgrade cargoUpgrade rust-analysisUpgrade rlsUpgrade rust-srcUpgrade rustfmtUpgrade clippyUpgrade rustUpgrade rust-debugger-commonUpgrade rust-std-staticUpgrade rust-lldb | Aug 12, 2021 | Mar 5, 2021 |
| Redhat_linux | — | Upgrade clippy-debuginfoUpgrade rust-docUpgrade rust-toolsetUpgrade cargoUpgrade rlsUpgrade clippyUpgrade rust-debugger-commonUpgrade rustfmt-debuginfoUpgrade rust-debuginfoUpgrade rustUpgrade cargo-debuginfoUpgrade rust-lldbUpgrade rust-debugsourceUpgrade rust-srcUpgrade rust-gdbUpgrade rustfmtUpgrade rust-std-staticUpgrade rust-analysisUpgrade rls-debuginfoUpgrade cargo-doc | Aug 12, 2021 | Apr 11, 2021 |
| Rocky_linux | — | Upgrade rust-debuginfoUpgrade rust-analysisUpgrade rustfmtUpgrade rls-debuginfoUpgrade rustfmt-debuginfoUpgrade rust-toolsetUpgrade rustUpgrade clippy-debuginfoUpgrade rlsUpgrade cargo-debuginfoUpgrade rust-docUpgrade rust-std-staticUpgrade clippyUpgrade cargoUpgrade rust-debugsource | May 5, 2022 | Apr 11, 2021 |
| Ubuntu | — | Upgrade rustc | Nov 19, 2024 | Apr 11, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 11, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub