In the standard library in Rust before 1.52.0, the Zip implementation can report an incorrect size due to an integer overflow. This bug can lead to a buffer overflow when a consumed Zip iterator is used again.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade clippyUpgrade rust-std-staticUpgrade rust-debugger-commonUpgrade cargo-docUpgrade rust-analysisUpgrade rust-lldbUpgrade rustUpgrade rustfmtUpgrade rlsUpgrade cargoUpgrade rust-srcUpgrade rust-toolsetUpgrade rust-gdbUpgrade rust-doc | May 4, 2022 | Apr 11, 2021 |
| Amazon Linux Ami 2 | — | Upgrade rust-debuginfoUpgrade rustUpgrade rustfmtUpgrade rust-debugger-commonUpgrade rust-std-staticUpgrade rust-analysisUpgrade rust-srcUpgrade clippyUpgrade cargo-docUpgrade rlsUpgrade rust-gdbUpgrade rust-docUpgrade cargo | Sep 30, 2022 | Apr 11, 2021 |
| Centos_linux | — | Upgrade rust-gdbUpgrade rust-debugsourceUpgrade rustfmt-debuginfoUpgrade rls-debuginfoUpgrade rust-debuginfoUpgrade cargo-docUpgrade rust-srcUpgrade rustfmtUpgrade rust-lldbUpgrade rust-toolsetUpgrade rust-analysisUpgrade clippy-debuginfoUpgrade clippyUpgrade rust-std-staticUpgrade rust-debugger-commonUpgrade rust-docUpgrade cargo-debuginfoUpgrade cargoUpgrade rustUpgrade rls | Aug 12, 2021 | Apr 11, 2021 |
| Debian | — | Upgrade rustc | Jul 30, 2024 | Apr 11, 2021 |
| Gentoo Linux | — | Upgrade dev-lang/rust-bin.Upgrade dev-lang/rust. | Oct 17, 2022 | Apr 11, 2021 |
| Oracle Solaris | — | Upgrade developer/rust/cargo to version 1.53.0-11.4.39.0.1.107.0 on Solaris 11.4Upgrade developer/rust/rustc to version 1.53.0-11.4.39.0.1.107.0 on Solaris 11.4 | Nov 17, 2021 | Apr 11, 2021 |
| Oracle_linux | — | Upgrade rust-lldbUpgrade rust-std-staticUpgrade rust-debugger-commonUpgrade rustUpgrade rustfmtUpgrade clippyUpgrade cargo-docUpgrade rust-docUpgrade rust-gdbUpgrade rlsUpgrade rust-srcUpgrade cargoUpgrade rust-analysisUpgrade rust-toolset | Aug 12, 2021 | Mar 5, 2021 |
| Redhat_linux | — | Upgrade rust-debugsourceUpgrade rust-toolsetUpgrade clippyUpgrade rust-debuginfoUpgrade rustfmt-debuginfoUpgrade rust-docUpgrade rust-lldbUpgrade clippy-debuginfoUpgrade rust-srcUpgrade cargoUpgrade rlsUpgrade cargo-debuginfoUpgrade rust-debugger-commonUpgrade rust-gdbUpgrade rustUpgrade cargo-docUpgrade rust-std-staticUpgrade rls-debuginfoUpgrade rust-analysisUpgrade rustfmt | Aug 12, 2021 | Apr 11, 2021 |
| Rocky_linux | — | Upgrade rust-analysisUpgrade rls-debuginfoUpgrade rust-debuginfoUpgrade rustfmtUpgrade rustfmt-debuginfoUpgrade rust-toolsetUpgrade rlsUpgrade rustUpgrade rust-std-staticUpgrade cargo-debuginfoUpgrade rust-debugsourceUpgrade clippy-debuginfoUpgrade clippyUpgrade rust-docUpgrade cargo | May 5, 2022 | Apr 11, 2021 |
| Ubuntu | — | Upgrade rustc | Nov 19, 2024 | Apr 11, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 11, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub