In the standard library in Rust before 1.52.0, the Zip implementation can report an incorrect size due to an integer overflow. This bug can lead to a buffer overflow when a consumed Zip iterator is used again.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rust-gdbUpgrade cargoUpgrade rust-docUpgrade rlsUpgrade rust-toolsetUpgrade rust-srcUpgrade rust-lldbUpgrade rustUpgrade rust-analysisUpgrade cargo-docUpgrade rustfmtUpgrade rust-std-staticUpgrade clippyUpgrade rust-debugger-common | May 4, 2022 | Apr 11, 2021 |
| Amazon Linux Ami 2 | — | Upgrade rustfmtUpgrade rustUpgrade rust-std-staticUpgrade rust-debuginfoUpgrade rust-debugger-commonUpgrade clippyUpgrade rust-docUpgrade rust-gdbUpgrade cargo-docUpgrade rust-analysisUpgrade rust-srcUpgrade cargoUpgrade rls | Sep 30, 2022 | Apr 11, 2021 |
| Centos_linux | — | Upgrade rustfmtUpgrade rust-toolsetUpgrade rls-debuginfoUpgrade rust-debuginfoUpgrade cargo-docUpgrade rust-gdbUpgrade rust-debugsourceUpgrade rustfmt-debuginfoUpgrade rust-lldbUpgrade rust-srcUpgrade rust-analysisUpgrade rlsUpgrade rust-std-staticUpgrade rust-docUpgrade cargo-debuginfoUpgrade cargoUpgrade rust-debugger-commonUpgrade rustUpgrade clippy-debuginfoUpgrade clippy | Aug 12, 2021 | Apr 11, 2021 |
| Debian | — | Upgrade rustc | Jul 30, 2024 | Apr 11, 2021 |
| Gentoo Linux | — | Upgrade dev-lang/rust.Upgrade dev-lang/rust-bin. | Oct 17, 2022 | Apr 11, 2021 |
| Oracle Solaris | — | Upgrade developer/rust/cargo to version 1.53.0-11.4.39.0.1.107.0 on Solaris 11.4Upgrade developer/rust/rustc to version 1.53.0-11.4.39.0.1.107.0 on Solaris 11.4 | Nov 17, 2021 | Apr 11, 2021 |
| Oracle_linux | — | Upgrade rustUpgrade rlsUpgrade cargoUpgrade clippyUpgrade cargo-docUpgrade rust-analysisUpgrade rust-docUpgrade rust-toolsetUpgrade rust-gdbUpgrade rust-srcUpgrade rustfmtUpgrade rust-debugger-commonUpgrade rust-lldbUpgrade rust-std-static | Aug 12, 2021 | Mar 5, 2021 |
| Redhat_linux | — | Upgrade rustfmtUpgrade cargo-docUpgrade rls-debuginfoUpgrade rust-std-staticUpgrade rust-analysisUpgrade rustUpgrade rust-docUpgrade rust-toolsetUpgrade rust-lldbUpgrade clippy-debuginfoUpgrade cargoUpgrade cargo-debuginfoUpgrade rustfmt-debuginfoUpgrade rust-gdbUpgrade rust-debugsourceUpgrade rust-srcUpgrade clippyUpgrade rlsUpgrade rust-debuginfoUpgrade rust-debugger-common | Aug 12, 2021 | Apr 11, 2021 |
| Rocky_linux | — | Upgrade rust-debugsourceUpgrade rustUpgrade rust-docUpgrade rust-std-staticUpgrade rlsUpgrade cargo-debuginfoUpgrade cargoUpgrade clippy-debuginfoUpgrade clippyUpgrade rust-analysisUpgrade rustfmtUpgrade rust-debuginfoUpgrade rustfmt-debuginfoUpgrade rls-debuginfoUpgrade rust-toolset | May 5, 2022 | Apr 11, 2021 |
| Ubuntu | — | Upgrade rustc | Nov 19, 2024 | Apr 11, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 11, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub