In the standard library in Rust before 1.52.0, the Zip implementation can report an incorrect size due to an integer overflow. This bug can lead to a buffer overflow when a consumed Zip iterator is used again.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rust-toolsetUpgrade cargoUpgrade rlsUpgrade rust-srcUpgrade rust-gdbUpgrade rust-docUpgrade rustUpgrade rust-debugger-commonUpgrade rust-std-staticUpgrade cargo-docUpgrade clippyUpgrade rustfmtUpgrade rust-analysisUpgrade rust-lldb | May 4, 2022 | Apr 11, 2021 |
| Amazon Linux Ami 2 | — | Upgrade clippyUpgrade rust-docUpgrade rust-gdbUpgrade rust-srcUpgrade cargo-docUpgrade rust-analysisUpgrade cargoUpgrade rlsUpgrade rust-debugger-commonUpgrade rust-debuginfoUpgrade rustfmtUpgrade rustUpgrade rust-std-static | Sep 30, 2022 | Apr 11, 2021 |
| Centos_linux | — | Upgrade rlsUpgrade rustUpgrade clippyUpgrade rust-std-staticUpgrade cargoUpgrade cargo-debuginfoUpgrade rust-docUpgrade clippy-debuginfoUpgrade rust-debugger-commonUpgrade rustfmt-debuginfoUpgrade rust-debugsourceUpgrade rust-gdbUpgrade rust-lldbUpgrade rust-debuginfoUpgrade rls-debuginfoUpgrade rust-analysisUpgrade rust-srcUpgrade rust-toolsetUpgrade cargo-docUpgrade rustfmt | Aug 12, 2021 | Apr 11, 2021 |
| Debian | — | Upgrade rustc | Jul 30, 2024 | Apr 11, 2021 |
| Gentoo Linux | — | Upgrade dev-lang/rust.Upgrade dev-lang/rust-bin. | Oct 17, 2022 | Apr 11, 2021 |
| Oracle Solaris | — | Upgrade developer/rust/rustc to version 1.53.0-11.4.39.0.1.107.0 on Solaris 11.4Upgrade developer/rust/cargo to version 1.53.0-11.4.39.0.1.107.0 on Solaris 11.4 | Nov 17, 2021 | Apr 11, 2021 |
| Oracle_linux | — | Upgrade rust-debugger-commonUpgrade rust-std-staticUpgrade rust-lldbUpgrade rustUpgrade rust-gdbUpgrade rust-docUpgrade rlsUpgrade rustfmtUpgrade rust-toolsetUpgrade rust-srcUpgrade cargo-docUpgrade rust-analysisUpgrade cargoUpgrade clippy | Aug 12, 2021 | Mar 5, 2021 |
| Redhat_linux | — | Upgrade clippy-debuginfoUpgrade rustfmt-debuginfoUpgrade rust-toolsetUpgrade cargo-debuginfoUpgrade rust-debuginfoUpgrade rustUpgrade rust-docUpgrade rust-debugger-commonUpgrade cargoUpgrade rust-lldbUpgrade rlsUpgrade rust-srcUpgrade clippyUpgrade rust-gdbUpgrade rust-debugsourceUpgrade cargo-docUpgrade rust-analysisUpgrade rust-std-staticUpgrade rustfmtUpgrade rls-debuginfo | Aug 12, 2021 | Apr 11, 2021 |
| Rocky_linux | — | Upgrade rustfmtUpgrade rust-toolsetUpgrade rust-analysisUpgrade rustfmt-debuginfoUpgrade rls-debuginfoUpgrade rust-debuginfoUpgrade clippy-debuginfoUpgrade rust-docUpgrade rlsUpgrade cargo-debuginfoUpgrade rust-std-staticUpgrade cargoUpgrade clippyUpgrade rust-debugsourceUpgrade rust | May 5, 2022 | Apr 11, 2021 |
| Ubuntu | — | Upgrade rustc | Nov 19, 2024 | Apr 11, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 11, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub