In the standard library in Rust before 1.52.0, the Zip implementation can report an incorrect size due to an integer overflow. This bug can lead to a buffer overflow when a consumed Zip iterator is used again.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rust-analysisUpgrade cargo-docUpgrade rust-debugger-commonUpgrade rust-lldbUpgrade rustfmtUpgrade rust-std-staticUpgrade clippyUpgrade rustUpgrade rust-srcUpgrade rust-docUpgrade cargoUpgrade rust-toolsetUpgrade rlsUpgrade rust-gdb | May 4, 2022 | Apr 11, 2021 |
| Amazon Linux Ami 2 | — | Upgrade cargo-docUpgrade rust-gdbUpgrade clippyUpgrade rust-srcUpgrade rlsUpgrade cargoUpgrade rust-analysisUpgrade rust-docUpgrade rust-std-staticUpgrade rustfmtUpgrade rustUpgrade rust-debuginfoUpgrade rust-debugger-common | Sep 30, 2022 | Apr 11, 2021 |
| Centos_linux | — | Upgrade rust-std-staticUpgrade rust-debugger-commonUpgrade clippy-debuginfoUpgrade cargo-debuginfoUpgrade rlsUpgrade clippyUpgrade cargoUpgrade rust-docUpgrade rustUpgrade rust-analysisUpgrade cargo-docUpgrade rust-toolsetUpgrade rust-lldbUpgrade rustfmt-debuginfoUpgrade rust-debugsourceUpgrade rustfmtUpgrade rust-srcUpgrade rls-debuginfoUpgrade rust-debuginfoUpgrade rust-gdb | Aug 12, 2021 | Apr 11, 2021 |
| Debian | — | Upgrade rustc | Jul 30, 2024 | Apr 11, 2021 |
| Gentoo Linux | — | Upgrade dev-lang/rust.Upgrade dev-lang/rust-bin. | Oct 17, 2022 | Apr 11, 2021 |
| Oracle Solaris | — | Upgrade developer/rust/cargo to version 1.53.0-11.4.39.0.1.107.0 on Solaris 11.4Upgrade developer/rust/rustc to version 1.53.0-11.4.39.0.1.107.0 on Solaris 11.4 | Nov 17, 2021 | Apr 11, 2021 |
| Oracle_linux | — | Upgrade rust-debugger-commonUpgrade rust-std-staticUpgrade rust-lldbUpgrade rust-docUpgrade rlsUpgrade rustfmtUpgrade clippyUpgrade rust-srcUpgrade cargo-docUpgrade cargoUpgrade rustUpgrade rust-analysisUpgrade rust-toolsetUpgrade rust-gdb | Aug 12, 2021 | Mar 5, 2021 |
| Redhat_linux | — | Upgrade rustfmtUpgrade rust-analysisUpgrade rls-debuginfoUpgrade rust-std-staticUpgrade cargo-docUpgrade rustfmt-debuginfoUpgrade rust-docUpgrade rustUpgrade rust-srcUpgrade cargoUpgrade cargo-debuginfoUpgrade clippy-debuginfoUpgrade clippyUpgrade rlsUpgrade rust-lldbUpgrade rust-debugsourceUpgrade rust-gdbUpgrade rust-toolsetUpgrade rust-debugger-commonUpgrade rust-debuginfo | Aug 12, 2021 | Apr 11, 2021 |
| Rocky_linux | — | Upgrade rust-debuginfoUpgrade rust-toolsetUpgrade rustfmtUpgrade rustfmt-debuginfoUpgrade rust-analysisUpgrade rls-debuginfoUpgrade clippyUpgrade rust-std-staticUpgrade cargo-debuginfoUpgrade rustUpgrade rust-docUpgrade cargoUpgrade clippy-debuginfoUpgrade rust-debugsourceUpgrade rls | May 5, 2022 | Apr 11, 2021 |
| Ubuntu | — | Upgrade rustc | Nov 19, 2024 | Apr 11, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 11, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub