In the standard library in Rust before 1.52.0, the Zip implementation has a panic safety issue. It calls __iterator_get_unchecked() more than once for the same index when the underlying iterator panics (in certain conditions). This bug could lead to a memory safety violation due to an unmet safety requirement for the TrustedRandomAccess trait.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-cargoalma-upgrade-cargo-docalma-upgrade-clippyalma-upgrade-rlsalma-upgrade-rustalma-upgrade-rust-analysisalma-upgrade-rust-debugger-commonalma-upgrade-rust-docalma-upgrade-rust-gdbalma-upgrade-rust-lldbalma-upgrade-rust-srcalma-upgrade-rust-std-staticalma-upgrade-rust-toolsetalma-upgrade-rustfmt | May 4, 2022 | Apr 11, 2021 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-cargoamazon-linux-ami-2-upgrade-cargo-docamazon-linux-ami-2-upgrade-clippyamazon-linux-ami-2-upgrade-rlsamazon-linux-ami-2-upgrade-rustamazon-linux-ami-2-upgrade-rust-analysisamazon-linux-ami-2-upgrade-rust-debugger-commonamazon-linux-ami-2-upgrade-rust-debuginfoamazon-linux-ami-2-upgrade-rust-docamazon-linux-ami-2-upgrade-rust-gdbamazon-linux-ami-2-upgrade-rust-srcamazon-linux-ami-2-upgrade-rust-std-staticamazon-linux-ami-2-upgrade-rustfmt | Sep 30, 2022 | Apr 11, 2021 | |
| Centos_linux | — | centos-upgrade-cargocentos-upgrade-cargo-debuginfocentos-upgrade-cargo-doccentos-upgrade-clippycentos-upgrade-clippy-debuginfocentos-upgrade-rlscentos-upgrade-rls-debuginfocentos-upgrade-rustcentos-upgrade-rust-analysiscentos-upgrade-rust-debugger-commoncentos-upgrade-rust-debuginfocentos-upgrade-rust-debugsourcecentos-upgrade-rust-doccentos-upgrade-rust-gdbcentos-upgrade-rust-lldbcentos-upgrade-rust-srccentos-upgrade-rust-std-staticcentos-upgrade-rust-toolsetcentos-upgrade-rustfmtcentos-upgrade-rustfmt-debuginfo | Aug 12, 2021 | Apr 11, 2021 |
| Debian | debian-upgrade-rustc | Jul 30, 2024 | Apr 11, 2021 | |
| Gentoo Linux | gentoo-linux-upgrade-dev-lang-rustgentoo-linux-upgrade-dev-lang-rust-bin | Oct 17, 2022 | Apr 11, 2021 | |
| Oracle Solaris | oracle-solaris-11-4-upgrade-developer-rust-cargo-1-53-0-11-4-39-0-1-107-0oracle-solaris-11-4-upgrade-developer-rust-rustc-1-53-0-11-4-39-0-1-107-0 | Nov 17, 2021 | Apr 11, 2021 | |
| Oracle_linux | — | oracle-linux-upgrade-cargooracle-linux-upgrade-cargo-docoracle-linux-upgrade-clippyoracle-linux-upgrade-rlsoracle-linux-upgrade-rustoracle-linux-upgrade-rust-analysisoracle-linux-upgrade-rust-debugger-commonoracle-linux-upgrade-rust-docoracle-linux-upgrade-rustfmtoracle-linux-upgrade-rust-gdboracle-linux-upgrade-rust-lldboracle-linux-upgrade-rust-srcoracle-linux-upgrade-rust-std-staticoracle-linux-upgrade-rust-toolset | Aug 12, 2021 | Feb 4, 2021 |
| Redhat_linux | redhat-upgrade-cargoredhat-upgrade-cargo-debuginforedhat-upgrade-cargo-docredhat-upgrade-clippyredhat-upgrade-clippy-debuginforedhat-upgrade-rlsredhat-upgrade-rls-debuginforedhat-upgrade-rustredhat-upgrade-rust-analysisredhat-upgrade-rust-debugger-commonredhat-upgrade-rust-debuginforedhat-upgrade-rust-debugsourceredhat-upgrade-rust-docredhat-upgrade-rust-gdbredhat-upgrade-rust-lldbredhat-upgrade-rust-srcredhat-upgrade-rust-std-staticredhat-upgrade-rust-toolsetredhat-upgrade-rustfmtredhat-upgrade-rustfmt-debuginfo | Aug 12, 2021 | Apr 11, 2021 | |
| Rocky_linux | rocky-upgrade-cargorocky-upgrade-cargo-debuginforocky-upgrade-clippyrocky-upgrade-clippy-debuginforocky-upgrade-rlsrocky-upgrade-rls-debuginforocky-upgrade-rustrocky-upgrade-rust-analysisrocky-upgrade-rust-debuginforocky-upgrade-rust-debugsourcerocky-upgrade-rust-docrocky-upgrade-rust-std-staticrocky-upgrade-rust-toolsetrocky-upgrade-rustfmtrocky-upgrade-rustfmt-debuginfo | May 5, 2022 | Apr 11, 2021 | |
| Ubuntu | ubuntu-upgrade-rustc | Nov 19, 2024 | Apr 11, 2021 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Apr 11, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub