vulnerability

Rocky Linux: CVE-2020-36318: rust-toolset-rhel8 (RLSA-2021-1935)

Severity
8
CVSS
(AV:N/AC:L/Au:N/C:P/I:P/A:P)
Published
Apr 11, 2021
Added
Mar 12, 2024
Modified
Aug 13, 2025

Description

In the standard library in Rust before 1.49.0, VecDeque::make_contiguous has a bug that pops the same element more than once under certain condition. This bug could result in a use-after-free or double free.

Solutions

rocky-upgrade-cargorocky-upgrade-cargo-debuginforocky-upgrade-clippyrocky-upgrade-clippy-debuginforocky-upgrade-rlsrocky-upgrade-rls-debuginforocky-upgrade-rustrocky-upgrade-rust-analysisrocky-upgrade-rust-debuginforocky-upgrade-rust-debugsourcerocky-upgrade-rust-docrocky-upgrade-rust-std-staticrocky-upgrade-rust-toolsetrocky-upgrade-rustfmtrocky-upgrade-rustfmt-debuginfo
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.