Published: 11/04/2021 Updated: 07/11/2023

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

CVSS v3 Base Score: 5.3 | Impact Score: 1.4 | Exploitability Score: 3.9

VMScore: 383

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

In the standard library in Rust prior to 1.52.0, the Zip implementation has a panic safety issue. It calls __iterator_get_unchecked() more than once for the same index when the underlying iterator panics (in certain conditions). This bug could lead to a memory safety violation due to an unmet safety requirement for the TrustedRandomAccess trait.

Vulnerable Product	Search on Vulmon	Subscribe to Product
rust-lang rust
fedoraproject fedora 32
fedoraproject fedora 33
fedoraproject fedora 34

Debian Bug report logs - #986803 CVE-2021-28875 CVE-2021-28876 CVE-2021-28877 CVE-2021-28878 CVE-2021-28879 CVE-2020-36317 CVE-2020-36318 Package: rustc; Maintainer for rustc is Debian Rust Maintainers <pkg-rust-maintainers@alioth-listsdebiannet>; Source for rustc is src:rustc (PTS, buildd, popcon) Reported by: Moritz Mueh ...

In the standard library in Rust before 1520, there is an optimization for joining strings that can cause uninitialized bytes to be exposed (or the program to crash) if the borrowed string changes after its length is checked (CVE-2020-36323) In the standard library in Rust before 1520, the Zip implementation has a panic safety issue It calls _ ...

In the standard library in Rust before 1520, the Zip implementation has a panic safety issue It calls __iterator_get_unchecked() more than once for the same index when the underlying iterator panics (in certain conditions) This bug could lead to a memory safety violation due to an unmet safety requirement for the TrustedRandomAccess trait ...

CWE-755 https://github.com/rust-lang/rust/issues/81740 https://github.com/rust-lang/rust/pull/81741 https://security.gentoo.org/glsa/202210-09 https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CZ337CM4GFJLRDFVQCGC7J25V65JXOG5/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VZG65GUW6Z2CYOQHF7T3TB5CZKIX6ZJE/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TFUO3URYCO73D2Q4WYJBWAMJWGGVXQO4/https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=986803 https://nvd.nist.gov https://alas.aws.amazon.com/AL2/ALAS-2022-1816.html

CVE-2021-28876

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect