PT-2021-17974 · Rust+6 · Rust+6
Skifire13
·
Published
2021-04-11
·
Updated
2022-11-03
·
CVE-2021-28878
CVSS v3.1
7.5
High
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions:
Rust versions prior to 1.52.0
Description:
The issue arises in the standard library of Rust when the Zip implementation calls
iterator get unchecked() more than once for the same index under certain conditions, specifically when next back() and next() are used together. This can lead to a memory safety violation due to an unmet safety requirement for the TrustedRandomAccess trait.Recommendations:
For Rust versions prior to 1.52.0, update to version 1.52.0 or later to resolve the issue. As a temporary workaround, consider avoiding the use of
next back() and next() together in the Zip implementation until a patch is applied.Exploit
Fix
Buffer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Astra Linux
Centos
Debian
Red Hat
Rocky Linux
Rust