In the standard library in Rust before 1.52.0, the Zip implementation calls __iterator_get_unchecked() more than once for the same index (under certain conditions) when next_back() and next() are used together. This bug could lead to a memory safety violation due to an unmet safety requirement for the TrustedRandomAccess trait.
References
Configurations
History
21 Nov 2024, 06:00
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/rust-lang/rust/issues/82291 - Exploit, Issue Tracking, Third Party Advisory | |
| References | () https://github.com/rust-lang/rust/pull/82292 - Patch, Third Party Advisory | |
| References | () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CZ337CM4GFJLRDFVQCGC7J25V65JXOG5/ - | |
| References | () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TFUO3URYCO73D2Q4WYJBWAMJWGGVXQO4/ - | |
| References | () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VZG65GUW6Z2CYOQHF7T3TB5CZKIX6ZJE/ - | |
| References | () https://security.gentoo.org/glsa/202210-09 - Third Party Advisory |
07 Nov 2023, 03:32
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
|
Information
Published : 2021-04-11 20:15
Updated : 2024-11-21 06:00
NVD link : CVE-2021-28878
Mitre link : CVE-2021-28878
CVE.ORG link : CVE-2021-28878
JSON object : View
Products Affected
fedoraproject
- fedora
rust-lang
- rust
CWE
CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer