Vulnerability CVE-2021-28878: Information
Description
In the standard library in Rust before 1.52.0, the Zip implementation calls __iterator_get_unchecked() more than once for the same index (under certain conditions) when next_back() and next() are used together. This bug could lead to a memory safety violation due to an unmet safety requirement for the TrustedRandomAccess trait.
Severity: HIGH (7.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Fixed packages
Package name | Branch | Fixed in version | Version from repository | Errata ID | Task # | State |
|---|---|---|---|---|---|---|
| rust | sisyphus | 1.51.0-alt1 | 1.77.1-alt1 | ALT-PU-2021-1761-1 | 271165 | Fixed |
| rust | p10 | 1.51.0-alt1 | 1.74.1-alt0.p10.1 | ALT-PU-2021-1761-1 | 271165 | Fixed |
| rust | p9 | 1.55.0-alt0.p9.1 | 1.64.0-alt0.c9.2 | ALT-PU-2022-1778-1 | 288073 | Fixed |
| rust | c10f1 | 1.51.0-alt1 | 1.72.1-alt0.c10.2 | ALT-PU-2021-1761-1 | 271165 | Fixed |
| rust | c9f2 | 1.55.0-alt0.c9.1 | 1.64.0-alt0.c9.2 | ALT-PU-2021-3365-1 | 288792 | Fixed |
References to Advisories, Solutions, and Tools
Hyperlink | Resource |
|---|---|
| https://github.com/rust-lang/rust/issues/82291 |
|
| https://github.com/rust-lang/rust/pull/82292 |
|
| GLSA-202210-09 |
|
| FEDORA-2021-d0ba1901ca | |
| FEDORA-2021-b1ba54add6 | |
| FEDORA-2021-d7f74f0250 |