This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2021-28878 →

DEBIAN-CVE-2021-28878

In the standard library in Rust before 1.52.0, the Zip implementation calls __iterator_get_unchecked() more than once for the same index (under certai...

Original description

The description as published by the source.

In the standard library in Rust before 1.52.0, the Zip implementation calls __iterator_get_unchecked() more than once for the same index (under certain conditions) when next_back() and next() are used together. This bug could lead to a memory safety violation due to an unmet safety requirement for the TrustedRandomAccess trait.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Debian:12 rustc

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.53.0+dfsg1-1"}]}]

Debian:13 rustc

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.53.0+dfsg1-1"}]}]

Debian:14 rustc

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.53.0+dfsg1-1"}]}]

References

advisory security-tracker.debian.org