This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page.
View CVE-2021-28879 →
DEBIAN-CVE-2021-28879
In the standard library in Rust before 1.52.0, the Zip implementation can report an incorrect size due to an integer overflow. This bug can lead to a...
Original description
The description as published by the source.
In the standard library in Rust before 1.52.0, the Zip implementation can report an incorrect size due to an integer overflow. This bug can lead to a buffer overflow when a consumed Zip iterator is used again.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Affected packages
Debian:12
rustc
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.53.0+dfsg1-1"}]}]
Debian:13
rustc
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.53.0+dfsg1-1"}]}]
Debian:14
rustc
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.53.0+dfsg1-1"}]}]
References
- advisory security-tracker.debian.org