CVE-2021-28875: Buffer Overflow
In the standard library in Rust before 1.50.0, readtoend() does not validate the return value from Read in an unsafe context. This bug could lead to a buffer overflow.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is CVE-2021-28875?
CVE-2021-28875 is a vulnerability in Rust before version 1.50.0 that can lead to a buffer overflow due to read_to_end() not validating the return value from Read in an unsafe context.
What is the severity of CVE-2021-28875?
The severity of CVE-2021-28875 is high with a severity value of 7.5.
How does CVE-2021-28875 affect Rust?
CVE-2021-28875 affects Rust versions before 1.50.0 by potentially allowing a buffer overflow.
How can I fix CVE-2021-28875?
To fix CVE-2021-28875, update Rust to version 1.50.0 or newer.
Are there any references for CVE-2021-28875?
Yes, you can find references for CVE-2021-28875 at the following links: [Reference 1](https://github.com/rust-lang/rust/issues/80894), [Reference 2](https://github.com/rust-lang/rust/pull/80895), [Reference 3](https://security.gentoo.org/glsa/202210-09).