CVE-2021-28877: Buffer Overflow
Published Apr 11, 2021
·Updated
In the standard library in Rust before 1.51.0, the Zip implementation calls iteratorgetunchecked() for the same index more than once when nested. This bug can lead to a memory safety violation due to an unmet safety requirement for the TrustedRandomAccess trait.
Affected Software
1 affected component
rust-lang Rust<1.51.0
Remediation
Patch Available
Event History
Apr 11, 2021
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is CVE-2021-28877?
CVE-2021-28877 is a vulnerability in the standard library of Rust before version 1.51.0 that can lead to a memory safety violation.
2
How severe is CVE-2021-28877?
CVE-2021-28877 has a severity rating of 7.5 (high).
3
How does CVE-2021-28877 affect Rust?
CVE-2021-28877 affects Rust versions up to (excluding) 1.51.0.
4
What is the Common Weakness Enumeration (CWE) ID for CVE-2021-28877?
The CWE ID for CVE-2021-28877 is CWE-119.
5
How can I fix CVE-2021-28877?
To fix CVE-2021-28877, upgrade Rust to version 1.51.0 or later.