Vulnerabilities > CVE-2021-28876 - Improper Handling of Exceptional Conditions vulnerability in multiple products

CVSS 5.3 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

LOW

Availability impact

NONE

network

low complexity

rust-lang

fedoraproject

CWE-755

NVD

Published: 2021-04-11

Updated: 2023-11-07

Summary

In the standard library in Rust before 1.52.0, the Zip implementation has a panic safety issue. It calls __iterator_get_unchecked() more than once for the same index when the underlying iterator panics (in certain conditions). This bug could lead to a memory safety violation due to an unmet safety requirement for the TrustedRandomAccess trait.

Vulnerable Configurations

Part	Description	Count
Application	Rust-Lang Rust Lang Rust 0.1 Rust Lang Rust 0.2 Rust Lang Rust 0.3 Rust Lang Rust 0.3.1 Rust Lang Rust 0.4 Rust Lang Rust 0.5 Rust Lang Rust 0.6 Rust Lang Rust 0.7 Rust Lang Rust 0.8 Rust Lang Rust 0.9 Rust Lang Rust 0.10 Rust Lang Rust 0.11.0 Rust Lang Rust 0.12.0 Rust Lang Rust 1.0.0 Rust Lang Rust 1.1.0 Rust Lang Rust 1.2.0 Rust Lang Rust 1.3.0 Rust Lang Rust 1.4.0 Rust Lang Rust 1.5.0 Rust Lang Rust 1.6.0 Rust Lang Rust 1.7.0 Rust Lang Rust 1.8.0 Rust Lang Rust 1.9.0 Rust Lang Rust 1.10.0 Rust Lang Rust 1.11.0 Rust Lang Rust 1.12.0 Rust Lang Rust 1.12.1 Rust Lang Rust 1.13.0 Rust Lang Rust 1.14.0 Rust Lang Rust 1.15.0 Rust Lang Rust 1.15.1 Rust Lang Rust 1.16.0 Rust Lang Rust 1.17.0 Rust Lang Rust 1.18.0 Rust Lang Rust 1.19.0 Rust Lang Rust 1.20.0 Rust Lang Rust 1.21.0 Rust Lang Rust 1.22.0 Rust Lang Rust 1.22.1 Rust Lang Rust 1.23.0 Rust Lang Rust 1.24.0 Rust Lang Rust 1.24.1 Rust Lang Rust 1.25.0 Rust Lang Rust 1.26.0 Rust Lang Rust 1.26.1 Rust Lang Rust 1.26.2 Rust Lang Rust 1.27.0 Rust Lang Rust 1.27.1 Rust Lang Rust 1.27.2 Rust Lang Rust 1.28.0 Rust Lang Rust 1.29.0 Rust Lang Rust 1.29.1 Rust Lang Rust 1.29.2 Rust Lang Rust 1.30.0 Rust Lang Rust 1.30.1 Rust Lang Rust 1.31.0 Rust Lang Rust 1.31.1 Rust Lang Rust 1.32.0 Rust Lang Rust 1.33.0 Rust Lang Rust 1.34.0 Rust Lang Rust 1.34.1 Rust Lang Rust 1.34.2 Rust Lang Rust 1.35.0 Rust Lang Rust 1.36.0 Rust Lang Rust 1.37.0 Rust Lang Rust 1.38.0 Rust Lang Rust 1.39.0 Rust Lang Rust 1.40.0 Rust Lang Rust 1.41.0 Rust Lang Rust 1.41.1 Rust Lang Rust 1.42.0 Rust Lang Rust 1.43.0 Rust Lang Rust 1.43.1 Rust Lang Rust 1.44.0 Rust Lang Rust 1.44.1 Rust Lang Rust 1.45.0 Rust Lang Rust 1.45.1 Rust Lang Rust 1.45.2 Rust Lang Rust 1.46.0 Rust Lang Rust 1.47.0 Rust Lang Rust 1.48.0 Rust Lang Rust 1.49.0 Rust Lang Rust 1.50.0 Rust Lang Rust 1.51.0	89
OS	Fedoraproject Fedoraproject Fedora 32 Fedoraproject Fedora 33 Fedoraproject Fedora 34	3

Common Weakness Enumeration (CWE)

CWE-755 - Improper Handling of Exceptional Conditions

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References