In the standard library in Rust before 1.50.0, read_to_end() does not validate the return value from Read in an unsafe context. This bug could lead to a buffer overflow.
The product does not check the return value from a method or function, which can prevent it from detecting unexpected states and conditions.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Rust | Rust-lang | * | 1.50.0 (excluding) |
| Red Hat Developer Tools | RedHat | rust-toolset-1.52-0:1.52.1-1.el7_9 | * |
| Red Hat Developer Tools | RedHat | rust-toolset-1.52-rust-0:1.52.1-2.el7_9 | * |
| Red Hat Enterprise Linux 8 | RedHat | rust-toolset:rhel8-8040020210603202531.2daa1a95 | * |
| Rustc | Ubuntu | bionic | * |
| Rustc | Ubuntu | esm-apps/focal | * |
| Rustc | Ubuntu | esm-apps/xenial | * |
| Rustc | Ubuntu | esm-infra-legacy/trusty | * |
| Rustc | Ubuntu | focal | * |
| Rustc | Ubuntu | groovy | * |
| Rustc | Ubuntu | hirsute | * |
| Rustc | Ubuntu | impish | * |
| Rustc | Ubuntu | kinetic | * |
| Rustc | Ubuntu | trusty | * |
| Rustc | Ubuntu | trusty/esm | * |
| Rustc | Ubuntu | upstream | * |
| Rustc | Ubuntu | xenial | * |