CVE-2021-28876

In the standard library in Rust before 1.52.0, the Zip implementation has a panic safety issue. It calls __iterator_get_unchecked() more than once for the same index when the underlying iterator panics (in certain conditions). This bug could lead to a memory safety violation due to an unmet safety requirement for the TrustedRandomAccess trait.

Weakness

The product does not handle or incorrectly handles an exceptional condition.

Affected Software

Name	Vendor	Start Version	End Version
Rust	Rust-lang	*	1.52.0 (excluding)
Red Hat Developer Tools	RedHat	rust-toolset-1.52-0:1.52.1-1.el7_9	*
Red Hat Developer Tools	RedHat	rust-toolset-1.52-rust-0:1.52.1-2.el7_9	*
Red Hat Enterprise Linux 8	RedHat	rust-toolset:rhel8-8040020210603202531.2daa1a95	*
Rustc	Ubuntu	bionic	*
Rustc	Ubuntu	esm-apps/focal	*
Rustc	Ubuntu	esm-apps/xenial	*
Rustc	Ubuntu	esm-infra-legacy/trusty	*
Rustc	Ubuntu	focal	*
Rustc	Ubuntu	groovy	*
Rustc	Ubuntu	hirsute	*
Rustc	Ubuntu	impish	*
Rustc	Ubuntu	jammy	*
Rustc	Ubuntu	kinetic	*
Rustc	Ubuntu	trusty	*
Rustc	Ubuntu	trusty/esm	*
Rustc	Ubuntu	upstream	*
Rustc	Ubuntu	xenial	*

NVD	https://nvd.nist.gov/vuln/detail/CVE-2021-28876
CWE	https://cwe.mitre.org/data/definitions/755.html

Improper Handling of Exceptional Conditions

Weakness

Affected Software

References