In the standard library in Rust before 1.49.0, String::retain() function has a panic safety problem. It allows creation of a non-UTF-8 Rust string when the provided closure panics. This bug could result in a memory safety violation when other string APIs assume that UTF-8 encoding is used on the same string.

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2021:0061 advisory.

    Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities:

    CVE-2020-36317:
    In the standard library in Rust before 1.49.0, String::retain() function has a panic safety problem. It     allows creation of a non-UTF-8 Rust string when the provided closure panics. This bug could result in a     memory safety violation when other string APIs assume that UTF-8 encoding is used on the same string.

    CVE-2020-36323:
    In the standard library in Rust before 1.52.0, there is an optimization for joining strings that can cause     uninitialized bytes to be exposed (or the program to crash) if the borrowed string changes after its     length is checked.

    CVE-2021-28875:
    In the standard library in Rust before 1.50.0, read_to_end() does not validate the return value from Read     in an unsafe context. This bug could lead to a buffer overflow.

    CVE-2021-28876:
    In the standard library in Rust before 1.52.0, the Zip implementation has a panic safety issue. It calls
    __iterator_get_unchecked() more than once for the same index when the underlying iterator panics (in     certain conditions). This bug could lead to a memory safety violation due to an unmet safety requirement     for the TrustedRandomAccess trait.

    CVE-2021-28877:
    In the standard library in Rust before 1.51.0, the Zip implementation calls __iterator_get_unchecked() for     the same index more than once when nested. This bug can lead to a memory safety violation due to an unmet     safety requirement for the TrustedRandomAccess trait.

    CVE-2021-28878:
    In the standard library in Rust before 1.52.0, the Zip implementation calls __iterator_get_unchecked()     more than once for the same index (under certain conditions) when next_back() and next() are used     together. This bug could lead to a memory safety violation due to an unmet safety requirement for the     TrustedRandomAccess trait.

    CVE-2021-28879:
    In the standard library in Rust before 1.52.0, the Zip implementation can report an incorrect size due to     an integer overflow. This bug can lead to a buffer overflow when a consumed Zip iterator is used again.

    CVE-2021-31162:
    In the standard library in Rust before 1.52.0, a double free can occur in the Vec::from_iter function if     freeing the element panics.

Tenable has extracted the preceding description block directly from the Alibaba Cloud Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In the standard library in Rust before 1.49.0, String::retain() function has a panic safety problem. It     allows creation of a non-UTF-8 Rust string when the provided closure panics. This bug could result in a     memory safety violation when other string APIs assume that UTF-8 encoding is used on the same string.
    (CVE-2020-36317)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2021:1935 advisory.

  - In the standard library in Rust before 1.49.0, String::retain() function has a panic safety problem. It     allows creation of a non-UTF-8 Rust string when the provided closure panics. This bug could result in a     memory safety violation when other string APIs assume that UTF-8 encoding is used on the same string.
    (CVE-2020-36317)

  - In the standard library in Rust before 1.49.0, VecDeque::make_contiguous has a bug that pops the same     element more than once under certain condition. This bug could result in a use-after-free or double free.
    (CVE-2020-36318)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:2243 advisory.

    Rust Toolset provides the Rust programming language compiler rustc, the cargo build tool and dependency     manager, the cargo-vendor plugin, and required libraries.

    This enhancement update adds the rust-toolset-1.49 packages to Red Hat Developer Tools. (BZ#1902240)

    Security Fix(es):

    * rust: use-after-free or double free in VecDeque::make_contiguous (CVE-2020-36318)

    * rust: memory safety violation in String::retain() (CVE-2020-36317)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-1935 advisory.

    rust     [1.49.0-1]
    - Update to 1.49.0.

    [1.48.0-1]
    - Update to 1.48.0.

    rust-toolset     [1.49.0-1]
    - Update to Rust and Cargo 1.49.0.

    [1.48.0-1]
    - Update to Rust and Cargo 1.48.0.

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:1935 advisory.

  - rust: memory safety violation in String::retain() (CVE-2020-36317)

  - rust: use-after-free or double free in VecDeque::make_contiguous (CVE-2020-36318)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:1935 advisory.

    Rust is a systems programming language that runs blazingly fast, prevents segfaults, and guarantees thread     safety.

    The following packages have been upgraded to a later upstream version: rust (1.49.0). (BZ#1896712)

    Security Fix(es):

    * rust: use-after-free or double free in VecDeque::make_contiguous (CVE-2020-36318)

    * rust: memory safety violation in String::retain() (CVE-2020-36317)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.4 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
236569	Alibaba Cloud Linux 3 : 0061: rust-toolset:rhel8 (ALINUX3-SA-2021:0061)	Nessus	Alibaba Cloud Linux Local Security Checks	critical
230252	Linux Distros Unpatched Vulnerability : CVE-2020-36317	Nessus	Misc.	high
184983	Rocky Linux 8 : rust-toolset:rhel8 (RLSA-2021:1935)	Nessus	Rocky Linux Local Security Checks	critical
165121	RHEL 7 : rust-toolset-1.49 and rust-toolset-1.49-rust update (Low) (RHSA-2021:2243)	Nessus	Red Hat Local Security Checks	critical
149927	Oracle Linux 8 : rust-toolset:ol8 (ELSA-2021-1935)	Nessus	Oracle Linux Local Security Checks	critical
149755	CentOS 8 : rust-toolset:rhel8 (CESA-2021:1935)	Nessus	CentOS Local Security Checks	critical
149681	RHEL 8 : rust-toolset:rhel8 (RHSA-2021:1935)	Nessus	Red Hat Local Security Checks	critical

Detections

Analytics

CVE-2020-36317

high

Tenable Plugins

critical

high

critical

critical

critical

critical

critical