CVE-2021-28875

2021-04-1120:15:00

Debian Security Bug Tracker

security-tracker.debian.org

0.002 Low

EPSS

Percentile

64.2%

JSON

In the standard library in Rust before 1.50.0, read_to_end() does not validate the return value from Read in an unsafe context. This bug could lead to a buffer overflow.

OSVersionArchitecturePackageVersionFilename
Debian12allrustc< 1.53.0+dfsg1-1rustc_1.53.0+dfsg1-1_all.deb
Debian11allrustc<= 1.48.0+dfsg1-2rustc_1.48.0+dfsg1-2_all.deb
Debian10allrustc<= 1.41.1+dfsg1-1~deb10u1rustc_1.41.1+dfsg1-1~deb10u1_all.deb
Debian999allrustc< 1.53.0+dfsg1-1rustc_1.53.0+dfsg1-1_all.deb
Debian13allrustc< 1.53.0+dfsg1-1rustc_1.53.0+dfsg1-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	rustc	< 1.53.0+dfsg1-1	rustc_1.53.0+dfsg1-1_all.deb
Debian	11	all	rustc	<= 1.48.0+dfsg1-2	rustc_1.48.0+dfsg1-2_all.deb
Debian	10	all	rustc	<= 1.41.1+dfsg1-1~deb10u1	rustc_1.41.1+dfsg1-1~deb10u1_all.deb
Debian	999	all	rustc	< 1.53.0+dfsg1-1	rustc_1.53.0+dfsg1-1_all.deb
Debian	13	all	rustc	< 1.53.0+dfsg1-1	rustc_1.53.0+dfsg1-1_all.deb