critique

CVE-2021-31162

rust: double free in Vec::from_iter function if freeing the element panics

Publiée 14 avr. 2021Modifiée 17 juin 2026CWE 415

Dans la Trivy database depuis au moins le 24 oct. 2026, 07:11 UTCLa date d'entrée avant ce build n'est pas enregistrée.

Sévérité par source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Red Hat9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Le label propre à Trivy est CRITICAL. Critique selon NVD, CBL-Mariner, Photon OS. Plus basse selon Red Hat (moyenne), Amazon (moyenne), Oracle (moyenne), Rocky Linux (moyenne), Ubuntu (moyenne).

Description

In the standard library in Rust before 1.52.0, a double free can occur in the Vec::from_iter function if freeing the element panics.

Paquets affectés et versions corrigées

Source	Paquet	Corrigé en
CBL-Mariner 1.0	rust	0:1.59.0-1.cm1
Photon OS 3.0	rust	1.51.0-1.ph3
Photon OS 4.0	rust	1.51.0-1.ph4
alpine 3.14	rust	1.51.0-r2
alpine 3.15	rust	1.51.0-r2
alpine 3.16	rust	1.51.0-r2
alpine 3.17	rust	1.51.0-r2
alpine 3.18	rust	1.51.0-r2
alpine 3.19	rust	1.51.0-r2
alpine 3.20	rust	1.51.0-r2
alpine 3.21	rust	1.51.0-r2
alpine 3.22	rust	1.51.0-r2

Afficher les 87 entrées de 31 sources

Source	Paquet	Corrigé en
CBL-Mariner 1.0	rust	0:1.59.0-1.cm1
Photon OS 3.0	rust	1.51.0-1.ph3
Photon OS 4.0	rust	1.51.0-1.ph4
alpine 3.14	rust	1.51.0-r2
alpine 3.15	rust	1.51.0-r2
alpine 3.16	rust	1.51.0-r2
alpine 3.17	rust	1.51.0-r2
alpine 3.18	rust	1.51.0-r2
alpine 3.19	rust	1.51.0-r2
alpine 3.20	rust	1.51.0-r2
alpine 3.21	rust	1.51.0-r2
alpine 3.22	rust	1.51.0-r2
alpine 3.23	rust	1.51.0-r2
alpine 3.24	chromium-rust	1.51.0-r2
alpine 3.24	rust	1.51.0-r2
alpine edge	rust	1.51.0-r2
amazon linux 2	cargo	1.56.1-1.amzn2.0.1
amazon linux 2	cargo-doc	1.56.1-1.amzn2.0.1
amazon linux 2	clippy	1.56.1-1.amzn2.0.1
amazon linux 2	rls	1.56.1-1.amzn2.0.1
amazon linux 2	rust	1.56.1-1.amzn2.0.1
amazon linux 2	rust-analysis	1.56.1-1.amzn2.0.1
amazon linux 2	rust-debugger-common	1.56.1-1.amzn2.0.1
amazon linux 2	rust-debuginfo	1.56.1-1.amzn2.0.1
amazon linux 2	rust-doc	1.56.1-1.amzn2.0.1
amazon linux 2	rust-gdb	1.56.1-1.amzn2.0.1
amazon linux 2	rust-src	1.56.1-1.amzn2.0.1
amazon linux 2	rust-std-static	1.56.1-1.amzn2.0.1
amazon linux 2	rustfmt	1.56.1-1.amzn2.0.1
debian 10	rustc	pas de correctif indiqué
debian 11	rustc	pas de correctif indiqué
debian 12	rustc	1.53.0+dfsg1-1
debian 13	rustc	1.53.0+dfsg1-1
debian 14	rustc	1.53.0+dfsg1-1
debian 9	rustc	pas de correctif indiqué
echo	rustc	1.53.0+dfsg1-1
Oracle Linux 8	cargo	1.52.1-1.module+el8.4.0+20287+5ada6442
Oracle Linux 8	cargo-doc	1.52.1-1.module+el8.4.0+20287+5ada6442
Oracle Linux 8	clippy	1.52.1-1.module+el8.4.0+20287+5ada6442
Oracle Linux 8	rls	1.52.1-1.module+el8.4.0+20287+5ada6442
Oracle Linux 8	rust	1.52.1-1.module+el8.4.0+20287+5ada6442
Oracle Linux 8	rust-analysis	1.52.1-1.module+el8.4.0+20287+5ada6442
Oracle Linux 8	rust-debugger-common	1.52.1-1.module+el8.4.0+20287+5ada6442
Oracle Linux 8	rust-doc	1.52.1-1.module+el8.4.0+20287+5ada6442
Oracle Linux 8	rust-gdb	1.52.1-1.module+el8.4.0+20287+5ada6442
Oracle Linux 8	rust-lldb	1.52.1-1.module+el8.4.0+20287+5ada6442
Oracle Linux 8	rust-src	1.52.1-1.module+el8.4.0+20287+5ada6442
Oracle Linux 8	rust-std-static	1.52.1-1.module+el8.4.0+20287+5ada6442
Oracle Linux 8	rust-toolset	1.52.1-1.module+el8.4.0+20287+5ada6442
Oracle Linux 8	rustfmt	1.52.1-1.module+el8.4.0+20287+5ada6442
rapidfort ubuntu 20.04	rf-rustc	0:1.61.0+dfsg1-1~exp1ubuntu1
rapidfort ubuntu 20.04	rustc	0:1.61.0+dfsg1-1~exp1ubuntu1, 0:1.68.0+dfsg0ubuntu1-0ubuntu1
rapidfort ubuntu 22.04	rf-rustc	0:1.61.0+dfsg1-1~exp1ubuntu1
rapidfort ubuntu 22.04	rustc	0:1.61.0+dfsg1-1~exp1ubuntu1, 0:1.68.0+dfsg0ubuntu1-0ubuntu1
rapidfort ubuntu 24.04	rf-rustc	0:1.61.0+dfsg1-1~exp1ubuntu1
rapidfort ubuntu 24.04	rustc	0:1.61.0+dfsg1-1~exp1ubuntu1, 0:1.68.0+dfsg0ubuntu1-0ubuntu1
rocky 8	cargo	1.52.1-1.module+el8.4.0+641+ca238f88
rocky 8	cargo-doc	1.52.1-1.module+el8.4.0+641+ca238f88
rocky 8	clippy	1.52.1-1.module+el8.4.0+641+ca238f88
rocky 8	rls	1.52.1-1.module+el8.4.0+641+ca238f88
rocky 8	rust	1.52.1-1.module+el8.4.0+641+ca238f88
rocky 8	rust-analysis	1.52.1-1.module+el8.4.0+641+ca238f88
rocky 8	rust-debugger-common	1.52.1-1.module+el8.4.0+641+ca238f88
rocky 8	rust-doc	1.52.1-1.module+el8.4.0+641+ca238f88
rocky 8	rust-gdb	1.52.1-1.module+el8.4.0+641+ca238f88
rocky 8	rust-lldb	1.52.1-1.module+el8.4.0+641+ca238f88
rocky 8	rust-src	1.52.1-1.module+el8.4.0+641+ca238f88
rocky 8	rust-std-static	1.52.1-1.module+el8.4.0+641+ca238f88
rocky 8	rust-toolset	1.52.1-1.module+el8.4.0+641+ca238f88
rocky 8	rust-toolset:rhel8::cargo	1.52.1-1.module+el8.4.0+641+ca238f88
rocky 8	rust-toolset:rhel8::cargo-doc	1.52.1-1.module+el8.4.0+641+ca238f88
rocky 8	rust-toolset:rhel8::clippy	1.52.1-1.module+el8.4.0+641+ca238f88
rocky 8	rust-toolset:rhel8::rls	1.52.1-1.module+el8.4.0+641+ca238f88
rocky 8	rust-toolset:rhel8::rust	1.52.1-1.module+el8.4.0+641+ca238f88
rocky 8	rust-toolset:rhel8::rust-analysis	1.52.1-1.module+el8.4.0+641+ca238f88
rocky 8	rust-toolset:rhel8::rust-debugger-common	1.52.1-1.module+el8.4.0+641+ca238f88
rocky 8	rust-toolset:rhel8::rust-doc	1.52.1-1.module+el8.4.0+641+ca238f88
rocky 8	rust-toolset:rhel8::rust-gdb	1.52.1-1.module+el8.4.0+641+ca238f88
rocky 8	rust-toolset:rhel8::rust-lldb	1.52.1-1.module+el8.4.0+641+ca238f88
rocky 8	rust-toolset:rhel8::rust-src	1.52.1-1.module+el8.4.0+641+ca238f88
rocky 8	rust-toolset:rhel8::rust-std-static	1.52.1-1.module+el8.4.0+641+ca238f88
rocky 8	rust-toolset:rhel8::rust-toolset	1.52.1-1.module+el8.4.0+641+ca238f88
rocky 8	rust-toolset:rhel8::rustfmt	1.52.1-1.module+el8.4.0+641+ca238f88
rocky 8	rustfmt	1.52.1-1.module+el8.4.0+641+ca238f88
ubuntu 20.04	rustc	1.53.0+dfsg1+llvm-4ubuntu1~20.04.1
ubuntu 20.04-ESM	rustc	1.53.0+dfsg1+llvm-4ubuntu1~20.04.1
ubuntu 22.04	rustc	1.53.0+dfsg1+llvm-4ubuntu1

Références

Les 19 références