In the standard library in Rust before 1.49.0, String::retain() function has a panic safety problem. It allows creation of a non-UTF-8 Rust string when the provided closure panics. This bug could result in a memory safety violation when other string APIs assume that UTF-8 encoding is used on the same string.

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2021:1935 advisory.

  - In the standard library in Rust before 1.49.0, String::retain() function has a panic safety problem. It     allows creation of a non-UTF-8 Rust string when the provided closure panics. This bug could result in a     memory safety violation when other string APIs assume that UTF-8 encoding is used on the same string.
    (CVE-2020-36317)

  - In the standard library in Rust before 1.49.0, VecDeque::make_contiguous has a bug that pops the same     element more than once under certain condition. This bug could result in a use-after-free or double free.
    (CVE-2020-36318)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:2243 advisory.

    Rust Toolset provides the Rust programming language compiler rustc, the cargo build tool and dependency     manager, the cargo-vendor plugin, and required libraries.

    This enhancement update adds the rust-toolset-1.49 packages to Red Hat Developer Tools. (BZ#1902240)

    Security Fix(es):

    * rust: use-after-free or double free in VecDeque::make_contiguous (CVE-2020-36318)

    * rust: memory safety violation in String::retain() (CVE-2020-36317)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-1935 advisory.

    rust     [1.49.0-1]
    - Update to 1.49.0.

    [1.48.0-1]
    - Update to 1.48.0.

    rust-toolset     [1.49.0-1]
    - Update to Rust and Cargo 1.49.0.

    [1.48.0-1]
    - Update to Rust and Cargo 1.48.0.

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2021:1935 advisory.

  - rust: memory safety violation in String::retain() (CVE-2020-36317)

  - rust: use-after-free or double free in VecDeque::make_contiguous (CVE-2020-36318)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:1935 advisory.

    Rust is a systems programming language that runs blazingly fast, prevents segfaults, and guarantees thread     safety.

    The following packages have been upgraded to a later upstream version: rust (1.49.0). (BZ#1896712)

    Security Fix(es):

    * rust: use-after-free or double free in VecDeque::make_contiguous (CVE-2020-36318)

    * rust: memory safety violation in String::retain() (CVE-2020-36317)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.4 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
184983	Rocky Linux 8 : rust-toolset:rhel8 (RLSA-2021:1935)	Nessus	Rocky Linux Local Security Checks	critical
165121	RHEL 7 : rust-toolset-1.49 and rust-toolset-1.49-rust update (Low) (RHSA-2021:2243)	Nessus	Red Hat Local Security Checks	critical
149927	Oracle Linux 8 : rust-toolset:ol8 (ELSA-2021-1935)	Nessus	Oracle Linux Local Security Checks	critical
149755	CentOS 8 : rust-toolset:rhel8 (CESA-2021:1935)	Nessus	CentOS Local Security Checks	critical
149681	RHEL 8 : rust-toolset:rhel8 (RHSA-2021:1935)	Nessus	Red Hat Local Security Checks	critical

Detections

Analytics

CVE-2020-36317

high

Tenable Plugins

critical

critical

critical

critical

critical