CVE-2018-1000810
published 2018-10-08CVE-2018-1000810: The Rust Programming Language Standard Library version 1.29.0, 1.28.0, 1.27.2, 1.27.1, 127.0, 126.2, 126.1, 126.0 contains a CWE-680: Integer Overflow to…
PriorityP346critical9.8CVSS 3.0
AVNACLPRNUINSUCHIHAH
EPSS
2.96%
85.6th percentile
The Rust Programming Language Standard Library version 1.29.0, 1.28.0, 1.27.2, 1.27.1, 127.0, 126.2, 126.1, 126.0 contains a CWE-680: Integer Overflow to Buffer Overflow vulnerability in standard library that can result in buffer overflow. This attack appear to be exploitable via str::repeat, passed a large number, can overflow an internal buffer. This vulnerability appears to have been fixed in 1.29.1.
Affected
9 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | rustc | < rustc 1.30.0+dfsg1-1 (bookworm) | rustc 1.30.0+dfsg1-1 (bookworm) |
| rust-lang | rust | — | — |
| rust-lang | rust | — | — |
| rust-lang | rust | — | — |
| rust-lang | rust | — | — |
| rust-lang | rust | — | — |
| rust-lang | rust | — | — |
| rust-lang | rust | — | — |
| rust-lang | rust | — | — |
CVSS provenance
nvdv3.09.8CRITICALCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
osv9.8CRITICAL
vendor_debian9.8CRITICAL
vendor_redhat9.8CRITICAL
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-2cg9-g249-7mf2: The Rust Programming Language Standard Library version 1
ghsa_unreviewed·2022-05-14
CVE-2018-1000810 [CRITICAL] CWE-190 GHSA-2cg9-g249-7mf2: The Rust Programming Language Standard Library version 1
The Rust Programming Language Standard Library version 1.29.0, 1.28.0, 1.27.2, 1.27.1, 127.0, 126.2, 126.1, 126.0 contains a CWE-680: Integer Overflow to Buffer Overflow vulnerability in standard library that can result in buffer overflow. This attack appear to be exploitable via str::repeat, passed a large number, can overflow an internal buffer. This vulnerability appears to have been fixed in 1.29.1.
OSV
CVE-2018-1000810: The Rust Programming Language Standard Library version 1
osv·2018-10-08·CVSS 9.8
CVE-2018-1000810 [CRITICAL] CVE-2018-1000810: The Rust Programming Language Standard Library version 1
The Rust Programming Language Standard Library version 1.29.0, 1.28.0, 1.27.2, 1.27.1, 127.0, 126.2, 126.1, 126.0 contains a CWE-680: Integer Overflow to Buffer Overflow vulnerability in standard library that can result in buffer overflow. This attack appear to be exploitable via str::repeat, passed a large number, can overflow an internal buffer. This vulnerability appears to have been fixed in 1.29.1.
Red Hat
rust: Buffer overflow in str::repeat function in the standard library
vendor_redhat·2018-09-24·CVSS 9.8
CVE-2018-1000810 [CRITICAL] CWE-119 rust: Buffer overflow in str::repeat function in the standard library
rust: Buffer overflow in str::repeat function in the standard library
The Rust Programming Language Standard Library version 1.29.0, 1.28.0, 1.27.2, 1.27.1, 127.0, 126.2, 126.1, 126.0 contains a CWE-680: Integer Overflow to Buffer Overflow vulnerability in standard library that can result in buffer overflow. This attack appear to be exploitable via str::repeat, passed a large number, can overflow an internal buffer. This vulnerability appears to have been fixed in 1.29.1.
A buffer overflow vulnerability was discovered in Rust that affects the `str::repeat` function in the standard library. An attacker could abuse this flaw by controlling the arguments given to `str::repeat` and can cause a Rust program to overflow a buffer in memory, potentially leading to a crash or arbitrary code execu
Debian
CVE-2018-1000810: rustc - The Rust Programming Language Standard Library version 1.29.0, 1.28.0, 1.27.2, 1...
vendor_debian·2018·CVSS 9.8
CVE-2018-1000810 [CRITICAL] CVE-2018-1000810: rustc - The Rust Programming Language Standard Library version 1.29.0, 1.28.0, 1.27.2, 1...
The Rust Programming Language Standard Library version 1.29.0, 1.28.0, 1.27.2, 1.27.1, 127.0, 126.2, 126.1, 126.0 contains a CWE-680: Integer Overflow to Buffer Overflow vulnerability in standard library that can result in buffer overflow. This attack appear to be exploitable via str::repeat, passed a large number, can overflow an internal buffer. This vulnerability appears to have been fixed in 1.29.1.
Scope: local
bookworm: resolved (fixed in 1.30.0+dfsg1-1)
bullseye: resolved (fixed in 1.30.0+dfsg1-1)
forky: resolved (fixed in 1.30.0+dfsg1-1)
sid: resolved (fixed in 1.30.0+dfsg1-1)
trixie: resolved (fixed in 1.30.0+dfsg1-1)
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2018-1000810 rust: Buffer overflow in str::repeat function in the standard library
bugzilla·2018-09-25·CVSS 9.8
CVE-2018-1000810 [CRITICAL] CVE-2018-1000810 rust: Buffer overflow in str::repeat function in the standard library
CVE-2018-1000810 rust: Buffer overflow in str::repeat function in the standard library
As reported in upstream advisory:
# Security adivsory for the Rust standard library - 2018-09-21
The Rust team was recently notified of a security vulnerability affecting
the `str::repeat` function in the standard library. If your code does not
use this function, it is not affected.
We are applying for a CVE for this vulnerability, but since there is no
embargo, we have not filed for one yet. Once a CVE is assigned, we'll make a
second post to make mention of the CVE number.
## Overview
This vulnerability is an instance of CWE-680: Integer Overflow to Buffer
Overflow[1].
The `str::repeat` function in the standard library allows repeating a
string a fixed number of times, returning an owned version
Bugzilla
CVE-2018-1000810 rust: Buffer overflow in str::repeat function in the standard library [fedora-all]
bugzilla·2018-09-25·CVSS 9.8
CVE-2018-1000810 [CRITICAL] CVE-2018-1000810 rust: Buffer overflow in str::repeat function in the standard library [fedora-all]
CVE-2018-1000810 rust: Buffer overflow in str::repeat function in the standard library [fedora-all]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of fedora-all.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
NOTE: this issue affects multi
Bugzilla
CVE-2018-1000810 rust: Buffer overflow in str::repeat function in the standard library [epel-7]
bugzilla·2018-09-25·CVSS 9.8
CVE-2018-1000810 [CRITICAL] CVE-2018-1000810 rust: Buffer overflow in str::repeat function in the standard library [epel-7]
CVE-2018-1000810 rust: Buffer overflow in str::repeat function in the standard library [epel-7]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of epel-7.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
Discussion:
Use the following templat
arXiv
Friend or Foe Inside? Exploring In-Process Isolation to Maintain Memory Safety for Unsafe Rust
arxiv_fulltext·2025-10-08
Friend or Foe Inside? Exploring In-Process Isolation to Maintain Memory Safety for Unsafe Rust
Friend or Foe Inside? Exploring In-Process Isolation to Maintain
Memory Safety for Unsafe Rust
Merve G\"ulmez
Ericsson Security Research
Kista, Sweden
imec-DistriNet, KU Leuven
Leuven, Belgium
[email protected]
Thomas Nyman
Ericsson Product Security
Jorvas, Finland
thomas.nyman
@ericsson.com
Christoph Baumann
Ericsson Security Research
Kista, Sweden
christoph.baumann
@ericsson.com
Jan Tobias M\"uhlberg
imec-DistriNet, KU Leuven
Leuven, Belgium
Universit\'e Libre de Bruxelles
Brussels, Belgium
[email protected]
## Abstract
Rust is a popular memory-safe systems programming language. In order to interact
with hardware or call into non-Rust libraries, Rust provides unsafe
language features that shift responsibility for ensuring memory safety to the
developer. Fai
https://blog.rust-lang.org/2018/09/21/Security-advisory-for-std.htmlhttps://groups.google.com/forum/#%21topic/rustlang-security-announcements/CmSuTm-SaU0https://security.gentoo.org/glsa/201812-11https://blog.rust-lang.org/2018/09/21/Security-advisory-for-std.htmlhttps://groups.google.com/forum/#%21topic/rustlang-security-announcements/CmSuTm-SaU0https://security.gentoo.org/glsa/201812-11
2018-10-08
Published