Rust-Lang Rust vulnerabilities

CVE-2018-25008 [MEDIUM] CWE-662 CVE-2018-25008: In the standard library in Rust before 1.29.0, there is weak synchronization in the Arc::get_mut met In the standard library in Rust before 1.29.0, there is weak synchronization in the Arc::get_mut method. This synchronization issue can be lead to memory safety issues through race conditions.

CVE-2017-20004 [MEDIUM] CWE-362 CVE-2017-20004: In the standard library in Rust before 1.19.0, there is a synchronization problem in the MutexGuard In the standard library in Rust before 1.19.0, there is a synchronization problem in the MutexGuard object. MutexGuards can be used across threads with any types, allowing for memory safety issues through race conditions.

CVE-2019-1010299 [MEDIUM] CWE-200 CVE-2019-1010299: The Rust Programming Language Standard Library 1.18.0 and later is affected by: CWE-200: Information The Rust Programming Language Standard Library 1.18.0 and later is affected by: CWE-200: Information Exposure. The impact is: Contents of uninitialized memory could be printed to string or to log file. The component is: Debug trait implementation for std::collections::vec_deque::Iter. The attack vector is: The program needs to invoke debug print

CVE-2021-28876 [MEDIUM] CWE-755 CVE-2021-28876: In the standard library in Rust before 1.52.0, the Zip implementation has a panic safety issue. It c In the standard library in Rust before 1.52.0, the Zip implementation has a panic safety issue. It calls __iterator_get_unchecked() more than once for the same index when the underlying iterator panics (in certain conditions). This bug could lead to a memory safety violation due to an unmet safety requirement for the TrustedRandomAccess trait.