Red Hat Security AdvisoryRHSA-2021:4270
rust-toolset:rhel8 security, bug fix, and enhancement update
Released 2021-11-09 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 8) cargo-1.54.0-2.module+el8.5.0+12254+dc27bae9.aarch64::rust-toolset:rhel8, cargo-1.54.0-2.module+el8.5.0+12254+dc27bae9.ppc64le::rust-toolset:rhel8, cargo-1.54.0-2.module+el8.5.0+12254+dc27bae9.s390x::rust-toolset:rhel8 +43
Fixes 1 record
Priority MEDIUM 44
library/std/src/net/parser.rs in Rust before 1.53.0 does not properly consider extraneous zero characters at the beginning of an IP address string, which (in some situations) allows attackers to bypass access control tha…
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.02623 · Published 2021-08-07 · Fixed
