Critical severity · published Aug 7, 2021
CVE-2021-29922
library/std/src/net/parser.rs in Rust before 1.53.0 does not properly consider extraneous zero characters at the beginning of an IP address string, which (in some situations)…
9.1
CVSS
2.6%
EPSS
No
On KEV
Description
library/std/src/net/parser.rs in Rust before 1.53.0 does not properly consider extraneous zero characters at the beginning of an IP address string, which (in some situations) allows attackers to bypass access control that is based on IP addresses, because of unexpected octal interpretation.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)2.6% · higher than 85% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RU
Rust · Rust-lang
before 1.53.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2021-29922
CVE.org
https://www.cve.org/CVERecord?id=CVE-2021-29922
Third Party Advisory
https://defcon.org/html/defcon-29/dc-29-speakers.html#kaoudis
Vendor Advisory
https://doc.rust-lang.org/beta/std/net/struct.Ipv4Addr.html
Exploit
https://github.com/rust-lang/rust/issues/83648
Patch
https://github.com/rust-lang/rust/pull/83652
Exploit
https://github.com/sickcodes/security/blob/master/advisories/SICK-2021-015.md
Third Party Advisory
https://security.gentoo.org/glsa/202210-09
More from Rust
10.0
CVE-2024-24576
Rust is a programming language
9.8
CVE-2024-3566
A command inject vulnerability allows an attacker to perform command injection on Windows applications that indirectly depend on the CreateProcess function when the specific…
9.8
CVE-2021-31162
In the standard library in Rust before 1.52.0, a double free can occur in the Vec::from_iter function if freeing the element panics
9.8
CVE-2021-28879
In the standard library in Rust before 1.52.0, the Zip implementation can report an incorrect size due to an integer overflow
9.8
CVE-2020-36318
In the standard library in Rust before 1.49.0, VecDeque::make_contiguous has a bug that pops the same element more than once under certain condition