CVE:CVE-2022-21658
CNNVD:CNNVD-202201-1812
Rust是Mozilla基金会的一款通用、编译型编程语言。
Rust 中存在竞争条件问题漏洞，该漏洞源于产品的std::fs::remove_dir_all函数未对用户权限进行有效验证。攻击者可通过该漏洞删除不能访问的文件和目录。以下产品及版本受到影响：Rust 1.0.0 至 1.58.0 版本。
solution:Upgrade rust-lang rust to a higher version than 1.58.0,and avoid the version [1.0.0,1.58.0]; Upgrade fedoraproject fedora to a higher version than 34,35,and avoid the version 34,35; Upgrade apple ipados to a higher version than 15.4,and avoid the version (,15.4); Upgrade apple iphone_os to a higher version than 15.4,and avoid the version (,15.4); Upgrade apple macos to a higher version than 12.3,and avoid the version [12.0.0,12.3); Upgrade apple tvos to a higher version than 15.4,and avoid the version (,15.4); Upgrade apple watchos to a higher version than 8.5,and avoid the version (,8.5)