Description
A flaw was found in the user's crate for Rust. This vulnerability allows privilege escalation via incorrect group listing when a user or process has fewer than exactly 1024 groups, leading to the erroneous inclusion of the root group in the access list.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
rust-users
Default version status: unaffected
0.8.0 to < 0.11.1affected
Red Hat Red Hat OpenShift sandboxed containers 1.1
Default version status: affected
sha256:a6f29da891174e57fcfd131da7aa90c50459ba24164111b83120a1b91f2eabba to < *unaffected
Red Hat Red Hat Enterprise Linux 10
Default version status: affected
Red Hat Red Hat Enterprise Linux 9
Default version status: affected
Red Hat Red Hat OpenShift Container Platform 4
Default version status: unaffected
Red Hat Red Hat OpenShift Container Platform 4
Default version status: affected
Red Hat Red Hat Trusted Profile Analyzer
Default version status: affected