Every CVE Search/ Get API key

CVE-2018-1000622

The Rust Programming Language rustdoc version Between 0.8 and 1.27.0 contains a CWE-427:...

7.8 HighFix available

The Rust Programming Language rustdoc version Between 0.8 and 1.27.0 contains a CWE-427: Uncontrolled Search Path Element vulnerability in rustdoc plugins that can result in local code execution as a different user. This attack appear to be exploitable via using the --plugin flag without the --plugin-path flag. This vulnerability appears to have been fixed in 1.27.1.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
None
User interaction
Required

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

1.82%Up 0.7 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 7.8

The Rust Programming Language rustdoc version Between 0.8 and 1.27.0 contains a CWE-427: Uncontrolled Search Path Element vulnerability in rustdoc plugins that can result in local code execution as a different user. This attack appear to be exploitable via using the --plugin flag without the --plugin-path flag. This vulnerability appears to have been fixed in 1.27.1.

Record
CVE-2018-1000622
CVSS 3.0
7.8 HighCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 2.0
6.8 MediumAV:N/AC:M/Au:N/C:P/I:P/A:P
Weakness
CWE-427
Updated
2026-11-02
CVE List No score

The Rust Programming Language rustdoc version Between 0.8 and 1.27.0 contains a CWE-427: Uncontrolled Search Path Element vulnerability in rustdoc plugins that can result in local code execution as a different user. This attack appear to be exploitable via using the --plugin flag without the --plugin-path flag. This vulnerability appears to have been fixed in 1.27.1.

Record
CVE-2018-1000622
Updated
2026-11-02
EUVDEUVD-2018-1957 No score

The Rust Programming Language rustdoc version Between 0.8 and 1.27.0 contains a CWE-427: Uncontrolled Search Path Element vulnerability in rustdoc plugins that can result in local code execution as a different user. This attack appear to be exploitable via using the --plugin flag without the --plugin-path flag. This vulnerability appears to have been fixed in 1.27.1.

Record
EUVD-2018-1957
Updated
2026-11-03
GitHub AdvisoriesGHSA-6f94-33qx-gqcf 7.8

The Rust Programming Language rustdoc version Between 0.8 and 1.27.0 contains a CWE-427:...

The Rust Programming Language rustdoc version Between 0.8 and 1.27.0 contains a CWE-427: Uncontrolled Search Path Element vulnerability in rustdoc plugins that can result in local code execution as a different user. This attack appear to be exploitable via using the --plugin flag without the --plugin-path flag. This vulnerability appears to have been fixed in 1.27.1.

Record
GHSA-6f94-33qx-gqcf
CVSS 3.0
7.8 HighCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness
CWE-427
Updated
2026-11-02
OSVBELL-CVE-2018-1000622 7.8

CVE-2018-1000622 does not affect BellSoft software

Record
BELL-CVE-2018-1000622
CVSS 3.0
7.8 HighCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSV 7.8

The Rust Programming Language rustdoc version Between 0.8 and 1.27.0 contains a CWE-427: Uncontrolled Search Path Element vulnerability in rustdoc plugins that can result in local code execution as a different user. This attack appear to be exploitable via using the --plugin flag without the --plugin-path flag. This vulnerability appears to have been fixed in 1.27.1.

Record
CVE-2018-1000622
CVSS 3.0
7.8 HighCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 12 moreShow less
OSVDEBIAN-CVE-2018-1000622 7.8

The Rust Programming Language rustdoc version Between 0.8 and 1.27.0 contains a CWE-427: Uncontrolled Search Path Element vulnerability in rustdoc plugins that can result in local code execution as a different user. This attack appear to be exploitable via using the --plugin flag without the --plugin-path flag. This vulnerability appears to have been fixed in 1.27.1.

Record
DEBIAN-CVE-2018-1000622
CVSS 3.0
7.8 HighCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHEA-2018:3584 5.3

Red Hat Enhancement Advisory: new packages: rust-toolset-1.29

Record
RHEA-2018:3584
CVSS 3.0
5.3 MediumCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Updated
2026-11-02
OSVMGASA-2018-0318 No score

Updated rust packages fix security vulnerability

The Rust Programming Language rustdoc version before version 1.27.0 contains a CWE-427: Uncontrolled Search Path Element vulnerability in rustdoc plugins that can result in local code execution as a different user. This attack appear to be exploitable via using the --plugin flag without the --plugin-path flag. This vulnerability has been fixed in 1.27.1 (CVE-2018-1000622).

This update also fixes a bug in the borrow checker verification of match expressions.

Record
MGASA-2018-0318
Updated
2026-11-02
OSVopenSUSE-SU-2019:2203-1 No score

Security update for rust

This update for rust fixes the following issues:

Rust was updated to version 1.36.0.

Security issues fixed:

  • CVE-2019-12083: a standard method can be overridden violating Rust's safety guarantees and causing memory unsafety (bsc#1134978)
  • CVE-2018-1000622: rustdoc loads plugins from world writable directory allowing for arbitrary code execution (bsc#1100691)

This update was imported from SUSE:SLE-15:Update.

Record
openSUSE-SU-2019:2203-1
Updated
2026-11-02
OSVopenSUSE-SU-2019:2244-1 No score

Security update for rust

This update for rust fixes the following issues:

Rust was updated to version 1.36.0.

Security issues fixed:

  • CVE-2019-12083: a standard method can be overridden violating Rust's safety guarantees and causing memory unsafety (bsc#1134978)
  • CVE-2018-1000622: rustdoc loads plugins from world writable directory allowing for arbitrary code execution (bsc#1100691)

This update was imported from the SUSE:SLE-15:Update update project.

Record
openSUSE-SU-2019:2244-1
Updated
2026-11-02
OSVopenSUSE-SU-2019:2294-1 No score

Security update for rust

This update for rust fixes the following issues:

Rust was updated to version 1.36.0.

Security issues fixed:

  • CVE-2019-12083: a standard method can be overridden violating Rust's safety guarantees and causing memory unsafety (bsc#1134978)
  • CVE-2018-1000622: rustdoc loads plugins from world writable directory allowing for arbitrary code execution (bsc#1100691)

This update was imported from the SUSE:SLE-15:Update update project.

Record
openSUSE-SU-2019:2294-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:11359-1 No score

cargo-1.54.0-1.2 on GA media

These are all security issues fixed in the cargo-1.54.0-1.2 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:11359-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:11360-1 No score

cargo1.53-1.53.0-2.5 on GA media

These are all security issues fixed in the cargo1.53-1.53.0-2.5 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:11360-1
Updated
2026-11-02
OSVSUSE-RU-2019:0386-1 No score

Security update for rust

Rust was updated to version 1.31.1.

Record
SUSE-RU-2019:0386-1
Updated
2026-11-02
OSVSUSE-SU-2018:3357-1 No score

Security update for rust

This update for rust fixes the following issues:

  • CVE-2018-1000622: rustdoc loads plugins from world writable directory allowing for arbitrary code execution This patch consists of requiring --plugin-path to be passed whenever --plugin is passed Note that rustdoc plugins will be removed entirely on 1.28.0 (bsc#1100691).
Record
SUSE-SU-2018:3357-1
Updated
2026-11-02
OSVSUSE-SU-2019:2439-1 No score

Security update for rust

This update for rust fixes the following issues:

Rust was updated to version 1.36.0.

Security issues fixed:

  • CVE-2019-12083: a standard method can be overridden violating Rust's safety guarantees and causing memory unsafety (bsc#1134978)
  • CVE-2018-1000622: rustdoc loads plugins from world writable directory allowing for arbitrary code execution (bsc#1100691)
Record
SUSE-SU-2019:2439-1
Updated
2026-11-02
OSVSUSE-SU-2019:2755-1 No score

Security update for rust

This update for rust fixes the following issues:

Rust was updated to version 1.36.0.

Security issues fixed:

  • CVE-2019-12083: a standard method can be overridden violating Rust's safety guarantees and causing memory unsafety (bsc#1134978)
  • CVE-2018-1000622: rustdoc loads plugins from world writable directory allowing for arbitrary code execution (bsc#1100691)
Record
SUSE-SU-2019:2755-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
rustc
Debian:12
 before 1.27.1+dfsg1-1~exp1
1.27.1+dfsg1-1~exp1
rustc
Debian:13
 before 1.27.1+dfsg1-1~exp1
1.27.1+dfsg1-1~exp1
rustc
Debian:14
 before 1.27.1+dfsg1-1~exp1
1.27.1+dfsg1-1~exp1
rust
Mageia:6
 before 1.27.1-1.1.mga6
1.27.1-1.1.mga6
rust-toolset-1.29
Red Hat:devtools:2018
 before 0:1.29.2-1.el7
0:1.29.2-1.el7
rust-toolset-1.29-build
Red Hat:devtools:2018
 before 0:1.29.2-1.el7
0:1.29.2-1.el7
rust-toolset-1.29-cargo
Red Hat:devtools:2018
 before 0:1.29.0-1.el7
0:1.29.0-1.el7
rust-toolset-1.29-cargo-doc
Red Hat:devtools:2018
 before 0:1.29.0-1.el7
0:1.29.0-1.el7
rust-toolset-1.29-cargo-vendor
Red Hat:devtools:2018
 before 0:0.1.17-1.el7
0:0.1.17-1.el7
rust-toolset-1.29-cargo-vendor-debuginfo
Red Hat:devtools:2018
 before 0:0.1.17-1.el7
0:0.1.17-1.el7
Show 23 moreShow less
Affected packages
PackageAffectedFixed
rust-toolset-1.29-clippy-preview
Red Hat:devtools:2018
 before 0:0.0.212-1.el7
0:0.0.212-1.el7
rust-toolset-1.29-rls-preview
Red Hat:devtools:2018
 before 0:0.130.0-1.el7
0:0.130.0-1.el7
rust-toolset-1.29-runtime
Red Hat:devtools:2018
 before 0:1.29.2-1.el7
0:1.29.2-1.el7
rust-toolset-1.29-rust
Red Hat:devtools:2018
 before 0:1.29.2-1.el7
0:1.29.2-1.el7
rust-toolset-1.29-rust-analysis
Red Hat:devtools:2018
 before 0:1.29.2-1.el7
0:1.29.2-1.el7
rust-toolset-1.29-rust-debugger-common
Red Hat:devtools:2018
 before 0:1.29.2-1.el7
0:1.29.2-1.el7
rust-toolset-1.29-rust-debuginfo
Red Hat:devtools:2018
 before 0:1.29.2-1.el7
0:1.29.2-1.el7
rust-toolset-1.29-rust-doc
Red Hat:devtools:2018
 before 0:1.29.2-1.el7
0:1.29.2-1.el7
rust-toolset-1.29-rust-gdb
Red Hat:devtools:2018
 before 0:1.29.2-1.el7
0:1.29.2-1.el7
rust-toolset-1.29-rust-lldb
Red Hat:devtools:2018
 before 0:1.29.2-1.el7
0:1.29.2-1.el7
rust-toolset-1.29-rust-src
Red Hat:devtools:2018
 before 0:1.29.2-1.el7
0:1.29.2-1.el7
rust-toolset-1.29-rust-std-static
Red Hat:devtools:2018
 before 0:1.29.2-1.el7
0:1.29.2-1.el7
rust-toolset-1.29-rustfmt-preview
Red Hat:devtools:2018
 before 0:0.99.1-1.el7
0:0.99.1-1.el7
rust
SUSE:Linux Enterprise Module for Development Tools 15
 before 1.31.1-3.9.2
1.31.1-3.9.2
rust
SUSE:Linux Enterprise Module for Development Tools 15
 before 1.24.1-3.6.1
1.24.1-3.6.1
rust
SUSE:Linux Enterprise Module for Development Tools 15
From an advisory covering 2 CVEs
 before 1.36.0-3.21.1
1.36.0-3.21.1
rust
SUSE:Linux Enterprise Module for Development Tools 15 SP1
From an advisory covering 2 CVEs
 before 1.36.0-4.1
1.36.0-4.1
rust
openSUSE:Leap 15.1
From an advisory covering 2 CVEs
 before 1.36.0-lp151.5.4.1
1.36.0-lp151.5.4.1
rust-cbindgen
openSUSE:Leap 15.1
From an advisory covering 2 CVEs
 before 0.8.7-lp151.2.2
0.8.7-lp151.2.2
rust
openSUSE:Leap 15.1
From an advisory covering 2 CVEs
 before 1.36.0-lp151.5.4.2
1.36.0-lp151.5.4.2
rust
openSUSE:Leap 15.1
From an advisory covering 2 CVEs
 before 1.36.0-lp151.5.8.1
1.36.0-lp151.5.8.1
rust-cbindgen
openSUSE:Leap 15.1
From an advisory covering 2 CVEs
 before 0.8.7-lp151.5.2
0.8.7-lp151.5.2
rust1.53
openSUSE:Tumbleweed
From an advisory covering 3 CVEs
 before 1.53.0-2.5
1.53.0-2.5

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2018-1000622 is a high vulnerability (CVSS 7.8) in Rust-lang Rust, published July 9, 2018. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.82%, the 78th percentile. Fixed in rustc 1.27.1+dfsg1-1~exp1.

References

Show 38 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open