cassandra-rs is a Cassandra (CQL) driver for Rust. Code that attempts to use an item (e.g., a row) returned by an iterator after the iterator has advanced to the next item will be accessing freed memory and experience undefined behaviour. The problem has been fixed in version 3.0.0.
References
Configurations
History
01 Apr 2025, 15:20
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Cassandra-rs Project cassandra-rs
Cassandra-rs Project |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
| CWE | CWE-416 | |
| CPE | cpe:2.3:a:cassandra-rs_project:cassandra-rs:*:*:*:*:*:rust:*:* | |
| References | () https://github.com/Metaswitch/cassandra-rs/commit/ae054dc8044eac9c2c7ae2b1ab154b53ca7f8df7 - Patch | |
| References | () https://github.com/Metaswitch/cassandra-rs/security/advisories/GHSA-x9xc-63hg-vcfq - Vendor Advisory |
29 Feb 2024, 01:44
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-02-29 01:44
Updated : 2025-04-01 15:20
NVD link : CVE-2024-27284
Mitre link : CVE-2024-27284
JSON object : View
Products Affected
cassandra-rs_project
- cassandra-rs
CWE
CWE-416
Use After Free