CVE-2024-27284
cassandra-rs non-idiomatic use of iterators leads to use after free
概要
cassandra-rs non-idiomatic use of iterators leads to use after free
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
cassandra-rs is a Cassandra (CQL) driver for Rust. Code that attempts to use an item (e.g., a row) returned by an iterator after the iterator has advanced to the next item will be accessing freed memory and experience undefined behaviour. The problem has been fixed in version 3.0.0.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
影響パッケージ
crates.io
cassandra-cpp
[{"type":"SEMVER","events":[{"introduced":"0.0.0-0"},{"fixed":"3.0.0"}]}]
参照URL
- advisory rustsec.org
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- package crates.io
- patch github.com