CVE-2024-27284
cassandra-rs non-idiomatic use of iterators leads to use after free
Summary
cassandra-rs non-idiomatic use of iterators leads to use after free
Original description
The description as published by the source.
cassandra-rs is a Cassandra (CQL) driver for Rust. Code that attempts to use an item (e.g., a row) returned by an iterator after the iterator has advanced to the next item will be accessing freed memory and experience undefined behaviour. The problem has been fixed in version 3.0.0.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Affected packages
crates.io
cassandra-cpp
[{"type":"SEMVER","events":[{"introduced":"0.0.0-0"},{"fixed":"3.0.0"}]}]
References
- advisory rustsec.org
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- package crates.io
- patch github.com