CVE-2024-27284
cassandra-rs non-idiomatic use of iterators leads to use after free
Résumé
cassandra-rs non-idiomatic use of iterators leads to use after free
Description d'origine
La description telle que publiée par la source (souvent en anglais).
cassandra-rs is a Cassandra (CQL) driver for Rust. Code that attempts to use an item (e.g., a row) returned by an iterator after the iterator has advanced to the next item will be accessing freed memory and experience undefined behaviour. The problem has been fixed in version 3.0.0.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Paquets affectés
crates.io
cassandra-cpp
[{"type":"SEMVER","events":[{"introduced":"0.0.0-0"},{"fixed":"3.0.0"}]}]
Références
- advisory rustsec.org
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- package crates.io
- patch github.com