CVE-2024-27284
High
Description
cassandra-rs is a Cassandra (CQL) driver for Rust. Code that attempts to use an item (e.g., a row) returned by an iterator after the iterator has advanced to the next item will be accessing freed memory and experience undefined behaviour. The problem has been fixed in version 3.0.0.
SeverityHigh
CVSS7.5
Exploit probability—
ProductCassandra-rs
PublishedFeb 29, 2024
First seenFeb 29, 2024
Weakness typeCWE-416Use after free
How to fix
Update
- cassandra-rs_project cassandra-rs3.0.0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cassandra-rs_project cassandra-rs | v < 3.0.0 | 3.0.0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.