Vulnerabilities > CVE-2024-27284 - Use After Free vulnerability in Cassandra-Rs Project Cassandra-Rs

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
HIGH
network
low complexity
cassandra-rs-project
CWE-416
NVD
Published: 2024-02-29
Updated: 2025-04-01

Summary

cassandra-rs is a Cassandra (CQL) driver for Rust. Code that attempts to use an item (e.g., a row) returned by an iterator after the iterator has advanced to the next item will be accessing freed memory and experience undefined behaviour. The problem has been fixed in version 3.0.0.

Vulnerable Configurations

Part Description Count
Application
Cassandra-Rs_Project
1

Common Weakness Enumeration (CWE)

References