CVE-2024-27284

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2024-27284
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-27284.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2024-27284
Aliases
Published
2024-02-28T15:46:37.388Z
Modified
2025-11-30T17:52:01.983187Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
cassandra-rs non-idiomatic use of iterators leads to use after free
Details

cassandra-rs is a Cassandra (CQL) driver for Rust. Code that attempts to use an item (e.g., a row) returned by an iterator after the iterator has advanced to the next item will be accessing freed memory and experience undefined behaviour. The problem has been fixed in version 3.0.0.

Database specific 
{
    "cna_assigner": "GitHub_M",
    "cwe_ids": [
        "CWE-416"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/27xxx/CVE-2024-27284.json"
}
References

Affected packages

Git / github.com/metaswitch/cassandra-rs

Affected ranges

Type
GIT
Repo
https://github.com/metaswitch/cassandra-rs
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
ae054dc8044eac9c2c7ae2b1ab154b53ca7f8df7
Database specific 
{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "fixed": "3.0.0"
        }
    ]
}

Affected versions

0.*

0.10.0
0.10.1
0.10.2
0.11.0
0.12.0
0.13.0
0.13.1
0.13.2
0.14.0
0.14.1
0.15.0
0.15.1
0.16.0
0.17.0
0.17.1
0.17.2
0.6.0
0.6.1
0.6.10
0.6.2
0.6.3
0.6.4
0.6.5
0.6.6
0.6.7
0.8.0
0.8.1
0.8.2

1.*

1.0.0
1.1.0
1.2.0

2.*

2.0.0
2.0.1