{"id":"EUVD-2024-1335","enisaUuid":"a7f22b0b-541d-36cc-8da6-6f69ea9db0aa","description":"cassandra-rs is a Cassandra (CQL) driver for Rust. Code that attempts to use an item (e.g., a row) returned by an iterator after the iterator has advanced to the next item will be accessing freed memory and experience undefined behaviour.  The problem has been fixed in version 3.0.0.\n","datePublished":"Feb 28, 2024, 3:46:37 PM","dateUpdated":"Aug 12, 2024, 1:21:23 PM","baseScore":7.5,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","references":"https://github.com/Metaswitch/cassandra-rs/security/advisories/GHSA-x9xc-63hg-vcfq\nhttps://github.com/Metaswitch/cassandra-rs/commit/ae054dc8044eac9c2c7ae2b1ab154b53ca7f8df7\n","aliases":"CVE-2024-27284\nGHSA-x9xc-63hg-vcfq\n","assigner":"GitHub_M","epss":0.82,"enisaIdProduct":[{"id":"ad887947-692c-3d17-8018-2d92a7e6fe64","product":{"name":"cassandra-rs","vendor":{"name":"Metaswitch"}}},{"id":"f5da0039-0fcd-3d35-a8f4-ac3df3ab22b5","product":{"name":"cassandra-rs","vendor":{"name":"Metaswitch"}},"product_version":"\u003c 3.0.0"}],"enisaIdVendor":[{"id":"2dcdf5e6-25ab-3f90-a385-fd430984377e","vendor":{"name":"Metaswitch"}}],"enisaIdVulnerability":[{"id":"7365ebb5-7471-393c-b490-ca6762d44abd","vulnerability":{"id":"GHSA-x9xc-63hg-vcfq","description":"cassandra-rs\u0027s non-idiomatic use of iterators leads to use after free","datePublished":"Apr 5, 2024, 3:00:55 PM","dateUpdated":"Apr 1, 2025, 10:59:42 PM","baseScore":0.0,"references":"https://github.com/Metaswitch/cassandra-rs/security/advisories/GHSA-x9xc-63hg-vcfq\nhttps://nvd.nist.gov/vuln/detail/CVE-2024-27284\nhttps://github.com/Metaswitch/cassandra-rs/commit/ae054dc8044eac9c2c7ae2b1ab154b53ca7f8df7\nhttps://github.com/Metaswitch/cassandra-rs\nhttps://rustsec.org/advisories/RUSTSEC-2024-0017.html\n","enisa_id":"EUVD-2024-1335\n","aliases":"CVE-2024-27284\nGHSA-x9xc-63hg-vcfq\n","epss":0.0,"dataProcessed":"May 3, 2026, 2:08:40 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"e40ee7f6-82e6-3380-96ae-677e4c909b2f","vulnerability":{"id":"CVE-2024-27284","description":"cassandra-rs is a Cassandra (CQL) driver for Rust. Code that attempts to use an item (e.g., a row) returned by an iterator after the iterator has advanced to the next item will be accessing freed memory and experience undefined behaviour.  The problem has been fixed in version 3.0.0.\n","datePublished":"Feb 28, 2024, 3:46:37 PM","dateUpdated":"Aug 12, 2024, 1:21:23 PM","status":"PUBLISHED","baseScore":7.5,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","references":"https://github.com/Metaswitch/cassandra-rs/security/advisories/GHSA-x9xc-63hg-vcfq\nhttps://github.com/Metaswitch/cassandra-rs/commit/ae054dc8044eac9c2c7ae2b1ab154b53ca7f8df7\n","enisa_id":"EUVD-2024-1335\n","assigner":"GitHub_M","epss":0.82,"dataProcessed":"Oct 31, 2026, 7:13:40 AM","vulnerabilityProduct":[{"id":"2864b2f2-226f-36f9-9137-2b95afd61ae1","product":{"name":"cassandra-rs","vendor":{"name":"Metaswitch"}},"product_version":"\u003c 3.0.0"},{"id":"36c348b2-0376-49dc-a700-385fba37dc82","product":{"name":"cassandra-rs","vendor":{"name":"Metaswitch"}},"product_version":"\u003c 3.0.0"}],"vulnerabilityVendor":[{"id":"0677d286-6dc4-382d-b6a9-a61e379d3f0a","vendor":{"name":"Metaswitch"}}]}}],"enisaIdAdvisory":[]}