CVE-2024-27284

HIGH 7.5CVE-2024-27284 · Published 29/02/2024 · updated 17/06/2026

In short

CVE-2024-27284 is a HIGH (CVSS 7.5) vulnerability affecting cassandra-rs (cassandra-rs project).
Chance of exploitation in the next 30 days (EPSS): 0.82%, higher than 57.3% of all vulnerabilities.
Fix: update to 3.0.0 or later.

Package	Affected versions	Patched versions
cassandra-rs cassandra-rs_project	`< 3.0.0`	`3.0.0`

Description

cassandra-rs is a Cassandra (CQL) driver for Rust. Code that attempts to use an item (e.g., a row) returned by an iterator after the iterator has advanced to the next item will be accessing freed memory and experience undefined behaviour. The problem has been fixed in version 3.0.0.

References

Metaswitch/cassandra-rs commit ae054dc · Patch
Metaswitch/cassandra-rs security advisory · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free