Ecosyste.ms: Advisories

Security Advisories: GSA_kwCzR0hTQS14cHAzLXhyZmYtdzZyaM4AAt9l

rocksdb vulnerable to out-of-bounds read

Affected versions of this crate called the RocksDB C API
rocksdb_open_column_families_with_ttl() with a pointer to a single integer
TTL value, but one TTL value for each column family is expected.

This is only relevant when using
rocksdb::DBWithThreadMode::open_cf_descriptors_with_ttl() with multiple
column families.

This bug has been fixed in v0.19.0.

Permalink: https://github.com/advisories/GHSA-xpp3-xrff-w6rh
JSON: https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS14cHAzLXhyZmYtdzZyaM4AAt9l
Source: GitHub Advisory Database
Origin: Unspecified
Severity: Moderate
Classification: General
Published: over 2 years ago
Updated: almost 2 years ago

Identifiers: GHSA-xpp3-xrff-w6rh
References:

• https://github.com/rust-rocksdb/rust-rocksdb/pull/616
• https://github.com/rust-rocksdb/rust-rocksdb/releases/tag/v0.19.0
• https://rustsec.org/advisories/RUSTSEC-2022-0046.html
• https://github.com/advisories/GHSA-xpp3-xrff-w6rh

Repository: https://github.com/rust-rocksdb/rust-rocksdb
Blast Radius: 0.0

Affected Packages