Lucene search

K
githubGitHub Advisory DatabaseGHSA-XPP3-XRFF-W6RH
HistoryAug 12, 2022 - 3:31 p.m.

rocksdb vulnerable to out-of-bounds read

2022-08-1215:31:10
GitHub Advisory Database
github.com
22
rocksdb
vulnerability
fix
software

Affected versions of this crate called the RocksDB C API
rocksdb_open_column_families_with_ttl() with a pointer to a single integer
TTL value, but one TTL value for each column family is expected.

This is only relevant when using
rocksdb::DBWithThreadMode::open_cf_descriptors_with_ttl() with multiple
column families.

This bug has been fixed in v0.19.0.

Affected configurations

Vulners
Node
rocksdbRange<0.19.0
VendorProductVersionCPE
*rocksdb*cpe:2.3:a:*:rocksdb:*:*:*:*:*:*:*:*