GHSA-xpp3-xrff-w6rh
rocksdb vulnerable to out-of-bounds read
Affected versions of this crate called the RocksDB C API
rocksdb_open_column_families_with_ttl() with a pointer to a single integer
TTL value, but one TTL value for each column family is expected.
This is only relevant when using
rocksdb::DBWithThreadMode::open_cf_descriptors_with_ttl() with multiple
column families.
This bug has been fixed in v0.19.0.
What each source reports
GitHub AdvisoriesNo score
rocksdb vulnerable to out-of-bounds read
Affected versions of this crate called the RocksDB C API
rocksdb_open_column_families_with_ttl() with a pointer to a single integer
TTL value, but one TTL value for each column family is expected.
This is only relevant when using
rocksdb::DBWithThreadMode::open_cf_descriptors_with_ttl() with multiple
column families.
This bug has been fixed in v0.19.0.
- Record
GHSA-xpp3-xrff-w6rh- Updated
- 2026-11-02
OSVNo score
rocksdb vulnerable to out-of-bounds read
Affected versions of this crate called the RocksDB C API
rocksdb_open_column_families_with_ttl() with a pointer to a single integer
TTL value, but one TTL value for each column family is expected.
This is only relevant when using
rocksdb::DBWithThreadMode::open_cf_descriptors_with_ttl() with multiple
column families.
This bug has been fixed in v0.19.0.
- Record
GHSA-xpp3-xrff-w6rh- Updated
- 2026-11-02
OSVRUSTSEC-2022-0046No score
Out-of-bounds read when opening multiple column families with TTL
Affected versions of this crate called the RocksDB C API
rocksdb_open_column_families_with_ttl() with a pointer to a single integer
TTL value, but one TTL value for each column family is expected.
This is only relevant when using
rocksdb::DBWithThreadMode::open_cf_descriptors_with_ttl() with multiple
column families.
This bug has been fixed in v0.19.0.
- Record
RUSTSEC-2022-0046- Updated
- 2026-11-02
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | GitHub Advisories, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
GHSA-xpp3-xrff-w6rh is a vulnerability with no CVSS score yet in rocksdb, published May 11, 2022. No source lists public exploit code. Fixed in rocksdb 0.19.0.