{"id":"GHSA-xpp3-xrff-w6rh","aliases":["RUSTSEC-2022-0046"],"status":"published","title":"rocksdb vulnerable to out-of-bounds read","description":"Affected versions of this crate called the RocksDB C API\n`rocksdb_open_column_families_with_ttl()` with a pointer to a single integer\nTTL value, but one TTL value for each column family is expected.\n\nThis is only relevant when using\n`rocksdb::DBWithThreadMode::open_cf_descriptors_with_ttl()` with multiple\ncolumn families.\n\nThis bug has been fixed in v0.19.0.","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2022-05-11T12:00:00Z","modified":"2023-11-08T04:24:29Z","fixes":[{"ecosystem":"crates.io","package":"rocksdb","fixed_in":["0.19.0"],"sources":["ghsa","osv"]}],"affected":[{"source":"ghsa","ecosystem":"crates.io","package":"rocksdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.19.0"}]}]},{"source":"osv","ecosystem":"crates.io","package":"rocksdb","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"0.19.0"}]}]},{"source":"osv","ecosystem":"crates.io","package":"rocksdb","ranges":[{"type":"SEMVER","events":[{"introduced":"0.0.0-0"},{"fixed":"0.19.0"}]}]}],"references":[{"url":"https://github.com/rust-rocksdb/rust-rocksdb/pull/616","tags":["web"]},{"url":"https://github.com/rust-rocksdb/rust-rocksdb/releases/tag/v0.19.0","tags":["web"]},{"url":"https://rustsec.org/advisories/RUSTSEC-2022-0046.html","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-xpp3-xrff-w6rh"},{"url":"https://github.com/rust-rocksdb/rust-rocksdb","tags":["package"]},{"url":"https://crates.io/crates/rocksdb","tags":["package"]}],"sources":{"ghsa":[{"id":"GHSA-xpp3-xrff-w6rh","title":"rocksdb vulnerable to out-of-bounds read","description":"Affected versions of this crate called the RocksDB C API\n`rocksdb_open_column_families_with_ttl()` with a pointer to a single integer\nTTL value, but one TTL value for each column family is expected.\n\nThis is only relevant when using\n`rocksdb::DBWithThreadMode::open_cf_descriptors_with_ttl()` with multiple\ncolumn families.\n\nThis bug has been fixed in v0.19.0.\n","status":"published","published":"2022-08-12T15:31:10Z","modified":"2023-01-09T05:01:21Z","updated_at":"2026-11-02T14:36:01.39976Z"}],"osv":[{"id":"GHSA-xpp3-xrff-w6rh","title":"rocksdb vulnerable to out-of-bounds read","description":"Affected versions of this crate called the RocksDB C API\n`rocksdb_open_column_families_with_ttl()` with a pointer to a single integer\nTTL value, but one TTL value for each column family is expected.\n\nThis is only relevant when using\n`rocksdb::DBWithThreadMode::open_cf_descriptors_with_ttl()` with multiple\ncolumn families.\n\nThis bug has been fixed in v0.19.0.\n","status":"published","published":"2022-08-12T15:31:10Z","modified":"2023-11-08T04:24:29.736305Z","updated_at":"2026-11-02T15:47:00.198893Z"},{"id":"RUSTSEC-2022-0046","title":"Out-of-bounds read when opening multiple column families with TTL","description":"Affected versions of this crate called the RocksDB C API\n`rocksdb_open_column_families_with_ttl()` with a pointer to a single integer\nTTL value, but one TTL value for each column family is expected.\n\nThis is only relevant when using\n`rocksdb::DBWithThreadMode::open_cf_descriptors_with_ttl()` with multiple\ncolumn families.\n\nThis bug has been fixed in v0.19.0.","status":"published","published":"2022-05-11T12:00:00Z","modified":"2023-11-08T04:24:29.736305Z","updated_at":"2026-11-02T15:53:39.971022Z"}]}}