Skip to content
OpenAdvisories

Vendor

scylladb

2 known vulnerabilities.

Products

scylladb 1 scylla 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.2
    CVE-2023-33972

    Privilege escalation from having CREATE access on a keyspace in Scylladb

    Scylladb is a NoSQL data store using the seastar framework, compatible with Apache Cassandra. Authenticated users who are authorized to create tables in a keyspace can escalate their privileges to access a table in the same keyspace, even if they don't have p…

    scylladb scylladb
  • High 8.1
    CVE-2022-29240

    Uninitialized memory read in LZ4 decompression leads to authentication bypass in Scylla

    Scylla is a real-time big data database that is API-compatible with Apache Cassandra and Amazon DynamoDB. When decompressing CQL frame received from user, Scylla assumes that user-provided uncompressed length is correct. If user provides fake length, that is …

    scylladb scylla