CyberSecBulletin

Scylladb vulnerabilities

We track 2 vulnerabilities in Scylladb products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on September 27, 2023.

2vulnerabilities
0critical
2high
0exploited
8.4average CVSS score

Latest Scylladb vulnerabilities

  • 8.8 High severity

    scylladb: Improper Privilege Management

    CVE-2023-33972Scylladb

    Scylladb is a NoSQL data store using the seastar framework, compatible with Apache Cassandra. Authenticated users who are authorized to create tables in a keyspace can escalate their privileges to access a table in the same keyspace, even if they don't have pe

  • 8.1 High severity

    scylla: Use of Uninitialized Resource

    CVE-2022-29240ScylladbEPSS 1.31%

    Scylla is a real-time big data database that is API-compatible with Apache Cassandra and Amazon DynamoDB. When decompressing CQL frame received from user, Scylla assumes that user-provided uncompressed length is correct. If user provides fake length, that is g