During fuzz testing of Accord’s CQL integration, we identified an edge case 
that resulted in an IndexOutOfBoundsException. This issue was reported as 
CASSANDRA-20108 [1]. Initially, we believed this to be a type-related problem 
and did not draw attention to it. However, we ensured that the work was 
backported to 4.0.x and newer branches.

Further testing revealed that this issue is more prevalent than initially 
anticipated and could lead to data loss or incorrect results. User impact would 
be SELECT queries returning without including all data or incorrect results, 
including rows that should not have been returned.

If you meet the following conditions, you may be affected:

1) You use DELETE [col] or you utilize time-to-live (TTL) values.
2) You have SELECT clauses that utilize the `<` or `<=` operators and are not 
indexed (this is not a concern for SAI).

Given the severity of this issue, it is desirable that new releases be released 
to address this problem.

[1] CASSANDRA-20108: IndexOutOfBoundsException when accessing a partition where 
the column was deleted

Reply via email to