CVE-2022-28228

2022-12-2300:00:00

yandex

www.cve.org

ydb server

out-of-bounds read

insert statement

sensitive information

memory locations

crash

9 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

56.7%

JSON

Out-of-bounds read was discovered in YDB server. An attacker could construct a query with insert statement that would allow him to read sensitive information from other memory locations or cause a crash.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "YDB",
    "versions": [
      {
        "version": "All versions prior to version 22.4.44",
        "status": "affected"
      }
    ]
  }
]

References

ydb.tech/ru/docs/security-changelog#28-11-2022