65 matches found
CVE-2024-41433
PingCAP TiDB v8.1.0 contains a buffer overflow vulnerability within the expression.ExplainExpressionList component. An attacker could potentially use a crafted input to trigger a Denial of Service (DoS) . However, PingCAP maintains that the reproduction of this issue did not result in service int...
PingCAP TiDB 安全漏洞
PingCAP TiDB is an open source, cloud-native, distributed, MySQL-compatible database for elastic scaling and real-time analytics from China-based PingCAP. A security vulnerability exists in PingCAP TiDB version v8.1.0, which stems from a buffer overflow issue contained in the...
CVE-2024-41434
PingCAP TiDB v8.1.0 contains a buffer overflow vulnerability in the (*Column).GetDecimal component. The root cause is insufficient validation of the return type when checking expressions between Agg and GroupBy during the RemoveUnnecessaryFirstRow operation. This can potentially lead to a Denial ...
CVE-2024-41433
PingCAP TiDB v8.1.0 was discovered to contain a buffer overflow via the component expression.ExplainExpressionList. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input. NOTE: PingCAP maintains that the actual reproduction of this issue did not cause the securi...
PingCAP TiDB nil pointer dereference
A nil pointer dereference in PingCAP TiDB v8.2.0-alpha-216-gfe5858b allows attackers to crash the application via expression.inferCollation...
GHSA-9G6G-XQV5-8G5W PingCAP TiDB nil pointer dereference
A nil pointer dereference in PingCAP TiDB v8.2.0-alpha-216-gfe5858b allows attackers to crash the application via expression.inferCollation...
CVE-2024-37820
A nil pointer dereference in PingCAP TiDB v8.2.0-alpha-216-gfe5858b allows attackers to crash the application via expression.inferCollation...
CVE-2024-37820
A nil pointer dereference in PingCAP TiDB v8.2.0-alpha-216-gfe5858b allows attackers to crash the application via expression.inferCollation...
CVE-2024-37820
A nil pointer dereference in PingCAP TiDB v8.2.0-alpha-216-gfe5858b allows attackers to crash the application via expression.inferCollation...
PT-2024-27766 · Pingcap · Tidb
Name of the Vulnerable Software and Affected Versions: PingCAP TiDB versions prior to 8.2.0 Description: A nil pointer dereference in PingCAP TiDB allows attackers to crash the application via expression.inferCollation. Recommendations: For versions prior to 8.2.0, update to version 8.2.0 or late...
CVE-2024-37820
A nil pointer dereference vulnerability exists in PingCAP TiDB v8.2.0-alpha-216-gfe5858b . This flaw allows an attacker to crash the application by triggering the expression.inferCollation function. While the vulnerability is identified as a CWE-476 issue with a CVSS score of 5.4 , no specific ex...
CVE-2024-37820
A nil pointer dereference in PingCAP TiDB v8.2.0-alpha-216-gfe5858b allows attackers to crash the application via expression.inferCollation...
NULL Pointer Dereference
PingCAP TiDB is vulnerable to NULL Pointer Dereference. The vulnerability is due to a NULL pointer dereference in the SortedRowContainer component, which allows an attacker to cause a denial of service...
Buffer Overflow
PingCAP TiDB is vulnerable to Buffer Overflow. The vulnerability is due to reading a string from a column while the offset field in the column is not initialized, which results in a buffer overflow that could lead to database crashes and denial of service attacks...
CVE-2024-35618
PingCAP TiDB v7.5.1 was discovered to contain a NULL pointer dereference via the component SortedRowContainer...
CVE-2024-33809
PingCAP TiDB v7.5.1 was discovered to contain a buffer overflow vulnerability, which could lead to database crashes and denial of service attacks...
CVE-2024-33809
PingCAP TiDB v7.5.1 was discovered to contain a buffer overflow vulnerability, which could lead to database crashes and denial of service attacks...
CVE-2024-33809
PingCAP TiDB v7.5.1 was discovered to contain a buffer overflow vulnerability, which could lead to database crashes and denial of service attacks...
CVE-2024-33809
PingCAP TiDB version v7.5.1 is susceptible to a buffer overflow vulnerability. The root cause is identified as reading a string from a column when the offset field in that column is not initialized. This flaw can lead to database crashes and denial of service (DoS) attacks. No information regardi...