PT-2024-27766 · Pingcap · Tidb

Name of the Vulnerable Software and Affected Versions: PingCAP TiDB versions prior to 8.2.0 Description: A nil pointer dereference in PingCAP TiDB allows attackers to crash the application via expression.inferCollation. Recommendations: For versions prior to 8.2.0, update to version 8.2.0 or late...

NULL Pointer Dereference

PingCAP TiDB is vulnerable to NULL Pointer Dereference. The vulnerability is due to a NULL pointer dereference in the SortedRowContainer component, which allows an attacker to cause a denial of service...

Buffer Overflow

PingCAP TiDB is vulnerable to Buffer Overflow. The vulnerability is due to reading a string from a column while the offset field in the column is not initialized, which results in a buffer overflow that could lead to database crashes and denial of service attacks...

CVE-2024-33809

PingCAP TiDB v7.5.1 was discovered to contain a buffer overflow vulnerability, which could lead to database crashes and denial of service attacks...

CVE-2024-35618

PingCAP TiDB v7.5.1 was discovered to contain a NULL pointer dereference via the component SortedRowContainer...

CVE-2024-33809

PingCAP TiDB v7.5.1 was discovered to contain a buffer overflow vulnerability, which could lead to database crashes and denial of service attacks...

CVE-2024-33809

PingCAP TiDB v7.5.1 was discovered to contain a buffer overflow vulnerability, which could lead to database crashes and denial of service attacks...

CVE-2024-33809

PingCAP TiDB v7.5.1 is affected by a buffer overflow vulnerability. The issue arises from reading a string from a column while the offset field in the column is not initialized, which can lead to database crashes and denial of service. The CVE entry notes a vulnerability in TiDB’s handling of col...

CVE-2024-33809

PingCAP TiDB v7.5.1 was discovered to contain a buffer overflow vulnerability, which could lead to database crashes and denial of service attacks...

CVE-2024-35618

PingCAP TiDB v7.5.1 was discovered to contain a NULL pointer dereference via the component SortedRowContainer...

CVE-2024-35618

CVE-2024-35618 : PingCAP TiDB v7.5.1 contains a NULL pointer dereference in the SortedRowContainer component. The CVSSv3.1 base score is 7.5 (HIGH) with NETWORK attack vector, NO user interaction, and availability impact. The provided documents confirm the affected product/version and the underly...

CVE-2024-35618

PingCAP TiDB v7.5.1 was discovered to contain a NULL pointer dereference via the component SortedRowContainer...

CVE-2024-35618

PingCAP TiDB v7.5.1 was discovered to contain a NULL pointer dereference via the component SortedRowContainer...

PingCAP TiDB 安全漏洞

PingCAP TiDB is an open source, cloud-native, distributed, MySQL-compatible database for elastic scaling and real-time analytics from China-based PingCAP. A security vulnerability exists in PingCAP TiDB version v7.5.1, which stems from a contained buffer overflow vulnerability that could lead to ...

PT-2024-25496 · Pingcap · Tidb

Name of the Vulnerable Software and Affected Versions: PingCAP TiDB version 7.5.1 Description: A buffer overflow issue was discovered, which could lead to database crashes and denial of service attacks. Recommendations: For PingCAP TiDB version 7.5.1, at the moment, there is no information about ...

PT-2024-26569 · Tidb · Tidb

Name of the Vulnerable Software and Affected Versions: TiDB version 7.5.1 Description: A NULL pointer dereference issue was discovered in the SortedRowContainer component of TiDB. Recommendations: For version 7.5.1, at the moment, there is no information about a newer version that contains a fix...

PingCAP TiDB 安全漏洞

PingCAP TiDB is an open source, cloud-native, distributed, MySQL-compatible database for elastic scaling and real-time analytics from China-based PingCAP. A security vulnerability exists in PingCAP TiDB version v7.5.1, which originates from the inclusion of a null pointer dereference via the...

Arbitrary Code Execution

github.com/pingcap/tidb is vulnerable to arbitrary code execution. The vulnerability exists because the data source name string in the database connection is not properly neutralized which allows an attacker to inject malicious code and get read access to files in the system...

TiDB vulnerable to Use of Externally-Controlled Format String

TiDB server importer CLI tool prior to version 6.4.0 & 6.1.3 is vulnerable to data source name injection. The database name for generating and inserting data into a database does not properly sanitize user input which can lead to arbitrary file reads."...

GHSA-7FXJ-FR3V-R9GJ TiDB vulnerable to Use of Externally-Controlled Format String

TiDB server importer CLI tool prior to version 6.4.0 & 6.1.3 is vulnerable to data source name injection. The database name for generating and inserting data into a database does not properly sanitize user input which can lead to arbitrary file reads."...