CVE-2024-33809

PingCAP TiDB v7.5.1 is vulnerable to a buffer overflow because the system reads a string from a column while the offset field in that column remains uninitialized. This flaw can lead to database crashes and denial of service (DoS) attacks. While technical details regarding the specific function o...

CVE-2024-35618

PingCAP TiDB version v7.5.1 is vulnerable to a NULL pointer dereference within the SortedRowContainer component. This security flaw can be exploited by an attacker to cause a denial of service (DoS). While the root cause is identified as the improper handling of pointers within this specific comp...

CVE-2024-41434

PingCAP TiDB v8.1.0 is vulnerable to a buffer overflow within the (*Column).GetDecimal component. The root cause is insufficient validation of the return type when checking expressions between Agg and GroupBy, which can be triggered via a crafted input to the RemoveUnnecessaryFirstRow function. T...

CVE-2022-31011

Summary: CVE-2022-31011 affects PingCAP TiDB HTAP database. Under certain conditions, an attacker can craft malicious authentication requests to bypass authentication, causing privilege escalation or unauthorized access. The vulnerability specifically impacts TiDB 5.3.0; a patch is available in T...

CVE-2024-41433

PingCAP TiDB v8.1.0 is affected by a buffer overflow vulnerability within the expression.ExplainExpressionList component. This flaw can be triggered via crafted input, potentially leading to a Denial of Service (DoS) . However, PingCAP notes that actual reproduction did not result in service inte...

CVE-2022-3023

The CVE-2022-3023 entry relates to a vulnerability in the PingCAP TiDB server where an externally controlled format string is used, affecting TiDB and specifically versions prior to 6.4.0 and prior to 6.1.3. The issue is described as a format-string vulnerability that can lead to unintended behav...

CVE-2022-34969

CVE-2022-34969 concerns PingCAP TiDB v6.1.0, where a NULL pointer dereference in TiDB is confirmed by multiple sources. The CVE entry documents the issue as a NULL pointer dereference with a high impact on availability (NVD: CVSSv3.1 base 7.5, AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). Several connect...