Lucene search

Veracode Vulnerability DatabaseVERACODE:47232

HistoryMay 29, 2024 - 6:38 a.m.

NULL Pointer Dereference

2024-05-2906:38:32

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

pingcap

tidb

vulnerability

null pointer dereference

sortedrowcontainer

denial of service

6.7 Medium

AI Score

Confidence

High

0 Low

EPSS

Percentile

0.0%

JSON

PingCAP TiDB is vulnerable to NULL Pointer Dereference. The vulnerability is due to a NULL pointer dereference in the SortedRowContainer component, which allows an attacker to cause a denial of service.

CPENameOperatorVersion
github.com/pingcap/tidblev8.0.0
github.com/pingcap/tidblev8.0.0

CPE	Name	Operator	Version
	github.com/pingcap/tidb	le	v8.0.0
	github.com/pingcap/tidb	le	v8.0.0

References

gist.github.com/GaranR/0b75c6f2c0215db39c910022daf6522c

github.com/pingcap/tidb/commit/6612270cc5823de70baad52a70c0260a41d006b6

github.com/pingcap/tidb/issues/52768

github.com/pingcap/tidb/pull/53237