Pingcap - vulnerabilities (CVEs)
7 CVEs in 2 products, 0 in the last 30 days, newest from 2024-09-03.
Products
- Tidb - 7 CVEs
- Pingcaptidb - 1 CVEs
Newest CVEs of Pingcap
- CVE-2024-41433 - CVSS 9.8 (critical), 2024-09-03: PingCAP TiDB v8.1.0 was discovered to contain a buffer overflow via the component expression.ExplainExpressionList. This vulnerability allows attackers to…
- CVE-2024-41434 - CVSS 4.3 (medium), 2024-09-03: PingCAP TiDB v8.1.0 was discovered to contain a buffer overflow via the component (*Column).GetDecimal. This allows attackers to cause a Denial of Service…
- CVE-2024-35618 - CVSS 7.5 (high), 2024-05-24: PingCAP TiDB v7.5.1 was discovered to contain a NULL pointer dereference via the component SortedRowContainer.
- CVE-2024-33809 - CVSS 6.5 (medium), 2024-05-24: PingCAP TiDB v7.5.1 was discovered to contain a buffer overflow vulnerability, which could lead to database crashes and denial of service attacks.
- CVE-2022-3023 - CVSS 9.8 (critical), 2022-11-04: Use of Externally-Controlled Format String in GitHub repository pingcap/tidb prior to 6.4.0, 6.1.3.
- CVE-2022-34969 - CVSS 7.5 (high), 2022-08-03: PingCAP TiDB v6.1.0 was discovered to contain a NULL pointer dereference.
- CVE-2022-31011 - CVSS 7.8 (high), 2022-05-31: TiDB is an open-source NewSQL database that supports Hybrid Transactional and Analytical Processing (HTAP) workloads. Under certain conditions, an attacker…