pingcap

Records7All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

pingcap records in CISA KEV

No pingcap vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Tidb 7 records HIGH

Records

7 records

TI-2022-02786 CVE-2022-3023 · GHSA-7fxj-fr3v-r9gj

Use of Externally-Controlled Format String in pingcap/tidb

HIGH 75

Use of Externally-Controlled Format String in GitHub repository pingcap/tidb prior to 6.4.0, 6.1.3.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0068 Published 2022-11-04 Fixed in 6.4.0, 6.1.3 CWE-134

TI-2024-23494 CVE-2024-35618

PingCAP TiDB v7.5.1 was discovered to contain a NULL pointer dereference via the component SortedRowContainer.

HIGH 66

PingCAP TiDB v7.5.1 was discovered to contain a NULL pointer dereference via the component SortedRowContainer.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00412 Published 2024-05-24 No fix listed CWE-476

TI-2024-27622 CVE-2024-41434 · GHSA-66rc-q43x-8675

PingCAP TiDB v8.1.0 was discovered to contain a buffer overflow via the component…

MEDIUM 53

PingCAP TiDB v8.1.0 was discovered to contain a buffer overflow via the component (*Column).GetDecimal.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00414 Published 2024-09-03 No fix listed CWE-400

TI-2024-27621 CVE-2024-41433 · GHSA-89wc-q5f7-75f4

PingCAP TiDB v8.1.0 was discovered to contain a buffer overflow via the component…

MEDIUM 49

PingCAP TiDB v8.1.0 was discovered to contain a buffer overflow via the component expression.ExplainExpressionList.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00569 Published 2024-09-03 No fix listed CWE-120

TI-2022-13056 CVE-2022-31011 · GHSA-4whx-7p29-mq22

TiDB authentication bypass vulnerability

LOW 36

TiDB is an open-source NewSQL database that supports Hybrid Transactional and Analytical Processing (HTAP) workloads.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00323 Published 2022-05-31 Fixed in 5.3.1, 0.0.0-20220221072141-27ffd1126da1 +1 CWE-287

TI-2022-15734 CVE-2022-34969 · GHSA-393v-jrvh-g25v

PingCAP TiDB v6.1.0 was discovered to contain a NULL pointer dereference.

LOW 35

PingCAP TiDB v6.1.0 was discovered to contain a NULL pointer dereference.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00927 Published 2022-08-03 No fix listed CWE-476

TI-2024-22319 CVE-2024-33809

PingCAP TiDB v7.5.1 was discovered to contain a buffer overflow vulnerability, which…

LOW 29

PingCAP TiDB v7.5.1 was discovered to contain a buffer overflow vulnerability, which could lead to database crashes and denial of service attacks.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00426 Published 2024-05-24 No fix listed CWE-120

Open these records in search →

Critical	2
High	3
Medium	2
Low	0
No CVSS	0