Vulnerabilities

TI-2024-27622 CVE-2024-41434 · GHSA-66rc-q43x-8675

PingCAP TiDB v8.1.0 was discovered to contain a buffer overflow via the component…

MEDIUM 53

PingCAP TiDB v8.1.0 was discovered to contain a buffer overflow via the component (*Column).GetDecimal.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00414 Published 2024-09-03 No fix listed CWE-400

TI-2024-27621 CVE-2024-41433 · GHSA-89wc-q5f7-75f4

MEDIUM 49

PingCAP TiDB v8.1.0 was discovered to contain a buffer overflow via the component expression.ExplainExpressionList.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00569 Published 2024-09-03 No fix listed CWE-120

TI-2024-22319 CVE-2024-33809

LOW 29

PingCAP TiDB v7.5.1 was discovered to contain a buffer overflow vulnerability, which could lead to database crashes and denial of service attacks.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00426 Published 2024-05-24 No fix listed CWE-120

TI-2024-23494 CVE-2024-35618

HIGH 66

PingCAP TiDB v7.5.1 was discovered to contain a NULL pointer dereference via the component SortedRowContainer.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00412 Published 2024-05-24 No fix listed CWE-476

TI-2022-02786 CVE-2022-3023 · GHSA-7fxj-fr3v-r9gj

HIGH 75

Use of Externally-Controlled Format String in GitHub repository pingcap/tidb prior to 6.4.0, 6.1.3.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0068 Published 2022-11-04 Fixed in 6.4.0, 6.1.3 CWE-134

TI-2022-15734 CVE-2022-34969 · GHSA-393v-jrvh-g25v

LOW 35

PingCAP TiDB v6.1.0 was discovered to contain a NULL pointer dereference.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00927 Published 2022-08-03 No fix listed CWE-476

TI-2022-13056 CVE-2022-31011 · GHSA-4whx-7p29-mq22

LOW 36

TiDB is an open-source NewSQL database that supports Hybrid Transactional and Analytical Processing (HTAP) workloads.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00323 Published 2022-05-31 Fixed in 5.3.1, 0.0.0-20220221072141-27ffd1126da1 +1 CWE-287