PT-2024-27766 · Pingcap · Tidb
CVSS v3.1
5.4
Medium
| Vector | AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L |
Name of the Vulnerable Software and Affected Versions
PingCAP TiDB versions prior to 8.2.0
Description
A nil pointer dereference in PingCAP TiDB allows attackers to crash the application via
expression.inferCollation.Recommendations
For versions prior to 8.2.0, update to version 8.2.0 or later to resolve the issue.
As a temporary workaround, consider restricting access to the
expression.inferCollation function until a patch is available.Fix
NULL Pointer Dereference
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Tidb