Skip to content

Instantly share code, notes, and snippets.

@ycybfhb

ycybfhb/CVE-2024-41433 Secret

Created August 9, 2024 07:37
Show Gist options
  • Save ycybfhb/eec3a1eefe4c85eb22f1bca6114359a1 to your computer and use it in GitHub Desktop.
Save ycybfhb/eec3a1eefe4c85eb22f1bca6114359a1 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
CVE-2024-41433
[CVE ID]
CVE-2024-41433
[PRODUCT]
PingCAP TiDB
[VERSION]
v8.1.0
[PROBLEM TYPE]
buffer overflow
[DESCRIPTION]
PingCAP TiDB v8.1.0 was discovered to contain a buffer overflow vulnerability,
which could lead to database crashes and denial of service attacks.
The main reason is that the projection in the query execution plan has been pushed down to TiKV and the schema information is lost.
[Reference]
https://github.com/pingcap/tidb/issues/53796
[FIX]
https://github.com/pingcap/tidb/pull/52836
[Discoverer]
Jiaju Bai, Zixuan Fu, Hongbo Feng, Jianwei Liu
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment