CVE-2024-41434 Denial of service in n/a
Attackers can cause a denial of service in TiDB via crafted input triggering a buffer overflow in decimal processing, though the vendor disputes the security impact.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-41434?
CVE-2024-41434 is a medium-severity denial of service vulnerability in n/a, published on 3 Sep 2024. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
PingCAP TiDB v8.1.0 was discovered to contain a buffer overflow via the component (*Column).GetDecimal. This allows attackers to cause a Denial of Service (DoS) via a crafted input to the 'RemoveUnnecessaryFirstRow', it will check the expression between 'Agg' and 'GroupBy', but does not check the return type. NOTE: PingCAP disputes this, arguing that reproduction did not cause the security impact of service interruption to other users. They maintain it is a complex query bug in the product but not a DoS.
Weakness: CWE-400
Which versions are affected by CVE-2024-41434?
It affects 1 product.
Products include Pingcap Tidb.
How do I fix CVE-2024-41434?
No fix has been published for CVE-2024-41434 yet. Limit exposure of the affected software until one is available.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2024-41434 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2024-41434 exists.
Other vulnerabilities in n/a
Sources
Also known as GHSA-66rc-q43x-8675.