Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
5.3

TiDB 8.2.0-alpha crashes when processing certain SQL queries

CVE-2024-37820 · published 2 years ago
Summary

A bug in TiDB 8.2.0-alpha can cause the application to crash if it processes a specific type of SQL query. This can happen if an attacker sends a malicious query to the database. To avoid this issue, users should update to the latest version of TiDB or configure their database to restrict or filter out potentially malicious input.

What to do
  • Update github.com pingcap to version 8.2.0.
Affected software
Ecosystem VendorProductAffected versions
go github.com pingcap < 8.2.0
Fix: upgrade to 8.2.0
Original advisory text
A nil pointer dereference in PingCAP TiDB v8.2.0-alpha-216-gfe5858b allows attackers to crash the application via expression.inferCollation.
A nil pointer dereference in PingCAP TiDB v8.2.0-alpha-216-gfe5858b allows attackers to crash the application via expression.inferCollation.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker partial control
Severity
5.3 Medium
Exploitation
<1% chance of attack within 30 days
Type
CWE-476NULL Pointer Dereference
Timeline
Published25 Jun 2024
Updated4 Nov 2026
First seen6 Mar 2026
Sources
GHSA-9g6g-xqv5-8g5w · GHSA
CVE-2024-37820 · NVD
Track software like this
Free during beta