Description
The YugabyteDB tablet server contains a flaw in its YCQL query handling that can trigger a null pointer dereference when processing certain malformed inputs. An authenticated attacker could exploit this issue to crash the YCQL tablet server, resulting in a denial of service.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| YugabyteDB | YugabyteDB | 2024.1.0.0 – < 2024.1.3.0, 2024.2.0.0 – < 2024.2.2.5, 2.20.0.0 – < 2.20.9.0 | 2024.1.3.0 |