[MDEV-39581] dynamic column header missing sanity checks - Jira

XML

Word

Printable

Details

Type: Bug
Status: Closed (View Workflow)
Priority: Major
Resolution: Fixed
Affects Version/s: 10.6(EOL), 10.11, 11.4, 11.8, 12.3
Fix Version/s: 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.2
Component/s: Dynamic Columns
Labels:
None

Bug Category:
Can result in unexpected behaviour

Description

SELECT COLUMN_LIST(0x040100FFFF00000300666F6F21626172) AS leak;

Reported by Ben Bidner (Automattic.com Security Team).

Attachments

Issue Links

relates to

CONC-844 OOB read and integer underflow in init_read_hdr() via untrusted dynamic column header

Open

Activity

People

Assignee:: Sergei Golubchik

Reporter:: Sergei Golubchik

Votes:: 0 Vote for this issue

Watchers:: 1 Start watching this issue

Dates

Created:: 2026-05-12 16:55

Updated:: 2026-08-17 18:00

Resolved:: 2026-05-20 21:19

Time Tracking

Estimated:

Not Specified

Remaining:

0d

Logged:

1h

Git Integration

Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.