Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-40425

handlersocket crashes on read with huge number of fields

    XMLWordPrintable

Details

    • Can result in hang or crash

    Description

      handlersocket doesn't verify number of fields in the index read command.

      Reported by XlabAI Team of Tencent Xuanwu Lab using the Atuin Automated Vulnerability Discovery Engine.

      Attachments

        Activity

          People

            serg Sergei Golubchik
            serg Sergei Golubchik
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Time Tracking

                Estimated:
                Original Estimate - Not Specified
                Not Specified
                Remaining:
                Remaining Estimate - 0d
                0d
                Logged:
                Time Spent - 3h
                3h

                Git Integration

                  Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.