ydb-platform/ydb

ydb-platform/ydb

Releases636
Frequency2 days 12 hours
Last Release
Stars4.76K
YDB is an open source Distributed SQL Database that combines high availability and scalability with strong consistency and ACID transactions

CVE History

CVEAffectedPublishedCVSS v3CVSS v2

Missing Release of Memory after Effective Lifetime vulnerability in ydb-platform ydb (contrib/libs/yajl modules). This vulnerability is associated with program files yail_tree.C. This issue affects ydb: through 24.4.4.2.

< 24.4.449.1 CRITICAL

Out-of-bounds read was discovered in YDB server. An attacker could construct a query with insert statement that would allow him to read sensitive information from other memory locations or cause a crash.