← CVE Intelligence

CVE-2025-8865

YugabyteDB Inc / YugabyteDB PUBLISHED

Description (CNA)

The YugabyteDB tablet server contains a flaw in its YCQL query handling that can trigger a null pointer dereference when processing certain malformed inputs. An authenticated attacker could exploit this issue to crash the YCQL tablet server, resulting in a denial of service.

Affected (CNA)

Vendor / productVersions
YugabyteDB Inc / YugabyteDBaffected 2024.1.0.0 before 2024.1.3.0; affected 2024.2.0.0 before 2024.2.2.5; affected 2.20.0.0 before 2.20.9.0

CWE

CWE-476

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.