Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2023-38502

TDengine Database Denial-of-Service

Description

TDengine is an open source, time-series database optimized for Internet of Things devices. Prior to version 3.0.7.1, TDengine DataBase crashes on UDF nested query. This issue affects TDengine Databases which let users connect and run arbitrary queries. Version 3.0.7.1 has a patch for this issue.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

taosdata TDengine

  • < 3.0.7.1affected

References