Skip to content
CVE PROGRAM SOURCE RECORD4.1 Medium

CVE-2025-8865

The YugabyteDB tablet server contains a flaw in its YCQL query handling that can trigger a null pointer dereference when processing certain malformed inputs. An authenticated attac

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Yugabyte

Description

The YugabyteDB tablet server contains a flaw in its YCQL query handling that can trigger a null pointer dereference when processing certain malformed inputs. An authenticated attacker could exploit this issue to crash the YCQL tablet server, resulting in a denial of service.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

YugabyteDB Inc YugabyteDB

Default version status: unaffected

  • 2024.1.0.0 to < 2024.1.3.0affected
  • 2024.2.0.0 to < 2024.2.2.5affected
  • 2.20.0.0 to < 2.20.9.0affected

References