CVE-2022-28228

Out-of-bounds read was discovered in YDB server

Critical · published December 23, 2022

CVSS v3.1
9.1
EPSS
1%
Percentile
52.2
In the wild
Unconfirmed
What it is

🚨 An out-of-bounds read in YDB server could let an attacker peek into other memory locations with a crafted query! 🔥 Think of it like a waiter who accidentally delivers the wrong dish from the kitchen—suddenly, you’re getting a look at someone else's order instead of your own! This vulnerability could allow attackers to read sensitive information from memory, potentially leading to data leaks or even server crashes. If exploited, it could compromise your application's integrity and user privacy in a flash!

Put simply

Think of it like a waiter who accidentally delivers the wrong dish from the kitchen—suddenly, you’re getting a look at someone else's order instead of your own! The out-of-bounds read flaw allows an attacker to manipulate an insert statement to access unauthorized memory areas, reading sensitive information unintended for them.

What to do

This vulnerability could allow attackers to read sensitive information from memory, potentially leading to data leaks or even server crashes. If exploited, it could compromise your application's integrity and user privacy in a flash! It's crucial to patch your YDB server as soon as possible to the latest version where this flaw is fixed. Regularly audit your queries and ensure strict access controls are in place to mitigate risks. 🛡️ You've got this! By following these steps, you're one step closer to securing your environment. Keep up the good work! 💪✨

The record
Technical detail
CVSS v3.1
9.1 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00690 · 52.2th percentile
Published
2022-12-23T00:00Z
EPSS history
Timeline
  • 23 DEC 00:00Z
    Out-of-bounds read was discovered in YDB server
    cvelistv5