CVE-2022-43766
Assigner: apache
Published: 2022-10-26T00:00:00
State: PUBLISHED
title: Apache IoTDB prior to 0.13.3 allows DoS
descriptions: value: Apache IoTDB version 0.12.2 to 0.12.6, 0.13.0 to 0.13.2 are vulnerable to a Denial of Service attack when accepting untrusted patterns for REGEXP queries with Java 8. Users should upgrade to 0.13.3 which addresses this issue or use a later version of Java to avoid it.
affected: vendor: Apache Software Foundation
product: Apache IoTDB
versions: version: unspecified
lessThanOrEqual: 0.13.2
status: affected
versionType: custom
version: 0.12.2
status: affected
lessThan: unspecified
versionType: custom
credits: value: This issue was discovered by 4ra1n of Chaitin Tech
metrics: other: type: unknown
content: other: low
problemTypes: descriptions: type: text
description:   
x_generator: engine: Vulnogram 0.0.9
source: discovery: UNKNOWN