CVE-2022-3023
1 advisory.
Go/github.com/pingcap/tidb CVE-2022-3023: critical 9.8
TiDB vulnerable to Use of Externally-Controlled Format String
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 6.1.2 |
| 6.2.0 | - | 6.4.0-alpha1 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-7fxj-fr3v-r9gj
- https://nvd.nist.gov/vuln/detail/CVE-2022-3023
- https://github.com/pingcap/tidb/commit/d0376379d615cc8f263a0b17c031ce403c8dcbfb
- https://advisory.dw1.io/45
- https://github.com/pingcap/tidb
- https://huntr.dev/bounties/120f1346-e958-49d0-b66c-0f889a469540
CVE-2022-3023 · published · modified · JSON