Vulnerability Database
289,697
Total vulnerabilities in the database
CVE-2022-43766
Apache IoTDB version 0.12.2 to 0.12.6, 0.13.0 to 0.13.2 are vulnerable to a Denial of Service attack when accepting untrusted patterns for REGEXP queries with Java 8. Users should upgrade to 0.13.3 which addresses this issue or use a later version of Java to avoid it.
| Software | From | Fixed in |
|---|---|---|
| apache / iotdb | 0.13.0 | 0.13.2.x |
| apache / iotdb | 0.12.2 | 0.12.6.x |
org.apache.iotdb / iotdb-parent
|
0.12.2 | 0.13.3 |
apache-iotdb
|
0.13.0 | 0.14.0rc1 |