Approved changes feed: RSS · Atom

cpe:2.3:a:yugabytedb_inc:yugabytedb:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorYugabytedb Inc (5b0d894f-e56a-51aa-8c7b-4c9e9aa3e9c1)
ProductYugabytedb (cbd25582-1d0d-5d4d-8b54-56b145d788a6)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-8865 vulnerable 2026-06-08 07:45:21.327881 Details available
The YugabyteDB tablet server contains a flaw in its YCQL query handling that can trigger a null pointer dereference when processing certain malformed inputs. An authenticated attacker could exploit this issue to crash the YCQL tablet server, resulting in a denial of service.
Published: 2025-08-11T14:19:02.960Z
Updated: 2025-08-11T15:04:04.232Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-8863 vulnerable 2026-06-08 07:45:21.326106 Details available
YugabyteDB diagnostic information was transmitted over HTTP, which could expose sensitive data during transmission
Published: 2025-08-11T13:03:18.238Z
Updated: 2025-08-11T15:08:45.940Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-8862 vulnerable 2026-06-08 07:45:21.325738 Details available
YugabyteDB has been collecting diagnostics information from YugabyteDB servers, which may include sensitive gflag configurations. To mitigate this, we recommend upgrading the database to a version where this information is properly redacted.
Published: 2025-08-11T12:40:35.201Z
Updated: 2025-08-11T19:35:03.672Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.