CVE-2024-32886
Fixed upstream EPSS <1%CVSS 4.9
Vitess is a database clustering system for horizontal scaling of MySQL. When executing the following simple query, the `vtgate` will go into an endless loop that also keeps consuming memory and eventually will run out of memory. This vulnerability is fixed in 19.0.4, 18.0.5, and 17.0.7.
Products: vitessio vitess
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| Go | github.com/vitessio/vitess | 19.0.4 |
| Go | github.com/vitessio/vitess | 18.0.5 |
| Go | github.com/vitessio/vitess | 17.0.7 |
| Go | vitess.io/vitess | 0.17.7 |
| Go | vitess.io/vitess | 0.18.5 |
| Go | vitess.io/vitess | 0.19.4 |