CVE-2023-38502

MediumCVSS 6.5

Published: 25/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.56%

42th percentile - higher than 42% of all known CVEs

Summary

TDengine is an open source, time-series database optimized for Internet of Things devices. Prior to version 3.0.7.1, TDengine DataBase crashes on UDF nested query.

Risk Assessment

This vulnerability may lead to database crashes, affecting service availability and disrupting applications relying on TDengine.

Recommendation

It is recommended to upgrade to version 3.0.7.1, which includes a patch for this issue.

Original NVD description (English source)

TDengine is an open source, time-series database optimized for Internet of Things devices. Prior to version 3.0.7.1, TDengine DataBase crashes on UDF nested query. This issue affects TDengine Databases which let users connect and run arbitrary queries. Version 3.0.7.1 has a patch for this issue.