Out-of-Bounds Read Vulnerability in Gauss100 OLTP Database by Huawei

CVE-2019-5289

What is CVE-2019-5289?

The Gauss100 OLTP database, specifically version 6.5.0 from Huawei, is susceptible to an out-of-bounds read vulnerability caused by inadequate validation of packet lengths. This lack of proper checks allows attackers to send malformed packets, potentially affecting both active and standby communication channels. If exploited, the vulnerability could lead to a crash of the database on the standby node, compromising its reliability and availability.

References