CVE-2026-42542

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-42542", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2026-04-28T16:56:50.190Z", "datePublished": "2026-06-10T20:32:38.985Z", "dateUpdated": "2026-06-11T16:15:17.741Z"}, "containers": {"cna": {"title": "TDengine has an integer underflow in uvConnMayGetUserInfo() allows unauthenticated remote crash (DoS)", "problemTypes": [{"descriptions": [{"cweId": "CWE-191", "lang": "en", "description": "CWE-191: Integer Underflow (Wrap or Wraparound)", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}}], "references": [{"name": "https://github.com/taosdata/TDengine/security/advisories/GHSA-vg95-j2hf-hvjx", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/taosdata/TDengine/security/advisories/GHSA-vg95-j2hf-hvjx"}, {"name": "https://github.com/taosdata/TDengine/releases/tag/ver-3.4.1.6", "tags": ["x_refsource_MISC"], "url": "https://github.com/taosdata/TDengine/releases/tag/ver-3.4.1.6"}], "affected": [{"vendor": "taosdata", "product": "TDengine", "versions": [{"version": ">= 3.4.0.0, < 3.4.1.6", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-06-10T20:32:38.985Z"}, "descriptions": [{"lang": "en", "value": "TDengine is an open source, time-series database optimized for Internet of Things devices. In versions 3.4.0.0 through 3.4.1.5, an unauthenticated remote attacker can crash the taosd server process by sending a single crafted RPC packet. No credentials or prior session state are required. Version 3.4.1.6 fixes the issue."}], "source": {"advisory": "GHSA-vg95-j2hf-hvjx", "discovery": "UNKNOWN"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-06-11T12:56:59.511171Z", "id": "CVE-2026-42542", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-06-11T16:15:17.741Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-42542", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-06-11T12:56:59.511171Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-06-11T12:57:12.740Z"}}], "cna": {"title": "TDengine has an integer underflow in uvConnMayGetUserInfo() allows unauthenticated remote crash (DoS)", "source": {"advisory": "GHSA-vg95-j2hf-hvjx", "discovery": "UNKNOWN"}, "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}], "affected": [{"vendor": "taosdata", "product": "TDengine", "versions": [{"status": "affected", "version": ">= 3.4.0.0, < 3.4.1.6"}]}], "references": [{"url": "https://github.com/taosdata/TDengine/security/advisories/GHSA-vg95-j2hf-hvjx", "name": "https://github.com/taosdata/TDengine/security/advisories/GHSA-vg95-j2hf-hvjx", "tags": ["x_refsource_CONFIRM"]}, {"url": "https://github.com/taosdata/TDengine/releases/tag/ver-3.4.1.6", "name": "https://github.com/taosdata/TDengine/releases/tag/ver-3.4.1.6", "tags": ["x_refsource_MISC"]}], "descriptions": [{"lang": "en", "value": "TDengine is an open source, time-series database optimized for Internet of Things devices. In versions 3.4.0.0 through 3.4.1.5, an unauthenticated remote attacker can crash the taosd server process by sending a single crafted RPC packet. No credentials or prior session state are required. Version 3.4.1.6 fixes the issue."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-191", "description": "CWE-191: Integer Underflow (Wrap or Wraparound)"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-06-10T20:32:38.985Z"}}}, "cveMetadata": {"cveId": "CVE-2026-42542", "state": "PUBLISHED", "dateUpdated": "2026-06-11T16:15:17.741Z", "dateReserved": "2026-04-28T16:56:50.190Z", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "datePublished": "2026-06-10T20:32:38.985Z", "assignerShortName": "GitHub_M"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"product": "TDengine", "vendor": "taosdata", "versions": [{"status": "affected", "version": ">= 3.4.0.0, < 3.4.1.6"}]}], "source": "security-advisories@github.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:tdengine:tdengine:*:*:*:*:*:*:*:*", "matchCriteriaId": "68C1A578-81A0-49AA-B839-CB445063929A", "versionEndExcluding": "3.4.1.6", "versionStartIncluding": "3.4.0.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "TDengine is an open source, time-series database optimized for Internet of Things devices. In versions 3.4.0.0 through 3.4.1.5, an unauthenticated remote attacker can crash the taosd server process by sending a single crafted RPC packet. No credentials or prior session state are required. Version 3.4.1.6 fixes the issue."}, {"lang": "es", "value": "TDengine es una base de datos de series temporales de c\u00f3digo abierto optimizada para dispositivos de internet de las cosas. En las versiones 3.4.0.0 a 3.4.1.5, un atacante remoto no autenticado puede bloquear el proceso del servidor taosd enviando un \u00fanico paquete RPC manipulado. No se requieren credenciales ni estado de sesi\u00f3n previo. La versi\u00f3n 3.4.1.6 corrige el problema."}], "id": "CVE-2026-42542", "lastModified": "2026-07-23T09:10:00.113", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "security-advisories@github.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-42542", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-06-11T12:56:59.511171Z", "version": "2.0.3"}}]}, "published": "2026-06-10T22:16:57.527", "references": [{"source": "security-advisories@github.com", "tags": ["Product", "Release Notes"], "url": "https://github.com/taosdata/TDengine/releases/tag/ver-3.4.1.6"}, {"source": "security-advisories@github.com", "tags": ["Exploit", "Mitigation", "Vendor Advisory"], "url": "https://github.com/taosdata/TDengine/security/advisories/GHSA-vg95-j2hf-hvjx"}], "sourceIdentifier": "security-advisories@github.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-191"}], "source": "security-advisories@github.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[3.4.0.0,3.4.1.6)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "TDengine", "source": "cna", "vendor": "taosdata"}, "product": "tdengine", "vendor": "taosdata"}], "created": "2026-06-10T23:00:20.863955+00:00", "updated": "2026-06-11T10:40:50.390872+00:00", "vendors": ["taosdata", "taosdata$PRODUCT$tdengine"]}