CVE-2026-42542 Details
Description
TDengine is an open source, time-series database optimized for Internet of Things devices. In versions 3.4.0.0 through 3.4.1.5, an unauthenticated remote attacker can crash the taosd server process by sending a single crafted RPC packet. No credentials or prior session state are required. Version 3.4.1.6 fixes the issue.
A denial-of-service vulnerability has been identified in TDengine versions 3.4.0.0 prior to 3.4.1.5. An unauthenticated remote attacker can crash the taosd server process by sending a single crafted RPC packet. The vulnerability arises because the server does not properly validate the length of incoming packets before processing them, allowing for an integer underflow that leads to a segmentation fault and server crash. While the confirmed impact is a crash causing a denial-of-service, the memory corruption on the heap before the crash could potentially be exploited for remote code execution.
Users can upgrade to TDengine version 3.4.1.6, which addresses this vulnerability by adding proper bounds checks on the length of incoming RPC packets.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Jun 11, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/taosdata/TDengine/releases/tag/ver-3.4.1.6 | [email protected] | ProductRelease Notes |
| https://github.com/taosdata/TDengine/security/advisories/GHSA-vg95-j2hf-hvjx | [email protected] | ExploitMitigationVendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-191 | Integer Underflow (Wrap or Wraparound) | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| tdengine tdengine | >= 3.4.0.0, < 3.4.1.6 |
CPE
Remediation
| |
Change History
5 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 23, 2026 | CVE Translated | [email protected] |
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Jun 12, 2026 | Initial Analysis | [email protected] |
| Jun 10, 2026 | New CVE Received | [email protected] |