Denial of Service by attacker on the private network
Details
| Detail name | Value |
|---|---|
| Changelog Number | 12756 |
| Type | Bug |
| Status | Resolved |
| Affected Versions | Exasol 6.2.0, Exasol 7.0.0, Exasol 7.1.0 |
| Fix Versions | Exasol 8.0.0, Exasol 7.1.5, Exasol 7.0.15 |
| Resolution Date | 2022-01-26 |
Issue
We discovered a moderate severity denial of service attack that can be exploited by an attacker who has already gained access to the private network interface of an Exasol cluster.
Specifically crafted network packets sent by such an attacker can cause the database to crash, impacting availability of the system.
Remediation
Upgrade to version 7.0.15 or 7.1.5 or 8.0
