SUSE-SU-2022:2107-1 Security update for mariadb

This update for mariadb fixes the following issues: - CVE-2021-46669 bsc1199928 - CVE-2022-21427 bsc1199928 - CVE-2022-27377 bsc1198603 - CVE-2022-27378 bsc1198604 - CVE-2022-27380 bsc1198606 - CVE-2022-27381 bsc1198607 - CVE-2022-27383 bsc1198610 - CVE-2022-27384 bsc1198611 - CVE-2022-27386...

SUSE SLES15 Security Update : mariadb (SUSE-SU-2022:2003-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:2003-1 advisory. Update to 10.5.16 bsc1199928: - CVE-2021-46669 bsc1199928 - CVE-2022-27376 bsc1198628 - CVE-2022-27377 bsc1198603 - CVE-2022-27378...

openSUSE: Security Advisory for mariadb (SUSE-SU-2022:2003-1)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2022-27377 affecting package mariadb for versions less than 10.6.8-1

CVE-2022-27377 affecting package mariadb for versions less than 10.6.8-1. An upgraded version of the package is available that resolves this issue...

MariaDB 10.2.0 < 10.2.44 Multiple Vulnerabilities

The version of MariaDB installed on the remote host is prior to 10.2.44. It is, therefore, affected by multiple vulnerabilities as referenced in the 10.2.44 advisory. - MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component...

MariaDB Use-After-Free Vulnerability (MDEV-26281) - Windows

MariaDB is prone to a use-after-free vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mariadb:mariadb"; if...

MariaDB Use-After-Free Vulnerability (MDEV-26281) - Linux

MariaDB is prone to a use-after-free vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mariadb:mariadb"; if...

CVE-2022-27377

MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component Itemfuncin::cleanup, which is exploited via specially crafted SQL statements...

AZL-9690 CVE-2022-27377 affecting package mariadb for versions less than 10.6.8-1

MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component Itemfuncin::cleanup, which is exploited via specially crafted SQL statements...

CVE-2022-27377

MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component Itemfuncin::cleanup, which is exploited via specially crafted SQL statements...

CVE-2022-27377

CVE-2022-27377 affects MariaDB Server 10.6.3 and earlier, due to a use-after-free in Item_func_in::cleanup() that can be triggered by specially crafted SQL statements. The connected advisories/notes confirm this CVE is linked to MariaDB server crashes/use-after-free scenarios and are part of broa...

CVE-2020-27377

CMS Made Simple 2.2.14 is affected by a cross-site scripting (XSS) vulnerability in the Administrator panel, specifically in the 'Setting News' module, allowing execution of arbitrary web scripts. The issue is triggered via user-supplied input and can impact integrity and confidentiality per CVE ...

CVE-2021-27377

An issue was discovered in the yottadb crate before 1.2.0 for Rust. For some memory-allocation patterns, ydbsubscriptnextst and ydbsubscriptprevst have a use-after-free...

CVE-2021-27377

CVE-2021-27377 affects the yottadb crate for Rust, specifically versions before 1.2.0. The vulnerability is a use-after-free in memory handling for certain allocation patterns, involving ydb_subscript_next_st and ydb_subscript_prev_st. Multiple connected advisories (e.g., RUSTSEC-2021-0022, GHSA-...