BIT-MYSQL-CLIENT-2022-31624

MariaDB Server before 10.7 is vulnerable to Denial of Service. While executing the plugin/serveraudit/serveraudit.c method logstatementex, the held lock lockbigbuffer is not released correctly, which allows local users to trigger a denial of service due to the deadlock...

BIT-MARIADB-2022-31622

MariaDB Server before 10.7 is vulnerable to Denial of Service. In extra/mariabackup/dscompress.cc, when an error occurs pthreadcreate returns a nonzero value while executing the method createworkerthreads, the held lock is not released correctly, which allows local users to trigger a denial of...

BIT-MARIADB-2022-31623

MariaDB Server before 10.7 is vulnerable to Denial of Service. In extra/mariabackup/dscompress.cc, when an error occurs i.e., going to the err label while executing the method createworkerthreads, the held lock thd-ctrlmutex is not released correctly, which allows local users to trigger a denial ...

mariadb: server crash in st_select_lex_unit::exclude_level

MariaDB v10.5 to v10.7 was discovered to contain a segmentation fault via the component stselectlexunit::excludelevel...

mariadb: use-after-poison in my_strcasecmp_8bit() of ctype-simple.c

A flaw was found in the MariaDB Server. A use-after-free in the component, mystrcasecmp8bit, can be exploited via specially crafted SQL statements, impacting availability...

mariadb: use-after-poison in Binary_string::free_buffer

A flaw was found in the MariaDB Server. It contains a use-after-free in the component, Binarystring::freebuffer at /sql/sqlstring.h, affecting availability...

mariadb: assertion failure in sql/item_cmpfunc.cc

A flaw was found in the MariaDB Server. It contains a segmentation fault via the component, sql/itemcmpfunc.cc, affecting availability...

mariadb: server crashes in query_arena::set_query_arena upon SELECT from view

A flaw was found in the MariaDB Server. It contains a segmentation fault via the component, sql/sqlclass.cc, impacting availability...

BIT-2022-27385

An issue in the component Usedtablesandconstcache::usedtablesandconstcachejoin of MariaDB Server v10.7 and below was discovered to allow attackers to cause a Denial of Service DoS via specially crafted SQL statements...

PT-2025-10403

Name of the Vulnerable Software and Affected Versions MariaDB Server versions 10.4 through 10.11. MariaDB Server versions 11.0 through 11.4. Description The issue causes MariaDB Server to crash in Item direct view ref::derived field transformer for where. Recommendations For MariaDB Server versio...

PT-2025-10402

Name of the Vulnerable Software and Affected Versions MariaDB Server versions 10.4 through 10.11., 11.0 through 11.0. Description The issue may cause MariaDB Server to crash with an empty backtrace log. This could be related to the make aggr tables info and optimize stage2 functions...

PT-2025-10401 · Mariadb +1 · Mariadb Server +1

Name of the Vulnerable Software and Affected Versions: MariaDB Server versions 10.4 through 10.4.32 MariaDB Server versions 10.5 through 10.5.23 MariaDB Server versions 10.6 through 10.6.16 MariaDB Server versions 10.7 through 10.11.6 MariaDB Server versions 11.0 through 11.0.4 MariaDB Server...

CBL Mariner 2.0 Security Update: mariadb (CVE-2022-31621)

The version of mariadb installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-31621 advisory. - MariaDB Server before 10.7 is vulnerable to Denial of Service. In extra/mariabackup/dsxbstream.cc, when an...

CBL Mariner 2.0 Security Update: mariadb (CVE-2022-27444)

The version of mariadb installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-27444 advisory. - MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component...

CBL Mariner 2.0 Security Update: mariadb (CVE-2022-27452)

The version of mariadb installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-27452 advisory. - MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component...

CBL Mariner 2.0 Security Update: mariadb (CVE-2022-27382)

The version of mariadb installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-27382 advisory. - MariaDB Server v10.7 and below was discovered to contain a segmentation fault via the component...

SUSE CVE-2016-3477

Unspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and 5.7.12 and earlier and MariaDB before 5.5.50, 10.0.x before 10.0.26, and 10.1.x before 10.1.15 allows local users to affect confidentiality, integrity, and availability via vectors related to Server: Parser...

SUSE CVE-2022-27377

MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component Itemfuncin::cleanup, which is exploited via specially crafted SQL statements...

SUSE CVE-2022-27378

An issue in the component Createtmptable::finalize of MariaDB Server v10.7 and below was discovered to allow attackers to cause a Denial of Service DoS via specially crafted SQL statements...

SUSE CVE-2022-27376

MariaDB Server v10.6.5 and below was discovered to contain an use-after-free in the component Itemargs::walkarg, which is exploited via specially crafted SQL statements...