PT-2022-1638 · Mariadb +10 · Mariadb +11

Name of the Vulnerable Software and Affected Versions: MariaDB affected versions not specified Description: This issue allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this issue. The specific flaw exists within the processi...

Ubuntu 20.04 LTS : MariaDB vulnerability (USN-5170-1)

The remote Ubuntu 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5170-1 advisory. A security issue was discovered in MariaDB and this update includes new upstream MariaDB versions to fix the issue. MariaDB has been updated to 10.3.32 in Ubuntu...

SUSE-SU-2021:3836-1 Security update for mariadb

This update for mariadb fixes the following issues: - Update to 10.4.22: - CVE-2021-35604: Fixed InnoDB vulnerability that allowed an high privileged attacker with network access via multiple protocols to compromise MySQL bsc1192497. - Add missing dependency to liblz4 to enable lz4 compression fo...

Denial Of Service (DoS)

mariadb is vulnerable to denial of service. The vulnerability exists due to lack of sanitization allowing an attacker to compromise various network protocols...

PT-2021-7347 · Mariadb +6 · Mariadb +7

Name of the Vulnerable Software and Affected Versions: MariaDB versions prior to 10.5.9 Description: The issue is related to errors in resource release in the set var.cc component of the MariaDB database management system. Exploitation of this issue can lead to a denial of service. It is caused b...

PT-2021-7326 · Mariadb +6 · Mariadb +7

Name of the Vulnerable Software and Affected Versions: MariaDB versions prior to 10.6.5 Description: The issue is related to an integer overflow in the sql lex.cc component of MariaDB, which can lead to an application crash. This can be exploited by an attacker to cause a denial of service...

PT-2021-7209 · Mariadb +5 · Mariadb Server +5

Name of the Vulnerable Software and Affected Versions: MariaDB Server versions prior to 10.7 Description: The issue is related to a denial of service vulnerability in the xbstream open method, located in extra/mariabackup/ds xbstream.cc. When an error occurs, specifically when stream ctxt-dest fi...

PT-2022-3331 · Mariadb +7 · Mariadb +8

Name of the Vulnerable Software and Affected Versions: MariaDB versions 10.5 through 10.7 Description: The issue is related to a segmentation fault in the st select lex unit::exclude level component of the MariaDB database management system. This can potentially allow a remote attacker to impact...

PT-2021-7497 · Mariadb +10 · Mariadb Server +10

Name of the Vulnerable Software and Affected Versions: MariaDB Server versions 10.7 and below Description: An issue in the component Create tmp table::finalize of MariaDB Server was discovered to allow attackers to cause a Denial of Service DoS via specially crafted SQL statements. The...

PT-2022-4668 · Mariadb +7 · Mariadb +8

Name of the Vulnerable Software and Affected Versions: MariaDB versions 10.5 through 10.7 Description: The issue is related to an assertion failure at table-get ref count in the dict0dict.cc component of the MariaDB database management system. This failure can be triggered by a remote attacker,...

PT-2022-3327 · Mariadb +7 · Mariadb +8

Name of the Vulnerable Software and Affected Versions: MariaDB versions 10.4 through 10.7 Description: The issue is related to a buffer overflow in the prepare inplace add virtual function of the MariaDB database management system. This could allow a remote attacker to impact the confidentiality,...

PT-2022-3334 · Mariadb +9 · Mariadb +10

Name of the Vulnerable Software and Affected Versions: MariaDB version 10.7 Description: The issue is related to an out-of-bounds operation in the interceptor memset function, located at /libsanitizer/sanitizer common/sanitizer common interceptors.inc, which can be exploited by a remote attacker ...

PT-2021-24338 · Mariadb +7 · Mariadb +8

Name of the Vulnerable Software and Affected Versions: MariaDB versions prior to 10.6.3 Description: The issue arises from the incorrect handling of with window func=true for a subquery in the save window function values function, leading to an application crash. Recommendations: For MariaDB...

The vulnerability of the wsrep_notify_cmd modification in the MariaDB database, which stems from the lack of measures to sanitize input data, allows attackers to access confidential information or cause service failures.

The vulnerability of the wsrepnotifyCmd modification in the MariaDB database is related to the lack of measures for cleaning input data. Exploiting this vulnerability can allow a malicious actor to gain access to confidential information or cause service failures...

PT-2021-7932 · Mariadb +6 · Mariadb +7

Name of the Vulnerable Software and Affected Versions: MariaDB versions prior to 10.6.2 Description: The issue is related to the mishandling of a pushdown from a HAVING clause to a WHERE clause, which can cause an application crash. This can be exploited by an attacker to disrupt service...

Denial Of Service (DoS)

mariadb is vulnerable to denial of service. An easily exploitable vulnerability allows a high privileged attacker with network access to cause a hang or frequently repeatable crash...

PT-2022-4772 · Mariadb +9 · Mariadb +10

Name of the Vulnerable Software and Affected Versions: MariaDB versions 10.5.9 and earlier Description: The issue is related to an uncontrolled resource consumption in MariaDB. This can be exploited to cause a denial of service. The problem arises from certain long SELECT DISTINCT statements that...

PT-2022-4796 · Mariadb +9 · Mariadb +10

Name of the Vulnerable Software and Affected Versions: MariaDB versions 10.5.9 and earlier Description: The issue is related to an application crash in the find field in tables and find order in list components of MariaDB, caused by an unused common table expression CTE. This can lead to a denial...

mariadb: writable system variables allows a database user with SUPER privilege to execute arbitrary code as the system mysql user

A vulnerability was found in mariadb and in the mysql wsrep patch that allows remote code execution. A user with SUPER privileges could execute arbitrary shell commands in the context of the mariadb server process...

PT-2022-1774 · Mariadb +10 · Mariadb +11

Name of the Vulnerable Software and Affected Versions: MariaDB versions prior to 10.7.2 Description: The issue is related to incorrect management of internal resources in MariaDB, specifically with the SELECT LEX::nest level component. This can lead to an application crash because MariaDB does no...