ownCloud: Cross-Site Request Forgery

A cross-site request forgery vulnerability was found in an application. Requests were not validating cross-site request forgery tokens, allowing an unauthorized user to perform administration functions by inserting valid session cookies into arbitrary requests. This could have enabled an attacker...

Fedora: Security Advisory for mariadb (FEDORA-2023-b4ff407364)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 37 Update: mariadb-10.5.20-1.fc37

MariaDB is a community developed fork from MySQL - a multi-user, multi-thread ed SQL database server. It is a client/server implementation consisting of a server daemon mariadbd and many different client programs and libraries. The base package contains the standard MariaDB/MySQL client programs...

Fedora 37 : mariadb (2023-b4ff407364)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-b4ff407364 advisory. MariaDB 10.5.20 Release notes: https://mariadb.com/kb/en/mariadb-10-5-20-release-notes/ Tenable has extracted the preceding description block directly from t...

EulerOS Virtualization 3.0.6.0 : mariadb (EulerOS-SA-2023-2226)

According to the versions of the mariadb packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer...

Fedora 38 : mariadb (2023-381f23a0ae)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-381f23a0ae advisory. MariaDB 10.5.20 Release notes: https://mariadb.com/kb/en/mariadb-10-5-20-release-notes/ Tenable has extracted the preceding description block directly from t...

Huawei EulerOS: Security Advisory for mariadb (EulerOS-SA-2023-2226)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLES15: libmariadbd-devel / libmariadbd19 / mariadb / mariadb-client / etc (SUSE-SU-2023:2478-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2023:2478-1 advisory. Updated to version 10.5.20: - CVE-2022-47015: Fixed a denial of service that could be triggered by a crafted SQL query bsc1207404. Tenable has extracte...

SUSE SLED15: libmariadbd-devel / libmariadbd19 / mariadb / mariadb-bench / etc (SUSE-SU-2023:2479-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:2479-1 advisory. Updated to version 10.6.13: - CVE-2022-47015: Fixed a denial of service that could be triggered by a...

Fedora: Security Advisory for mariadb (FEDORA-2023-381f23a0ae)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 38 Update: mariadb-10.5.20-1.fc38

MariaDB is a community developed fork from MySQL - a multi-user, multi-thread ed SQL database server. It is a client/server implementation consisting of a server daemon mariadbd and many different client programs and libraries. The base package contains the standard MariaDB/MySQL client programs...

SUSE-SU-2023:2479-1 Security update for mariadb

This update for mariadb fixes the following issues: Updated to version 10.6.13: - CVE-2022-47015: Fixed a denial of service that could be triggered by a crafted SQL query bsc1207404...

SUSE-SU-2023:2478-1 Security update for mariadb

This update for mariadb fixes the following issues: Updated to version 10.5.20: - CVE-2022-47015: Fixed a denial of service that could be triggered by a crafted SQL query bsc1207404...

Debian: Security Advisory (DLA-3444-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian dla-3444 : libmariadb-dev - security update

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3444 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3444-1 [email protected] https://www.debian.org/lts/security/...

Amazon Linux 2 : mariadb (ALAS-2023-2057)

The version of mariadb installed on the remote host is prior to 5.5.68-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2023-2057 advisory. getsortbytable in MariaDB before 10.6.2 allows an application crash via certain subquery uses of ORDER BY. CVE-2021-46657...

[SECURITY] [DLA 3444-1] mariadb-10.3 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3444-1 [email protected] https://www.debian.org/lts/security/ Otto Kekäläinen June 03, 2023 https://wiki.debian.org/LTS -...

[SECURITY] [DLA 3444-1] mariadb-10.3 security update

From: Otto Kekäläinen [email protected] To: [email protected] Subject: SECURITY DLA 3444-1 mariadb-10.3 security update - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3444-1 [email protected]...

DLA-3444-1 mariadb-10.3 - security update

Bulletin has no description...

Medium: mariadb

Issue Overview: getsortbytable in MariaDB before 10.6.2 allows an application crash via certain subquery uses of ORDER BY. CVE-2021-46657 MariaDB before 10.7.2 allows an application crash because it does not recognize that SELECTLEX::nestlevel is local to each VIEW. CVE-2021-46659 MariaDB through...