CVE-2022-38791

In MariaDB before 10.9.2, compresswrite in extra/mariabackup/dscompress.cc does not release datamutex upon a stream write failure, which allows local users to trigger a deadlock...

SUSE SLED15: libmariadbd-devel / libmariadbd19 / mariadb / mariadb-bench / etc (SUSE-SU-2022:3391-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:3391-1 advisory. Update to 10.5.17: - CVE-2022-32082: Fixed assertion failure at table-getrefcount == 0 in...

SUSE: Security Advisory (SUSE-SU-2022:3391-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2022-6751 · Mariadb +9 · Mariadb Server +9

Name of the Vulnerable Software and Affected Versions: MariaDB Server versions 10.3.34 through 10.9.3 Description: The issue is related to the function spider db mbase::print warnings in MariaDB, which can dereference a null pointer, leading to a denial of service. This can be exploited by a remo...

openSUSE: Security Advisory for mariadb (SUSE-SU-2022:3391-1)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2022-39219 Bifrost users using basic authntication can bypass write permission limit

Bifrost is a middleware package which can synchronize MySQL/MariaDB binlog data to other types of databases. Versions 1.8.6-release and prior are vulnerable to authentication bypass when using HTTP basic authentication. This may allow group members who only have read permissions to write requests...

CVE-2022-39219 Bifrost users using basic authntication can bypass write permission limit

Bifrost is a middleware package which can synchronize MySQL/MariaDB binlog data to other types of databases. Versions 1.8.6-release and prior are vulnerable to authentication bypass when using HTTP basic authentication. This may allow group members who only have read permissions to write requests...

CVE-2022-39219

Summary: CVE-2022-39219 affects the Bifrost middleware (used to synchronize MySQL/MariaDB binlogs to other databases). Versions 1.8.6-release and earlier are vulnerable to an authentication bypass when HTTP basic authentication is used, potentially allowing a user with read permissions to perform...

SUSE-SU-2022:3391-1 Security update for mariadb

This update for mariadb fixes the following issues: Update to 10.5.17: - CVE-2022-32082: Fixed assertion failure at table-getrefcount == 0 in dict0dict.cc bsc1201162. - CVE-2022-32089: Fixed segmentation fault via the component stselectlexunit::excludelevel bsc1201169. - CVE-2022-32081: Fixed...

Debian: Security Advisory (DLA-3114-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 3114-1] mariadb-10.3 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3114-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort September 16, 2022 https://wiki.debian.org/LTS -...

The vulnerability of the `find_field_in_tables` and `find_order_in_list` components of the MariaDB database, which allows a hacker to cause service failures.

The vulnerability of the findfieldintables and findorderinlist components of the MariaDB database system is related to errors during resource release. Exploiting this vulnerability allows an attacker to cause service failures...

The vulnerability of the set_var.cc component of the MariaDB database, which allows a hacker to cause service failures.

The vulnerability of the setvar.cc component of the MariaDB database system is related to errors during resource release. Exploiting this vulnerability allows an attacker to cause service failures...

DLA-3114-1 mariadb-10.3 - security update

Bulletin has no description...

Debian dla-3114 : libmariadb-dev - security update

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3114 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3114-2 [email protected] https://www.debian.org/lts/security/...

The vulnerability of the MariaDB database, related to pointer assignment errors, allows attackers to cause service failures.

The vulnerability of the MariaDB database lies in pointer assignment errors. Exploiting this vulnerability allows an attacker to cause service failures...

RHEL 7 : rh-mariadb103-mariadb and rh-mariadb103-galera (RHSA-2021:2040)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:2040 advisory. MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL. The following packages have been upgraded to a late...

mariadb:10.3 security and bug fix update

galera 25.3.35-1 - Rebase to 25.3.35 mariadb 3:10.3.35-1 - Rebase to 10.3.35 3:10.3.34-1 - Rebase to 10.3.34...

Oracle Linux 8 : mariadb:10.3 (ELSA-2022-6443)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-6443 advisory. galera 25.3.35-1 - Rebase to 25.3.35 mariadb 3:10.3.35-1 - Rebase to 10.3.35 3:10.3.34-1 - Rebase to 10.3.34 Tenable has extracted the preceding...

The vulnerability of the sql_parse.cc component of the MariaDB database, which allows attackers to trigger a service failure.

The vulnerability of the sqlparse.cc component in the MariaDB database system is related to errors during resource release. Exploiting this vulnerability allows an attacker to cause service failures...