CVE-2022-38791

In MariaDB before 10.9.2, compresswrite in extra/mariabackup/dscompress.cc does not release datamutex upon a stream write failure, which allows local users to trigger a deadlock...

MariaDB 安全漏洞

MariaDB is a free and open source database management system from the Mariadb Foundation and a forked version of MySQL with the Maria storage engine. A security vulnerability exists in MariaDB versions prior to 10.9.2, which stems from compresswrite in extra/mariabackup/dscompress.cc not releasin...

CVE-2022-38791

CVE-2022-38791 affects MariaDB pre-10.9.2. The issue is in compress_write (extra/mariabackup/ds_compress.cc) where data_mutex is not released on a stream write failure, enabling a local user to trigger a deadlock. Public advisories (Astra Linux, AlmaLinux, Fedora references) confirm the same desc...

Ubuntu: Security Advisory (USN-3957-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FreeBSD : MariaDB -- Multiple vulnerabilities (36d10af7-248d-11ed-856e-d4c9ef517024)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 36d10af7-248d-11ed-856e-d4c9ef517024 advisory. - zlib before 1.2.12 allows memory corruption when deflating i.e., when compressing if the inp...

MariaDB v10.7 was discovered to contain an use-after-poison in in __interceptor_memset at /libsanitizer/sanitizer_common/sanitizer_common_interceptors.inc.

...

MariaDB v10.4 to v10.7 was discovered to contain an use-after-poison in prepare_inplace_add_virtual at /storage/innobase/handler/handler0alter.cc.

...

MariaDB -- Multiple vulnerabilities

The MariaDB project reports: Multiple vulnerabilities, mostly segfaults, in the server component...

Huawei EulerOS: Security Advisory for mariadb (EulerOS-SA-2022-2227)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for mariadb (EulerOS-SA-2022-2275)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP8 : mariadb (EulerOS-SA-2022-2227)

According to the versions of the mariadb packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - savewindowfunctionvalues in MariaDB before 10.6.3 allows an application crash because of incorrect handling of withwindowfunc=true for a...

EulerOS 2.0 SP5 : mariadb (EulerOS-SA-2022-2275)

According to the versions of the mariadb packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - MariaDB Server v10.6 and below was discovered to contain an use-after-free in the component mystrcasecmp8bit, which is exploited via specially...

Slackware: Security Advisory (SSA:2022-228-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[slackware-security] mariadb

New mariadb packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/mariadb-10.5.17-i586-1slack15.0.txz: Upgraded. This update fixes bugs and several security issues. For more information, see:...

Security Bulletin: CVE-2022-27452

Summary MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/itemcmpfunc.cc, which is backported and fixed in 10.5.16 Vulnerability Details CVEID:CVE-2022-27452 DESCRIPTION: MariaDB Server is vulnerable to a denial of service, caused by a flaw in the...

Slackware Linux 15.0 / current mariadb Multiple Vulnerabilities (SSA:2022-228-01)

The version of mariadb installed on the remote host is prior to 10.5.17 / 10.6.9. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2022-228-01 advisory. - zlib before 1.2.12 allows memory corruption when deflating i.e., when compressing if the input has many distant...

MariaDB 10.7.0 < 10.7.5 Multiple Vulnerabilities

The version of MariaDB installed on the remote host is prior to 10.7.5. It is, therefore, affected by multiple vulnerabilities as referenced in the 10.7.5 advisory. - A vulnerability was found in MariaDB. An OpenVAS port scan on ports 3306 and 4567 allows a malicious remote client to cause a deni...

Readymade Job Portal Script SQL Injection

┌┌───────────────────────────────────────────────────────────────────────────────────────┐ ││ C r a C k E r ┌┘ ┌┘ T H E C R A C K O F E T E R N A L M I G H T ││ └───────────────────────────────────────────────────────────────────────────────────────┘┘ ┌──── From The Ashes and Dust Rises An...

galera, mariadb, and mysql-selinux security, bug fix, and enhancement update

galera 26.4.11-1.0.1 - Requirement to delete garbd-wrapper script and lp1184034 test case without using patches. Patches from previous release have been deleted - Drop nmap-ncat requirement. Orabug: 34116228 - Added galera-skip-lp1184034-testcase.patch - Added...

MariaDB 10.6.0 < 10.6.9 Multiple Vulnerabilities

The version of MariaDB installed on the remote host is prior to 10.6.9. It is, therefore, affected by multiple vulnerabilities as referenced in the 10.6.9 advisory. - A vulnerability was found in MariaDB. An OpenVAS port scan on ports 3306 and 4567 allows a malicious remote client to cause a deni...