6916 matches found
mariadb: server crash at Field::set_default via specially crafted SQL statements
A flaw was found in MariaDB. The component, Field::setdefault, allows attackers to cause a denial of service DoS via specially crafted SQL statements, affecting availability...
mariadb: MariaDB through 10.5.9 allows attackers to trigger a convert_const_to_int use-after-free when the BIGINT data type is used
A use-after-free vulnerability was found in MariaDB. This flaw allows attackers to trigger a convertconsttoint use-after-free when the BIGINT data type is used, resulting in a denial of service...
mariadb: crash when using HAVING with IS NULL predicate in an equality
A flaw was found in the MariaDB Server. It contains a segmentation fault via the component, sql/itemcmpfunc.h, impacting availability...
mariadb: improper locking due to the unreleased lock in extra/mariabackup/ds_compress.cc
MariaDB Server before 10.7 is vulnerable to Denial of Service. In extra/mariabackup/dscompress.cc, when an error occurs i.e., going to the err label while executing the method createworkerthreads, the held lock thd-ctrlmutex is not released correctly, which allows local users to trigger a denial ...
mariadb: assertion failure via component Item_field::used_tables/update_depend_map_for_order
A flaw was found in MariaDB. A segmentation fault via the component, Itemfield::usedtables/updatedependmapfororder, impacts availability...
SUSE: Security Advisory (SUSE-SU-2022:2561-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
RHEL 7 : rh-mariadb105-galera and rh-mariadb105-mariadb (RHSA-2022:5759)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:5759 advisory. MariaDB is a multi-user, multi-threaded SQL database server. For all practical purposes, MariaDB is binary-compatible with MySQL. The...
SUSE SLES15 Security Update : mariadb (SUSE-SU-2022:2561-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:2561-1 advisory. - Added mariadb-galera jscSLE-22245 Update to 10.6.8 bsc1199928: - CVE-2021-46669 bsc1199928 - CVE-2022-27376 bsc1198628 -...
openSUSE: Security Advisory for mariadb (SUSE-SU-2022:2561-1)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
SUSE-SU-2022:2561-1 Security update for mariadb
This update for mariadb fixes the following issues: - Added mariadb-galera jscSLE-22245 Update to 10.6.8 bsc1199928: - CVE-2021-46669 bsc1199928 - CVE-2022-27376 bsc1198628 - CVE-2022-27377 bsc1198603 - CVE-2022-27378 bsc1198604 - CVE-2022-27379 bsc1198605 - CVE-2022-27380 bsc1198606 -...
MariaDB 10.3.0 < 10.3.36 Multiple Vulnerabilities
The version of MariaDB installed on the remote host is prior to 10.3.36. It is, therefore, affected by multiple vulnerabilities as referenced in the 10.3.36 advisory. - A vulnerability was found in MariaDB. An OpenVAS port scan on ports 3306 and 4567 allows a malicious remote client to cause a...
Denial Of Service (DoS)
mariadb is vulnerable to denial of service. The vulnerability exists in dscompress.cc because of the deadlock via the component which allows an attacker to cause an application crash...
Denial Of Service (DoS)
MariaDB Server is vulnerable to denial of service DoS attacks. When an error occurs while executing the method createworkerthreads, the held lock is not released correctly, which allows local users to trigger a denial of service due to the deadlock...
CVE-2022-32091
MariaDB v10.7 was discovered to contain an use-after-poison in in interceptormemset at /libsanitizer/sanitizercommon/sanitizercommoninterceptors.inc...
CVE-2022-32089
MariaDB v10.5 to v10.7 was discovered to contain a segmentation fault via the component stselectlexunit::excludelevel...
CVE-2022-32084
MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component subselect...
CVE-2022-32082
MariaDB v10.5 to v10.7 was discovered to contain an assertion failure at table-getrefcount == 0 in dict0dict.cc...
CVE-2022-32081
MariaDB v10.4 to v10.7 was discovered to contain an use-after-poison in prepareinplaceaddvirtual at /storage/innobase/handler/handler0alter.cc...