MariaDB Server before 10.7 is vulnerable to Denial of Service. While executing the plugin/server_audit/server_audit.c method log_statement_ex the held lock lock_bigbuffer is not released correctly which allows local users to trigger a denial of service due to the deadlock.

...

MariaDB Server before 10.7 is vulnerable to Denial of Service. In extra/mariabackup/ds_compress.cc when an error occurs (i.e. going to the err label) while executing the method create_worker_threads the held lock thd->ctrl_mutex is not released correctly which allows local users to trigger a denial of service due to the deadlock. Note: The vendor argues this is just an improper locking bug and not a vulnerability with adverse effects.

...

Security Bulletin: PowerVC installation on RHEL is vulnerable to MariaDB with CVE-2021-46669, CVE-2022-24048, MariaDB - 219814, MariaDB - 219815, CVE-2022-24050, CVE-2022-24052

Summary Summary guidance: MariaDB through 10.5.9 allows attackers to trigger a convertconsttoint use-after-free when the BIGINT data type is used and it is vulnerable to a heap-based buffer overflow, caused by improper bounds checking by the processing of SQL queries. The specific flaw exists...

Denial Of Service (DoS)

mariadb is vulnerable to denial of service. The vulnerability exists due to an issue in the component Argcomparator::comparerealfixed, allowing an attacker to crash the system via specially crafted SQL statements...

Denial Of Service (DoS)

mariadb is vulnerable to denial of service. The vulnerability exists in Createtmptable::finalize which allows an attacker to crash the application via specially malicious SQL statements...

Use-After-Free

mariadb is vulnerable to use-after-free. The vulnerability exists in the component Itemfuncin::cleanup which allows an attacker to exploit this via specially crafted SQL statements causing a crash of the system...

Use After Free

MariaDB is vulnerable to Use After Free. The vulnerability exists due to a memory corruption via the component Itemargs::walkarg, allowing an attacker to exploit the vulnerability via specially crafted SQL statements...

Denial Of Service (DoS)

mariadb is vulnerable to denial of service. An attacker can crash the application through the subselect::initexprcachetracker of the library by providing a specially crafted SQL statement...

Use-After-Free

mariadb is vulnerable to use-after-free. The vulnerability exists in the component mystrcasecmp8bit which allows an attacker to cause a crash via specially crafted SQL statements...

Denial Of Service (DoS)

MariaDB is vulnerable to denial of service. The vulnerability exists due to a segmentation fault via the component Itemfield::usedtables/updatedependmapfororder...

Denial Of Service (DoS)

mariadb is vulnerable to denial of service. The vulnerability exists in the component 1Field::setdefault1 which allows an attacker to cause an application crash via specially crafted SQL statements...

Denial Of Service (DoS)

mariadb is vulnerable to denial of service. An issue in the component mydecimal::operator allows remote attackers to cause a denial of service via specially crafted SQL statements...

Buffer Overflow

mariadb is vulnerable to buffer overflow. The vulnerability exists due to decimalbinsize which allows an attacker to cause a crash via specially crafted SQL statements...

Denial Of Service (DoS)

mariadb is vulnerable to denial of service. An attacker can crash the application through the segmentation fault in the sqlclass.cc...

MariaDB Server Denial of Service Vulnerability (CNVD-2022-65344)

MariaDB is the database management system of the Mariadb Foundation and a version of the MySQL branch that uses the Maria storage engine. a denial of service vulnerability exists in versions of MariaDB Server prior to 10.7, which originates in extra/mariabackup/dscompress.cc, and can be exploited...

EulerOS 2.0 SP3 : mariadb (EulerOS-SA-2022-1746)

According to the versions of the mariadb packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - MariaDB through 10.5.9 allows an application crash in findfieldintables and findorderinlist via an unused common table expression CTE...

MariaDB Server Denial of Service Vulnerability (CNVD-2022-65345)

MariaDB is a database management system from the Mariadb Foundation and a version of the MySQL branch that uses the Maria storage engine. A denial of service vulnerability exists in versions of MariaDB Server prior to 10.7, which stems from the execution of the logstatementex method, the...

MariaDB Server Denial of Service Vulnerability

MariaDB is a database management system from the Mariadb Foundation and a branch version of MySQL that uses the Maria storage engine. a denial of service vulnerability exists in versions of MariaDB Server prior to 10.7, which originates in extra/mariabackup/dscompress.cc, and can be exploited to...

MariaDB Server Denial of Service Vulnerability (CNVD-2022-65343)

MariaDB is a database management system from the Mariadb Foundation and a branch version of MySQL that uses the Maria storage engine. a denial of service vulnerability exists in versions of MariaDB Server prior to 10.7, which originates in extra/mariabackup/dscompress.cc, when executing the...

ALPINE-CVE-2022-31624

MariaDB Server before 10.7 is vulnerable to Denial of Service. While executing the plugin/serveraudit/serveraudit.c method logstatementex, the held lock lockbigbuffer is not released correctly, which allows local users to trigger a denial of service due to the deadlock...