MariaDB 安全漏洞

MariaDB is the database management system of the Mariadb Foundation and a version of the MySQL branch that uses the Maria storage engine. a denial of service vulnerability exists in versions of MariaDB Server prior to 10.7, which originates in extra/mariabackup/dscompress.cc, and can be exploited...

CVE-2022-31621

MariaDB Server before 10.7 is vulnerable to Denial of Service. In extra/mariabackup/dsxbstream.cc, when an error occurs streamctxt-destfile == NULL while executing the method xbstreamopen, the held lock is not released correctly, which allows local users to trigger a denial of service due to the...

CVE-2022-31623

CVE-2022-31623 affects MariaDB Server prior to 10.7. In extra/mariabackup/ds_compress.cc, when an error occurs during create_worker_threads, thd->ctrl_mutex is not released, allowing a local DoS via deadlock. The vendor characterizes this as an improper locking bug with no adverse effects. Adv...

CVE-2022-31621

MariaDB Server before 10.7 is vulnerable to Denial of Service. In extra/mariabackup/dsxbstream.cc, when an error occurs streamctxt-destfile == NULL while executing the method xbstreamopen, the held lock is not released correctly, which allows local users to trigger a denial of service due to the...

CVE-2022-31621

MariaDB Server before 10.7 is vulnerable to Denial of Service. In extra/mariabackup/dsxbstream.cc, when an error occurs streamctxt-destfile == NULL while executing the method xbstreamopen, the held lock is not released correctly, which allows local users to trigger a denial of service due to the...

CVE-2022-31621

CVE-2022-31621 affects MariaDB Server before 10.7. The issue is in extra/mariabackup/ds_xbstream.cc: when xbstream_open errors and stream_ctxt->dest_file is NULL, a held lock is not released, enabling a local-denial-of-service via deadlock. The vendor characterizes this as an improper locking ...

CVE-2022-31623

MariaDB Server before 10.7 is vulnerable to Denial of Service. In extra/mariabackup/dscompress.cc, when an error occurs i.e., going to the err label while executing the method createworkerthreads, the held lock thd-ctrlmutex is not released correctly, which allows local users to trigger a denial ...

Denial Of Service (DoS)

mariadb is vulnerable to denial of service. An attacker can crash the application through the multiple protocols...

Security update for cacti, cacti-spine (moderate)

openSUSE Security Update: Security update for cacti, cacti-spine Announcement ID: openSUSE-SU-2022:0145-1 Rating: moderate References: 1192408 1196692 Cross-References: CVE-2022-0730 CVSS scores: CVE-2022-0730 NVD : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: SUSE Linux...

Slackware: Security Advisory (SSA:2022-141-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FreeBSD : MariaDB -- Multiple vulnerabilities (04fecc47-dad2-11ec-8fbd-d4c9ef517024)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 04fecc47-dad2-11ec-8fbd-d4c9ef517024 advisory. The MariaDB project reports: MariaDB fixed 23 vulnerabilities across all supported versions...

[slackware-security] mariadb

New mariadb packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/mariadb-10.5.16-i586-1slack15.0.txz: Upgraded. This update fixes bugs and several security issues. For more information, see:...

Slackware Linux 15.0 / current mariadb Multiple Vulnerabilities (SSA:2022-141-01)

The version of mariadb installed on the remote host is prior to 10.5.16 / 10.6.8. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2022-141-01 advisory. New mariadb packages are available for Slackware 15.0 and -current to fix security issues. Tenable has extracted...

PT-2022-3332 · Mariadb +9 · Mariadb +10

Name of the Vulnerable Software and Affected Versions: MariaDB versions v10.2 through v10.6.1 Description: The issue is related to a buffer overflow in the Item subselect::init expr cache tracker function of the MariaDB database management system. This can be exploited by a remote attacker to...

PT-2022-3339 · Mariadb +4 · Mariadb +5

Name of the Vulnerable Software and Affected Versions: MariaDB versions 10.4 through 10.8 Description: The issue is related to a buffer overflow in the Item field::fix outer field function of the MariaDB database management system. This could allow a remote attacker to impact the confidentiality,...

PT-2022-3316 · Mariadb +9 · Mariadb +10

Name of the Vulnerable Software and Affected Versions: MariaDB versions 10.2 through 10.7 Description: The issue is related to a buffer overflow in the Exec time tracker::get loops/Filesort tracker::report use/filesort function of the MariaDB database management system. This could allow a remote...

MariaDB -- Multiple vulnerabilities

The MariaDB project reports: MariaDB fixed 23 vulnerabilities across all supported versions...

PT-2022-3320 · Mariadb +9 · Mariadb +10

Name of the Vulnerable Software and Affected Versions: MariaDB versions 10.2 through 10.7 Description: The issue is related to a segmentation fault in the Item args::walk args component of the MariaDB database management system. This can potentially allow a remote attacker to impact the...

PT-2022-3328 · Mariadb +9 · Mariadb +10

Name of the Vulnerable Software and Affected Versions: MariaDB versions 10.2 through 10.7 Description: The issue is related to a buffer overflow in the Item func in::cleanup/Item::cleanup processor function of the MariaDB database management system. This could allow a remote attacker to impact th...

Security Bulletin: PowerVC installation on RHEL is vulnerable to MariaDB with CVE-2021-27928

Summary Summary guidance: A remote code execution issue was discovered in MariaDB in the version PowerVC ships. An untrusted search path leads to eval injection, in which a database SUPER user can execute OS commands after modifying wsrepprovider and wsrepnotifycmd. Vulnerability Details...