mariadb: segmentation fault via the component sub_select

MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component subselect...

mariadb: node crashes with Transport endpoint is not connected mysqld got signal 6

A vulnerability was found in MariaDB. An OpenVAS port scan on ports 3306 and 4567 allows a malicious remote client to cause a denial of service...

Moderate: Red Hat Security Advisory: mariadb:10.3 security, bug fix, and enhancement update

An update for the mariadb:10.3 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

mariadb: compress_write() fails to release mutex on failure

In MariaDB before 10.9.2, compresswrite in extra/mariabackup/dscompress.cc does not release datamutex upon a stream write failure, which allows local users to trigger a deadlock...

mariadb: server crash in JOIN_CACHE::free or in copy_fields

MariaDB v10.7 was discovered to contain an use-after-poison in in interceptormemset at /libsanitizer/sanitizercommon/sanitizercommoninterceptors.inc...

mariadb: NULL pointer dereference in spider_db_mbase::print_warnings()

MariaDB Server before 10.3.34 thru 10.9.3 is vulnerable to Denial of Service. It is possible for function spiderdbmbase::printwarnings to dereference a null pointer...

ALSA-2023:5259 Moderate: mariadb:10.3 security, bug fix, and enhancement update

MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL. The following packages have been upgraded to a later upstream version: mariadb 10.3. BZ2223572, BZ2223574, BZ2223962, BZ2223965 Security Fixes: mariadb: segmentation fault via the component subselect...

Moderate: mariadb:10.3 security, bug fix, and enhancement update

MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL. The following packages have been upgraded to a later upstream version: mariadb 10.3. BZ2223572, BZ2223574, BZ2223962, BZ2223965 Security Fixes: mariadb: segmentation fault via the component subselect...

RHEL 8 : mariadb:10.3 (RHSA-2023:5259)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:5259 advisory. MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL. The following packages have been upgraded ...

my_wildcmp_8bit_impl DoS

The vulnerability of the mywildcmp8bitimpl component of the MariaDB database management system is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause service interruptions...

MariaDB ds_compress.cc DoS

The vulnerability of the dscompress.cc component in the MariaDB database management system arises due to blocking resource errors. Exploiting this vulnerability can allow an attacker to cause service failures...

MariaDB field_conv.cc DoS

The vulnerability of the fieldconv.cc component in the MariaDB database management system is related to errors that occur during the code validation process. Exploiting this vulnerability can allow an attacker to cause service interruptions...

MariaDB Condition Transfer DoS

The vulnerability of the MariaDB database management system is related to the incorrect processing of condition transfers from HAVING to WHEREE. Exploiting this vulnerability can allow attackers to cause service failures...

MariaDB Item_field::used_tables/update_depend_map_for_order DoS

The vulnerability of the Itemfield::usedtables/updatedependmapfororder component of the MariaDB database management system is related to the use of the assert function or similar operators. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

MariaDB my_mb_wc_latin1 DoS

The vulnerability of the mymbwclatin1 component of the MariaDB database management system is related to the use of memory after it is freed. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

MariaDB item_cmpfunc.h Segmentation Fault

The vulnerability of the itemcmpfunc.h component in the MariaDB database management system is related to the insufficient use of the assert function. Exploiting this vulnerability could allow an attacker to cause service failures...

MariaDB item_subselect.cc DoS

The vulnerability of the itemsubselect.cc component of the MariaDB database management system is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Oracle Linux 8 : mariadb:10.3 (ELSA-2019-3708)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-3708 advisory. - Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Security: Privileges. Supported versions that are affected are 5.6....

Frappe Technologies Frappe SQL Injection Vulnerability

Frappe Technologies Frappe is a Python, Mariadb-based web development framework with integrated front-end pages from Frappe Technologies, India. Frappe suffers from a SQL injection vulnerability. An attacker can exploit this vulnerability to access sensitive information...

PT-2025-10401 · Mariadb +1 · Mariadb Server +1

Name of the Vulnerable Software and Affected Versions: MariaDB Server versions 10.4 through 10.4.32 MariaDB Server versions 10.5 through 10.5.23 MariaDB Server versions 10.6 through 10.6.16 MariaDB Server versions 10.7 through 10.11.6 MariaDB Server versions 11.0 through 11.0.4 MariaDB Server...