Fedora 36 : galera / mariadb (2022-cf88f807f9)

The remote Fedora 36 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2022-cf88f807f9 advisory. MariaDB 10.5.18 & Galera 26.4.13 Release notes: https://mariadb.com/kb/en/mdb-10-5-18-rn/ Tenable has extracted the preceding description block...

Fedora 35 : galera / mariadb (2022-333df1c4aa)

The remote Fedora 35 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2022-333df1c4aa advisory. MariaDB 10.5.18 & Galera 26.4.13 Release notes: https://mariadb.com/kb/en/mdb-10-5-18-rn/ Tenable has extracted the preceding description block...

Exploit for Code Injection in Mariadb

CVE-2021-27928 In this repository, you will find a proof of c...

Amazon Linux 2022 : mariadb105 (ALAS2022-2022-245)

The version of mariadb105 installed on the remote host is prior to 10.5.16-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2022-2022-245 advisory. - MariaDB v10.4 to v10.7 was discovered to contain an use-after-poison in prepareinplaceaddvirtual at...

[SECURITY] Fedora 35 Update: mariadb-10.5.18-1.fc35

MariaDB is a community developed fork from MySQL - a multi-user, multi-thread ed SQL database server. It is a client/server implementation consisting of a server daemon mariadbd and many different client programs and libraries. The base package contains the standard MariaDB/MySQL client programs...

[SECURITY] Fedora 37 Update: mariadb-10.5.18-1.fc37

MariaDB is a community developed fork from MySQL - a multi-user, multi-thread ed SQL database server. It is a client/server implementation consisting of a server daemon mariadbd and many different client programs and libraries. The base package contains the standard MariaDB/MySQL client programs...

[SECURITY] Fedora 36 Update: mariadb-10.5.18-1.fc36

MariaDB is a community developed fork from MySQL - a multi-user, multi-thread ed SQL database server. It is a client/server implementation consisting of a server daemon mariadbd and many different client programs and libraries. The base package contains the standard MariaDB/MySQL client programs...

Fedora: Security Advisory for mariadb (FEDORA-2022-333df1c4aa)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for mariadb (FEDORA-2022-e0e9a43546)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for mariadb (FEDORA-2022-cf88f807f9)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Ubuntu: Security Advisory (USN-5739-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-5739-1: MariaDB vulnerabilities

Several security issues were discovered in MariaDB and this update includes new upstream MariaDB versions to fix these issues. MariaDB has been updated to 10.3.37 in Ubuntu 20.04 LTS and to 10.6.11 in Ubuntu 22.04 LTS and Ubuntu 22.10. In addition to security fixes, the updated packages contain b...

USN-5739-1 mariadb-10.3, mariadb-10.6 vulnerabilities

Several security issues were discovered in MariaDB and this update includes new upstream MariaDB versions to fix these issues. MariaDB has been updated to 10.3.37 in Ubuntu 20.04 LTS and to 10.6.11 in Ubuntu 22.04 LTS and Ubuntu 22.10. In addition to security fixes, the updated packages contain b...

Ubuntu 20.04 LTS / 22.04 LTS : MariaDB vulnerabilities (USN-5739-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5739-1 advisory. Several security issues were discovered in MariaDB and this update includes new upstream MariaDB versions to fix these issues. MariaDB has be...

MariaDB my_strcasecmp_8bit Memory Leak DoS

The vulnerability of the mystrcasecmp8bit component of the MariaDB database is related to the use of memory after it is freed. Exploiting this vulnerability allows an attacker to cause a service failure through a specially crafted SQL query...

MariaDB Binary_string free_buffer Heap Buffer Overflow DoS

The vulnerability of the Binarystring::freebuffer function in the /sql/sqlstring.h component of the MariaDB database management system is related to the use of memory after it is freed. Exploiting this vulnerability allows an attacker to cause service interruptions...

MariaDB Create_tmp_table finalize DoS

The vulnerability of the Createtmptable::finalize component in the MariaDB database lies in the lack of protective measures for SQL query structures. Exploiting this vulnerability allows a malicious actor to trigger service failures through a specially crafted SQL query...

MariaDB sql/item_func.cc DoS

The vulnerability of the sql/itemfunc.cc component of the MariaDB database is related to the insufficient use of the assert function. Exploiting this vulnerability allows an attacker to cause service failures...

MariaDB ItemArg DoS

The vulnerability of the ItemArg args component in the MariaDB database lies in the use of memory after it is freed. Exploiting this vulnerability allows an attacker to cause a service failure through a specially crafted SQL query...

MariaDB Arg_comparator::compare_real_fixed DoS

The vulnerability of the Argcomparator::comparerealfixed component in the MariaDB database is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to cause service failures through a specially crafted SQL query...