The vulnerability of the CONNECT function implementation in the MariaDB database management system allows a hacker to execute arbitrary code.

The vulnerability of the CONNECT function implementation in the MariaDB database management system is related to the use of uncontrolled format strings. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

MariaDB CONNECT Storage Engine Heap-based Buffer Overflow Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL queries. The issue results from the lack of proper validation of the length of...

MariaDB CONNECT Storage Engine Heap-based Buffer Overflow Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL queries. The issue results from the lack of proper validation of the length of...

MariaDB CONNECT Storage Engine Stack-based Buffer Overflow Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL queries. The issue results from the lack of proper validation of the length of...

MariaDB CONNECT Storage Engine Use-After-Free Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL queries. The issue results from the lack of validating the existence of an object...

MariaDB CONNECT Storage Engine Stack-based Buffer Overflow Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL queries. The issue results from the lack of proper validation of the length of...

MariaDB CONNECT Storage Engine Format String Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL queries. The issue results from the lack of proper validation of a user-supplied...

[slackware-security] mariadb

New mariadb packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/mariadb-10.5.15-i586-1slack15.0.txz: Upgraded. This update fixes potential denial-of-service vulnerabilities. For more information,...

Critical Photon OS Security Update - PHSA-2022-3.0-0361

Updates of 'mariadb', 'linux-aws', 'linux', 'strongswan', 'linux-secure', 'linux-esx', 'linux-rt', 'apache-tomcat', 'go' packages of Photon OS have been released...

MariaDB Multiple Vulnerabilities (Feb 2022) - Windows

MariaDB is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mariadb:mariadb"; if description...

MariaDB DoS Vulnerability (MDEV-25787) - Linux

MariaDB is prone to a denial of service DoS vulnerability. This VT has been deprecated as a duplicate of the following VT: MariaDB DoS Vulnerability MDEV-25787 - Linux OID: 1.3.6.1.4.1.25623.1.0.147579 SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a...

MariaDB DoS Vulnerability (MDEV-25787) - Windows

MariaDB is prone to a denial of service DoS vulnerability. This VT has been deprecated as a duplicate of the following VT: MariaDB DoS Vulnerability MDEV-25787 - Windows OID: 1.3.6.1.4.1.25623.1.0.147580 SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a...

MariaDB Multiple Vulnerabilities (Feb 2022) - Linux

MariaDB is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mariadb:mariadb"; if description...

Slackware Linux 15.0 / current mariadb Multiple Vulnerabilities (SSA:2022-044-01)

The version of mariadb installed on the remote host is prior to 10.5.15 / 10.6.7. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2022-044-01 advisory. - MariaDB through 10.5.9 allows an application crash in findfieldintables and findorderinlist via an unused commo...

MariaDB -- Multiple vulnerabilities

MariaDB reports: MariaDB reports 5 vulnerabilities in supported versions resulting from fuzzing tests...

MariaDB 10.5.0 < 10.5.15 Multiple Vulnerabilities

The version of MariaDB installed on the remote host is prior to 10.5.15. It is, therefore, affected by multiple vulnerabilities as referenced in the 10.5.15 advisory. - MariaDB through 10.5.9 allows an application crash via certain long SELECT DISTINCT statements that improperly interact with...

MariaDB 10.2.0 < 10.2.43 Multiple Vulnerabilities

The version of MariaDB installed on the remote host is prior to 10.2.43. It is, therefore, affected by multiple vulnerabilities as referenced in the 10.2.43 advisory. - MariaDB through 10.5.9 allows an application crash via certain long SELECT DISTINCT statements that improperly interact with...

Critical Photon OS Security Update - PHSA-2022-0439

Updates of 'mariadb', 'strongswan' packages of Photon OS have been released...

MariaDB CONNECT Storage Engine Format String Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL queries. The issue results from the lack of proper validation of a user-supplied...

MariaDB 10.3.0 < 10.3.34 Multiple Vulnerabilities

The version of MariaDB installed on the remote host is prior to 10.3.34. It is, therefore, affected by multiple vulnerabilities as referenced in the 10.3.34 advisory. - MariaDB through 10.5.9 allows an application crash via certain long SELECT DISTINCT statements that improperly interact with...