Improper Validation

mariadb-connector-c is using improper validation of content in a OK packet received from server...

mariadb security and bug fix update

1:5.5.68-1 - Rebase to 5.5.68 This is the last upstream release. This major version reached upstream EOL - Related to: rhbz1834835 1:5.5.67-2 - Resolves: rhbz1689827 1:5.5.67-1 - Rebase to 5.5.67 - Related to: rhbz1834835 - CVEs fixed: rhbz1821939 CVE-2020-2574 1:5.5.66-1 - Rebase to 5.5.66 -...

MariaDB 10.3.0 < 10.3.25

The version of MariaDB installed on the remote host is prior to 10.3.25. It is, therefore, affected by a vulnerability as referenced in the 10.3.25 advisory. - A flaw was found in the mysql-wsrep component of mariadb. Lack of input sanitization in wsrepsstmethod allows for command injection that...

MariaDB 10.2.0 < 10.2.34

The version of MariaDB installed on the remote host is prior to 10.2.34. It is, therefore, affected by a vulnerability as referenced in the 10.2.34 advisory. - A flaw was found in the mysql-wsrep component of mariadb. Lack of input sanitization in wsrepsstmethod allows for command injection that...

MariaDB 10.1.0 < 10.1.47

The version of MariaDB installed on the remote host is prior to 10.1.47. It is, therefore, affected by a vulnerability as referenced in the 10.1.47 advisory. - A flaw was found in the mysql-wsrep component of mariadb. Lack of input sanitization in wsrepsstmethod allows for command injection that...

MariaDB 10.4.0 < 10.4.15

The version of MariaDB installed on the remote host is prior to 10.4.15. It is, therefore, affected by a vulnerability as referenced in the 10.4.15 advisory. - A flaw was found in the mysql-wsrep component of mariadb. Lack of input sanitization in wsrepsstmethod allows for command injection that...

MariaDB 10.5.0 < 10.5.6

The version of MariaDB installed on the remote host is prior to 10.5.6. It is, therefore, affected by a vulnerability as referenced in the 10.5.6 advisory. - A flaw was found in the mysql-wsrep component of mariadb. Lack of input sanitization in wsrepsstmethod allows for command injection that ca...

mariadb-connector-c: Improper validation of content in a OK packet received from server

libmariadb/mariadblib.c in MariaDB Connector/C before 3.1.8 does not properly validate the content of an OK packet received from a server. NOTE: although mariadblib.c was originally based on code shipped for MySQL, this issue does not affect any MySQL components supported by Oracle...

Moderate: Red Hat Security Advisory: rh-mariadb102-mariadb and rh-mariadb102-galera security and bug fix update

An update for rh-mariadb102-mariadb and rh-mariadb102-galera is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

PT-2020-6188 · Mariadb +8 · Mariadb +9

Name of the Vulnerable Software and Affected Versions: mariadb versions prior to 10.1.47 mariadb versions prior to 10.2.34 mariadb versions prior to 10.3.25 mariadb versions prior to 10.4.15 mariadb versions prior to 10.5.6 Description: The issue is related to errors in input data processing duri...

Moderate: Red Hat Security Advisory: mariadb security and bug fix update

An update for mariadb is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

Huawei EulerOS: Security Advisory for mariadb-connector-c (EulerOS-SA-2020-1999)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for mariadb (EulerOS-SA-2020-2008)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RHEL 7 : mariadb (RHSA-2020:4026)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:4026 advisory. MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL. The following packages have been upgraded ...

EulerOS Virtualization for ARM 64 3.0.6.0 : mariadb-connector-c (EulerOS-SA-2020-1999)

According to the version of the mariadb-connector-c packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - libmariadb/mariadblib.c in MariaDB Connector/C before 3.1.8 does not properly validate the content of an OK...

EulerOS Virtualization for ARM 64 3.0.6.0 : mariadb (EulerOS-SA-2020-2008)

According to the version of the mariadb packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - libmariadb/mariadblib.c in MariaDB Connector/C before 3.1.8 does not properly validate the content of an OK packet...

Oracle MySQL and MariaDB 5.5.x before 5.5.29 5.3.x before 5.3.12 and 5.2.x before 5.2.14 does not modify the salt during multiple executions of the change_user command within the same connection which makes it easier for remote authenticated users to conduct brute force password guessing attacks.

...

`mariadb` was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.

...

Exploit for SQL Injection in Librenms

CVE-2020-15873 Proof of Concept of CVE-2020-15873 - Blind SQL...

Security fix for the ALT Linux 8 package mariadb version 10.1.46-alt1

10.1.46-alt1 built Sept. 15, 2020 Alexey Shabalin in task 257671 Sept. 9, 2020 Alexey Shabalin - 10.1.46 - Fixes for the following security vulnerabilities: + CVE-2020-2574 + CVE-2020-2752 + CVE-2020-2812 + CVE-2020-2814...