SUSE-SU-2020:0523-1 Security update for mariadb-100

This update for mariadb-100 fixes the following issues: MariaDB was updated to version 10.0.40-3 bsc1162388. Security issue fixed: - CVE-2020-2574: Fixed a difficult to exploit vulnerability that allowed an attacker to crash the client bsc1162388...

SUSE SLES12 Security Update : mariadb (SUSE-SU-2020:0505-1)

This update for mariadb fixes the following issues : MariaDB was updated to version 10.2.31 GA bsc1162388. Security issues fixed : CVE-2020-2574: Fixed a difficult to exploit vulnerability that allowed an attacker to crash the client bsc1162388. CVE-2019-18901: Fixed an unsafe path handling...

SUSE-SU-2020:0505-1 Security update for mariadb

This update for mariadb fixes the following issues: MariaDB was updated to version 10.2.31 GA bsc1162388. Security issues fixed: - CVE-2020-2574: Fixed a difficult to exploit vulnerability that allowed an attacker to crash the client bsc1162388. - CVE-2019-18901: Fixed an unsafe path handling...

SUSE SLED15 / SLES15 Security Update : mariadb (SUSE-SU-2020:0496-1)

This update for mariadb fixes the following issues : MariaDB was updated to version 10.2.31 GA bsc1162388. Security issues fixed : CVE-2020-2574: Fixed a difficult to exploit vulnerability that allowed an attacker to crash the client bsc1162388. CVE-2019-18901: Fixed an unsafe path handling...

SUSE-SU-2020:0496-1 Security update for mariadb

This update for mariadb fixes the following issues: MariaDB was updated to version 10.2.31 GA bsc1162388. Security issues fixed: - CVE-2020-2574: Fixed a difficult to exploit vulnerability that allowed an attacker to crash the client bsc1162388. - CVE-2019-18901: Fixed an unsafe path handling...

The vulnerability of the EventJobData::execute function in the MariaDB database management system allows a perpetrator to gain unauthorized access to confidential data, cause service failures, and compromise data integrity.

The vulnerability of the Eventjobdata::execute function in the MariaDB database management system’s eventdataobjects.cc file is related to a lack of access control mechanisms. Exploiting this vulnerability could allow an attacker to gain unauthorized access to confidential data, cause service...

Security fix for the ALT Linux 9 package mariadb version 10.4.12-alt1

10.4.12-alt1 built Feb. 21, 2020 Alexey Shabalin in task 246538 Feb. 9, 2020 Alexey Shabalin - 10.4.12 - Fixes for the following security vulnerabilities: + CVE-2020-2574 + CVE-2020-2574...

Debian DLA-2103-1 : debian-security-support update: libqb and mysql-5.5 end

debian-security-support, the Debian security support coverage checker, has been updated in jessie-security. This marks the end of life of the libqb package in jessie. A recently reported vulnerability against libqb which allows users to overwrite arbitrary files via a symlink attack cannot be...

CVE-2020-7221

A privilege escalation vulnerability was found in MariaDB, in the way it handled a setuid program during the installation process. A local MySQL user could abuse this flaw to escalate their privileges on the system, by gaining root privileges once the bash script mysqlinstalldb.sh is executed...

MariaDB 10.2.0 < 10.2.31

The version of MariaDB installed on the remote host is prior to 10.2.31. It is, therefore, affected by a vulnerability as referenced in the 10.2.31 advisory. - Vulnerability in the MySQL Client product of Oracle MySQL component: C API. Supported versions that are affected are 5.6.46 and prior,...

MariaDB 10.1.0 < 10.1.44

The version of MariaDB installed on the remote host is prior to 10.1.44. It is, therefore, affected by a vulnerability as referenced in the 10.1.44 advisory. - Vulnerability in the MySQL Client product of Oracle MySQL component: C API. Supported versions that are affected are 5.6.46 and prior,...

MariaDB 10.4.0 < 10.4.12 Multiple Vulnerabilities

The version of MariaDB installed on the remote host is prior to 10.4.12. It is, therefore, affected by multiple vulnerabilities as referenced in the 10.4.12 advisory. - mysqlinstalldb in MariaDB 10.4.7 through 10.4.11 allows privilege escalation from the mysql user account to root because chown a...

MariaDB 5.5.0 < 5.5.67

The version of MariaDB installed on the remote host is prior to 5.5.67. It is, therefore, affected by a vulnerability as referenced in the 5.5.67 advisory. - Vulnerability in the MySQL Client product of Oracle MySQL component: C API. Supported versions that are affected are 5.6.46 and prior, 5.7....

MariaDB 10.3.0 < 10.3.22

The version of MariaDB installed on the remote host is prior to 10.3.22. It is, therefore, affected by a vulnerability as referenced in the 10.3.22 advisory. - Vulnerability in the MySQL Client product of Oracle MySQL component: C API. Supported versions that are affected are 5.6.46 and prior,...

Ubuntu: Security Advisory (USN-4250-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

mariadb for openSUSE mysql-systemd-helper denial of service vulnerability

MariaDB database management system is a branch of MySQL, mainly maintained by the open source community under the GPL license MariaDB is intended to be fully compatible with MySQL, including the API and command line, making it an easy replacement for MySQL. A denial of service vulnerability exist...

Ubuntu 18.04 LTS : MariaDB vulnerability (USN-4250-2)

The remote Ubuntu 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4250-2 advisory. It was discovered that an unspecified vulnerability existed in the C API component of MariaDB. An attacker could use this to cause a denial of service for MariaDB...

USN-4250-2: MariaDB vulnerability

It was discovered that an unspecified vulnerability existed in the C API component of MariaDB. An attacker could use this to cause a denial of service for MariaDB clients. MariaDB has been updated to 10.3.22 in Ubuntu 19.10 and 10.1.44 in Ubuntu 18.04 LTS. In addition to security fixes, the updat...

USN-4250-2 mariadb-10.1, mariadb-10.3 vulnerability

It was discovered that an unspecified vulnerability existed in the C API component of MariaDB. An attacker could use this to cause a denial of service for MariaDB clients. MariaDB has been updated to 10.3.22 in Ubuntu 19.10 and 10.1.44 in Ubuntu 18.04 LTS. In addition to security fixes, the updat...

Online Job Portal 1.0 - (user_email) SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Online Job Portal 1.0 - 'useremail' SQL Injection Exploit Author: Ihsan Sencan Vendor Homepage: https://www.sourcecodester.com/php/13850/online-job-portal-phppdo.html Software Link:...