MariaDB mysql_install_db Script Elevation of Privilege Vulnerability

The MariaDB database management system is a fork of MySQL, mainly maintained by the open source community under the GPL license. MariaDB is intended to be fully compatible with MySQL, including the API and command line, making it an easy replacement for MySQL. An elevation of privilege...

MariaDB 10.4.7 - 10.4.11 Privilege Escalation Vulnerability (Linux)

MariaDB is prone to a privilege escalation vulnerability. Copyright C 2020 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software...

MariaDB 'CVE-2020-2574' Denial of Service Vulnerability - Windows

MariaDB is prone to a Denial of Service vulnerability. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mariadb:mariadb"; if...

MariaDB 10.4.7 - 10.4.11 Privilege Escalation Vulnerability - Linux

MariaDB is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mariadb:mariadb"; if...

MariaDB 'CVE-2020-2574' Denial of Service Vulnerability - Linux

MariaDB is prone to a Denial of Service vulnerability. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mariadb:mariadb"; if...

CVE-2020-7221

mysqlinstalldb in MariaDB 10.4.7 through 10.4.11 allows privilege escalation from the mysql user account to root because chown and chmod are performed unsafely, as demonstrated by a symlink attack on a chmod 04755 of authpamtooldir/authpamtool. NOTE: this does not affect the Oracle MySQL product,...

CVE-2020-7221

mysqlinstalldb in MariaDB 10.4.7 through 10.4.11 allows privilege escalation from the mysql user account to root because chown and chmod are performed unsafely, as demonstrated by a symlink attack on a chmod 04755 of authpamtooldir/authpamtool. NOTE: this does not affect the Oracle MySQL product,...

CVE-2020-7221

mysqlinstalldb in MariaDB 10.4.7 through 10.4.11 allows privilege escalation from the mysql user account to root because chown and chmod are performed unsafely, as demonstrated by a symlink attack on a chmod 04755 of authpamtooldir/authpamtool. NOTE: this does not affect the Oracle MySQL product,...

UBUNTU-CVE-2020-7221

mysqlinstalldb in MariaDB 10.4.7 through 10.4.11 allows privilege escalation from the mysql user account to root because chown and chmod are performed unsafely, as demonstrated by a symlink attack on a chmod 04755 of authpamtooldir/authpamtool. NOTE: this does not affect the Oracle MySQL product,...

Privilege escalation

mysqlinstalldb in MariaDB 10.4.7 through 10.4.11 allows privilege escalation from the mysql user account to root because chown and chmod are performed unsafely, as demonstrated by a symlink attack on a chmod 04755 of authpamtooldir/authpamtool. NOTE: this does not affect the Oracle MySQL product,...

CVE-2020-7221

CVE-2020-7221 affects MariaDB 10.4.7–10.4.11 where a vulnerability in mysql_install_db allows local privilege escalation from the mysql user to root due to unsafe handling of chown/chmod, demonstrated by a symlink attack on a chmod 04755 of auth_pam_tool_dir/auth_pam_tool. The issue does not affe...

CVE-2020-7221

Removed by vendor...

CVE-2020-7221

Disclaimer: This data contains information about vulnerable...

CVE-2020-7221

mysqlinstalldb in MariaDB 10.4.7 through 10.4.11 allows privilege escalation from the mysql user account to root because chown and chmod are performed unsafely, as demonstrated by a symlink attack on a chmod 04755 of authpamtooldir/authpamtool. NOTE: this does not affect the Oracle MySQL product,...

FreeBSD : MariaDB -- Vulnerability in C API (cb0183bb-45f6-11ea-a1c7-b499baebfeaf)

MariaDB reports : Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Client. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database :...

MGASA-2020-0072 Updated mariadb packages fix security vulnerability

Updated MariaDB packages fix security vulnerabilities: Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Client. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequentl...

Updated mariadb packages fix security vulnerability

Updated MariaDB packages fix security vulnerabilities: Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Client. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequentl...

PT-2020-6459 · Mariadb +1 · Mariadb +2

Name of the Vulnerable Software and Affected Versions: MariaDB versions 10.4.7 through 10.4.11 Description: The issue is related to the mysql install db function in MariaDB, which incorrectly defines a link before accessing a file. This can allow an attacker to escalate privileges from the mysql...

MariaDB -- Vulnerability in C API

MariaDB reports: Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Client...

Security fix for the ALT Linux 8 package mariadb version 10.1.43-alt1

10.1.43-alt1 built Jan. 24, 2020 Alexey Shabalin in task 244621 Jan. 21, 2020 Alexey Shabalin - 10.1.43 - Fixes for the following security vulnerabilities: + CVE-2019-2974 + CVE-2019-2805 + CVE-2019-2740 + CVE-2019-2739 + CVE-2019-2737 + CVE-2019-2614 + CVE-2019-2627...