MySQL 和 MariaDB Geometry 查询拒绝服务漏洞

BUGTRAQ ID: 58511 CVECAN ID: CVE-2013-1861 Oracle MySQL Server是一个小型关系型数据库管理系统。MariaDB 是一个采用Maria存储引擎的MySQL分支版本，是免费开源的数据库服务器。 MySQL和MariaDB在转换原始geometry对象的二进制字符串表达式为文本表达式时，MySQL的空间函数长度检查会产生溢出，造成应用崩溃。 0 MySQL AB MySQL 厂商补丁： MySQL AB -------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.mysql.com/...

SuSE Update for mariadb openSUSE-SU-2013:0011-1 (mariadb)

Check for the Version of mariadb OpenVAS Vulnerability Test $Id: gbsuse201300111.nasl 8526 2018-01-25 06:57:37Z teissa $ SuSE Update for mariadb openSUSE-SU-2013:0011-1 mariadb Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This progr...

openSUSE: Security Advisory for mariadb (openSUSE-SU-2013:0011-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for mariadb (openSUSE-SU-2013:0014-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SuSE Update for mariadb openSUSE-SU-2013:0014-1 (mariadb)

Check for the Version of mariadb OpenVAS Vulnerability Test $Id: gbsuse201300141.nasl 8542 2018-01-26 06:57:28Z teissa $ SuSE Update for mariadb openSUSE-SU-2013:0014-1 mariadb Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This progr...

MySQL MariaDB - Geometry Query Denial of Service

MySQL MariaDB - Geometry Query Denial of Service source: https://www.securityfocus.com/bid/58511/info MySQL and MariaDB are prone to a denial-of-service vulnerability. An attacker can exploit this issue to crash the database, denying access to legitimate users. "select...

MySQL / MariaDB - Geometry Query Denial of Service

source: https://www.securityfocus.com/bid/58511/info MySQL and MariaDB are prone to a denial-of-service vulnerability. An attacker can exploit this issue to crash the database, denying access to legitimate users. "select astext0x0100000000030000000100000000000010;"...

MariaDB 5.1.0 < 5.1.67 Multiple Vulnerabilities

The version of MariaDB installed on the remote host is prior to 5.1.67. It is, therefore, affected by multiple vulnerabilities as referenced in the 5.1.67 advisory. - Unspecified vulnerability in the Server component in Oracle MySQL 5.1.66 and earlier, and 5.5.28 and earlier, allows local users t...

MariaDB 5.5.0 < 5.5.29 Multiple Vulnerabilities

The version of MariaDB installed on the remote host is prior to 5.5.29. It is, therefore, affected by multiple vulnerabilities as referenced in the 5.5.29 advisory. - Unspecified vulnerability in the Server component in Oracle MySQL 5.1.66 and earlier, and 5.5.28 and earlier, allows local users t...

MariaDB 5.3.0 < 5.3.12 Multiple Vulnerabilities

The version of MariaDB installed on the remote host is prior to 5.3.12. It is, therefore, affected by multiple vulnerabilities as referenced in the 5.3.12 advisory. - Unspecified vulnerability in the Server component in Oracle MySQL 5.1.66 and earlier, and 5.5.28 and earlier, allows local users t...

MariaDB 5.2.0 < 5.2.14 Multiple Vulnerabilities

The version of MariaDB installed on the remote host is prior to 5.2.14. It is, therefore, affected by multiple vulnerabilities as referenced in the 5.2.14 advisory. - Unspecified vulnerability in the Server component in Oracle MySQL 5.1.66 and earlier, and 5.5.28 and earlier, allows local users t...

MariaDB Binary Log SQL Injection

According to its self-reported version number, the version of MariaDB running on the remote host has multiple SQL injection vulnerabilities. User-supplied identifiers are not properly quoted before being written into the binary log. An attacker with a valid account and privileges to modify data...

FreeBSD : mysql/mariadb/percona server -- multiple vulnerabilities (8c773d7f-6cbb-11e2-b242-c8600054b392)

ORACLE reports : Multiple SQL injection vulnerabilities in the replication code Stack-based buffer overflow Heap-based buffer overflow %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database :...

MySQL Protocol Remote User Enumeration

The version of MySQL or MariaDB running on the remote host has a user enumeration vulnerability. A remote, unauthenticated attacker could exploit this to learn the names of valid database users. This information could be used to mount further attacks. C Tenable Network Security, Inc...

mariadb to 5.1.66 (important)

MariaDB was updated to 5.1.66: https://kb.askmonty.org/en/mariadb-5166-release-notes/ https://kb.askmonty.org/en/mariadb-5166-changelog/...

CVE-2012-4414

Multiple SQL injection vulnerabilities in the replication code in Oracle MySQL possibly before 5.5.29, and MariaDB 5.1.x through 5.1.62, 5.2.x through 5.2.12, 5.3.x through 5.3.7, and 5.5.x through 5.5.25, allow remote authenticated users to execute arbitrary SQL commands via vectors related to t...

CVE-2012-4414

Multiple SQL injection vulnerabilities in the replication code in Oracle MySQL possibly before 5.5.29, and MariaDB 5.1.x through 5.1.62, 5.2.x through 5.2.12, 5.3.x through 5.3.7, and 5.5.x through 5.5.25, allow remote authenticated users to execute arbitrary SQL commands via vectors related to t...

Sql injection

Multiple SQL injection vulnerabilities in the replication code in Oracle MySQL possibly before 5.5.29, and MariaDB 5.1.x through 5.1.62, 5.2.x through 5.2.12, 5.3.x through 5.3.7, and 5.5.x through 5.5.25, allow remote authenticated users to execute arbitrary SQL commands via vectors related to t...

CVE-2012-4414

Disclaimer: This data contains information about vulnerable...

CVE-2012-4414

Multiple SQL injection vulnerabilities in the replication code in Oracle MySQL possibly before 5.5.29, and MariaDB 5.1.x through 5.1.62, 5.2.x through 5.2.12, 5.3.x through 5.3.7, and 5.5.x through 5.5.25, allow remote authenticated users to execute arbitrary SQL commands via vectors related to t...