CVE-2022-24050: Use After Free

MariaDB CONNECT Storage Engine Use-After-Free Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL...

CVE-2022-24048: Stack-based Buffer Overflow

MariaDB CONNECT Storage Engine Stack-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the...

CVE-2022-24051: Use of Externally-Controlled Format String

MariaDB CONNECT Storage Engine Format String Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL...

FreeBSD : MariaDB -- Multiple vulnerabilities (27bf9378-8ffd-11ec-8be6-d4c9ef517024)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 27bf9378-8ffd-11ec-8be6-d4c9ef517024 advisory. - MariaDB through 10.5.9 allows an application crash in findfieldintables and findorderinlist...

MariaDB CONNECT Storage Engine Use-After-Free Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL queries. The issue results from the lack of validating the existence of an object...

MariaDB CONNECT Storage Engine Stack-based Buffer Overflow Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL queries. The issue results from the lack of proper validation of the length of...

MariaDB DoS Vulnerability (MDEV-25787) - Linux

MariaDB is prone to a denial of service DoS vulnerability. This VT has been deprecated as a duplicate of the following VT: MariaDB DoS Vulnerability MDEV-25787 - Linux OID: 1.3.6.1.4.1.25623.1.0.147579 SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a...

MariaDB DoS Vulnerability (MDEV-25787) - Windows

MariaDB is prone to a denial of service DoS vulnerability. This VT has been deprecated as a duplicate of the following VT: MariaDB DoS Vulnerability MDEV-25787 - Windows OID: 1.3.6.1.4.1.25623.1.0.147580 SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a...

MariaDB Denial of Service Vulnerability (CNVD-2022-65010)

MariaDB is a free and open source database management system from the MariaDB Foundation and a forked version of MySQL with the Maria storage engine. MariaDB suffers from a denial-of-service vulnerability that stems from the product allowing self-queries to be nested by nesting them within Update...

MariaDB 资源管理错误漏洞

MariaDB is a free and open source database management system from the MariaDB Mariadb Foundation and a forked version of MySQL with the Maria storage engine. MariaDB suffers from a Resource Management Error vulnerability that originates from a remote attacker being able to bypass implemented...

MariaDB through 10.5.9 allows an application crash via certain long SELECT DISTINCT statements that improperly interact with storage-engine resource limitations for temporary data structures.

...

CVE-2021-46668

MariaDB through 10.5.9 allows an application crash via certain long SELECT DISTINCT statements that improperly interact with storage-engine resource limitations for temporary data structures...

CVE-2021-46668

MariaDB through 10.5.9 allows an application crash via certain long SELECT DISTINCT statements that improperly interact with storage-engine resource limitations for temporary data structures...

ALPINE-CVE-2021-46668

MariaDB through 10.5.9 allows an application crash via certain long SELECT DISTINCT statements that improperly interact with storage-engine resource limitations for temporary data structures...

AZL-8412 CVE-2021-46668 affecting package mariadb for versions less than 10.6.7-1

MariaDB through 10.5.9 allows an application crash via certain long SELECT DISTINCT statements that improperly interact with storage-engine resource limitations for temporary data structures...

DEBIAN-CVE-2021-46668

MariaDB through 10.5.9 allows an application crash via certain long SELECT DISTINCT statements that improperly interact with storage-engine resource limitations for temporary data structures...

Code injection

MariaDB through 10.5.9 allows an application crash via certain long SELECT DISTINCT statements that improperly interact with storage-engine resource limitations for temporary data structures...

CVE-2021-46668

MariaDB through 10.5.9 allows an application crash via certain long SELECT DISTINCT statements that improperly interact with storage-engine resource limitations for temporary data structures...

UBUNTU-CVE-2021-46668

MariaDB through 10.5.9 allows an application crash via certain long SELECT DISTINCT statements that improperly interact with storage-engine resource limitations for temporary data structures...

CVE-2021-46668

Summary: CVE-2021-46668 affects MariaDB and permits an application crash when executing certain long SELECT DISTINCT statements that interact with storage-engine resource limits for temporary data structures. The core description in the initial document states the issue affects MariaDB through 10...