Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-4603-1
HistoryOct 27, 2020 - 12:00 a.m.

MariaDB vulnerabilities

2020-10-2700:00:00
ubuntu.com
72

9 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

7.2 High

AI Score

Confidence

High

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.009 Low

EPSS

Percentile

82.1%

JSON

Releases

  • Ubuntu 20.04 LTS
  • Ubuntu 18.04 ESM

Packages

  • mariadb-10.1 - MariaDB database
  • mariadb-10.3 - MariaDB database

Details

It was discovered that MariaDB didn’t properly validate the content of a packet
received from a server. A remote attacker could use this vulnerability to sent
a specialy crafted file to cause a denial of service. (CVE-2020-13249)

It was discovered that MariaDB has other security issues. An attacker can cause
a hang or frequently repeatable crash (denial of service). (CVE-2020-15180,
CVE-2020-2752, CVE-2020-2760, CVE-2020-2812, CVE-2020-2814)

In addition to security fixes, the updated packages contain bug fixes, new
features, and possibly incompatible changes.

OSVersionArchitecturePackageVersionFilename
Ubuntu20.04noarchmariadb-server< 1:10.3.25-0ubuntu0.20.04.1UNKNOWN
Ubuntu20.04noarchlibmariadb-dev< 1:10.3.25-0ubuntu0.20.04.1UNKNOWN
Ubuntu20.04noarchlibmariadb-dev-compat< 1:10.3.25-0ubuntu0.20.04.1UNKNOWN
Ubuntu20.04noarchlibmariadb-dev-dbgsym< 1:10.3.25-0ubuntu0.20.04.1UNKNOWN
Ubuntu20.04noarchlibmariadb3< 1:10.3.25-0ubuntu0.20.04.1UNKNOWN
Ubuntu20.04noarchlibmariadb3-dbgsym< 1:10.3.25-0ubuntu0.20.04.1UNKNOWN
Ubuntu20.04noarchlibmariadbclient-dev< 1:10.3.25-0ubuntu0.20.04.1UNKNOWN
Ubuntu20.04noarchlibmariadbd-dev< 1:10.3.25-0ubuntu0.20.04.1UNKNOWN
Ubuntu20.04noarchlibmariadbd19< 1:10.3.25-0ubuntu0.20.04.1UNKNOWN
Ubuntu20.04noarchlibmariadbd19-dbgsym< 1:10.3.25-0ubuntu0.20.04.1UNKNOWN
Rows per page:
1-10 of 801

Related

osv 25
nessus 61
openvas 27
altlinux 3
suse 2
fedora 6
mageia 2
gentoo 2
slackware 1
oraclelinux 3
almalinux 2
redhat 9
rocky 2
amazon 2
photon 2
debiancve 5
veracode 5
ubuntucve 6
mariadbunix 6
f5 1
debian 2
cve 5
prion 5
freebsd 1
alpinelinux 5
redhatcve 6
ibm 3
osv
osv
mariadb-10.1, mariadb-10.3 vulnerabilities
2020-10-27 16:57:58
Important: mariadb:10.3 security, bug fix, and enhancement update
2020-12-15 16:03:43
Important: mariadb:10.3 security, bug fix, and enhancement update
2020-12-15 16:03:43
nessus
nessus
Ubuntu 18.04 LTS / 20.04 LTS : MariaDB vulnerabilities (USN-4603-1)
2020-10-27 00:00:00
Fedora 32 : 3:mariadb / galera / mariadb-connector-c (2020-35f52d9370)
2020-06-17 00:00:00
SUSE SLES12 Security Update : mariadb (SUSE-SU-2020:1710-1)
2020-07-09 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-4603-1)
2020-10-28 00:00:00
Fedora: Security Advisory for galera (FEDORA-2020-35f52d9370)
2020-06-23 00:00:00
Fedora: Security Advisory for mariadb (FEDORA-2020-35f52d9370)
2020-06-23 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 9 package mariadb version 10.4.13-alt1
2020-07-02 00:00:00
Security fix for the ALT Linux 8 package mariadb version 10.1.46-alt1
2020-09-15 00:00:00
Security fix for the ALT Linux 8 package mariadb version 10.1.47-alt1
2020-12-11 00:00:00
suse
suse
Security update for mariadb (moderate)
2020-06-26 00:00:00
Security update for mariadb-connector-c (important)
2020-05-29 00:00:00
fedora
fedora
[SECURITY] Fedora 32 Update: mariadb-connector-c-3.1.8-1.fc32
2020-06-16 01:32:44
[SECURITY] Fedora 32 Update: galera-26.4.4-2.fc32
2020-06-16 01:32:43
[SECURITY] Fedora 32 Update: mariadb-10.4.13-1.fc32
2020-06-16 01:32:44
mageia
mageia
Updated mariadb packages fix security vulnerability
2020-07-07 14:13:48
Updated mariadb packages fix security vulnerability
2020-10-13 15:39:02
gentoo
gentoo
MariaDB: Multiple vulnerabilities
2020-12-07 00:00:00
MariaDB: Remote code execution
2020-11-11 00:00:00
slackware
slackware
[slackware-security] mariadb
2020-05-13 00:12:02
oraclelinux
oraclelinux
mariadb:10.3 security, bug fix, and enhancement update
2020-12-18 00:00:00
mariadb-connector-c security, bug fix, and enhancement update
2020-12-18 00:00:00
mariadb security and bug fix update
2020-10-06 00:00:00
almalinux
almalinux
Important: mariadb:10.3 security, bug fix, and enhancement update
2020-12-15 16:03:43
Moderate: mariadb-connector-c security, bug fix, and enhancement update
2020-12-15 16:04:12
redhat
redhat
(RHSA-2020:5665) Important: mariadb:10.3 security, bug fix, and enhancement update
2020-12-22 08:57:51
(RHSA-2020:5654) Important: mariadb:10.3 security, bug fix, and enhancement update
2020-12-22 08:27:07
(RHSA-2020:5500) Important: mariadb:10.3 security, bug fix, and enhancement update
2020-12-15 16:03:43
rocky
rocky
mariadb:10.3 security, bug fix, and enhancement update
2020-12-15 16:03:43
mariadb-connector-c security, bug fix, and enhancement update
2020-12-15 16:04:12
amazon
amazon
Medium: mysql57
2020-07-27 23:17:00
Medium: mysql56
2020-07-27 23:14:00
photon
photon
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2020-2.0-0239
2020-05-07 00:00:00
Important Photon OS Security Update - PHSA-2020-0239
2020-05-07 00:00:00
debiancve
debiancve
CVE-2020-15180
2021-05-27 20:15:00
CVE-2020-13249
2020-05-20 19:15:00
CVE-2020-2760
2020-04-15 14:15:00
veracode
veracode
Remote Code Execution
2020-10-11 23:31:42
Improper Validation
2020-10-06 03:29:05
Authorization Bypass
2020-08-06 21:27:57
ubuntucve
ubuntucve
CVE-2020-15180
2021-05-27 00:00:00
CVE-2020-13249
2020-05-20 00:00:00
CVE-2020-2760
2020-04-15 00:00:00
mariadbunix
mariadbunix
CVE-2020-13249
2020-05-20 19:15:09
CVE-2020-15180
2021-05-27 20:15:07
CVE-2020-2760
2020-04-15 14:15:25
f5
f5
K75885190 : MariaDB vulnerability CVE-2020-15180
2021-07-12 00:00:00
debian
debian
[SECURITY] [DLA 2409-1] mariadb-10.1 security update
2020-10-21 07:39:12
[SECURITY] [DSA 4776-1] mariadb-10.3 security update
2020-10-20 17:53:58
cve
cve
CVE-2020-15180
2021-05-27 20:15:00
CVE-2020-13249
2020-05-20 19:15:00
CVE-2020-2760
2020-04-15 14:15:00
prion
prion
Command injection
2021-05-27 20:15:00
Buffer overflow
2020-05-20 19:15:00
Code injection
2020-04-15 14:15:00
freebsd
freebsd
MariaDB -- Undisclosed vulnerability
2020-10-07 00:00:00
alpinelinux
alpinelinux
CVE-2020-15180
2021-05-27 20:15:00
CVE-2020-13249
2020-05-20 19:15:00
CVE-2020-2760
2020-04-15 14:15:00
redhatcve
redhatcve
CVE-2020-15180
2020-11-05 13:01:52
CVE-2020-13249
2020-05-25 16:55:34
CVE-2020-2760
2020-04-30 20:10:07
ibm
ibm
Security Bulletin: IBM Security Guardium is affected by Oracle MySQL vulnerabilities
2021-10-06 12:37:14
Security Bulletin: IBM API Connect is impacted by a denial of service vulnerability in MySQL (CVE-2020-2752)
2020-08-03 20:30:26
Security Bulletin: IBM Security Guardium is affected by an Oracle MySQL vulnerability
2021-06-22 18:17:33

9 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

7.2 High

AI Score

Confidence

High

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.009 Low

EPSS

Percentile

82.1%

JSON
Related for USN-4603-1
osv25nessus61openvas27altlinux3suse2fedora6mageia2gentoo2slackware1oraclelinux3almalinux2redhat9rocky2amazon2photon2debiancve5veracode5ubuntucve6mariadbunix6f51debian2cve5prion5freebsd1alpinelinux5redhatcve6ibm3