Veracode Vulnerability DatabaseVERACODE:34747Integer Overflow
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
2.1 Low
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:N/I:N/A:P
MariaDB before 10.6.5 has a sql_lex.cc integer overflow, leading to an application crash.
References
jira.mariadb.org/browse/MDEV-26350
lists.fedoraproject.org/archives/list/[email protected]/message/DKJRBYJAQCOPHSED43A3HUPNKQLDTFGD/
lists.fedoraproject.org/archives/list/[email protected]/message/EZFZVMJL5UDTOZMARLXQIMG3BTG6UNYW/
lists.fedoraproject.org/archives/list/[email protected]/message/NJ4KDAGF3H4D4BDTHRAM6ZEAJJWWMRUO/
mariadb.com/kb/en/security/
secdb.alpinelinux.org/edge/main.yaml
secdb.alpinelinux.org/v3.15/main.yaml
security.netapp.com/advisory/ntap-20220221-0002/
Related
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
2.1 Low
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:N/I:N/A:P