Red Hat Security AdvisoryRHSA-2023:5259
mariadb:10.3 security, bug fix, and enhancement update
Released 2023-09-19 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 8) Judy-1.0.5-18.module+el8+2765+cfa4f87b.aarch64::mariadb:10.3, Judy-1.0.5-18.module+el8+2765+cfa4f87b.ppc64le::mariadb:10.3, Judy-1.0.5-18.module+el8+2765+cfa4f87b.s390x::mariadb:10.3 +47
Fixes 5 records
Priority MEDIUM 43
A vulnerability was found in MariaDB.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02256 · Published 2023-09-26 · Fixed in 8080020230814130040.63b34585, 8080020231003163755.63b34585 +8 CWE-400
Priority LOW 37
MariaDB v10.7 was discovered to contain an use-after-poison in in __interceptor_memset at /libsanitizer/sanitizer_common/sanitizer_common_interceptors.inc.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02367 · Published 2022-07-01 · Partial fix CWE-416
Priority LOW 37
MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component sub_select.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02276 · Published 2022-07-01 · Partial fix
Priority LOW 32
MariaDB Server before 10.3.34 thru 10.9.3 is vulnerable to Denial of Service.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.01555 · Published 2023-01-20 · Partial fix CWE-476
Priority LOW 24
In MariaDB before 10.9.2, compress_write in extra/mariabackup/ds_compress.cc does not release data_mutex upon a stream write failure, which allows local users to trigger a deadlock.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00253 · Published 2022-08-27 · Partial fix CWE-667