Red Hat Security AdvisoryRHSA-2023:6822
mariadb:10.5 security update
Released 2023-11-08 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream EUS (v.8.6) Judy-1.0.5-18.module+el8.4.0+9031+9abc7af9.aarch64::mariadb:10.5, Judy-1.0.5-18.module+el8.4.0+9031+9abc7af9.ppc64le::mariadb:10.5, Judy-1.0.5-18.module+el8.4.0+9031+9abc7af9.s390x::mariadb:10.5 +47
Fixes 8 records
Priority MEDIUM 43
A vulnerability was found in MariaDB.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02256 · Published 2023-09-26 · Fixed in 8080020230814130040.63b34585, 8080020231003163755.63b34585 +8 CWE-400
Priority LOW 37
MariaDB v10.7 was discovered to contain an use-after-poison in in __interceptor_memset at /libsanitizer/sanitizer_common/sanitizer_common_interceptors.inc.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02367 · Published 2022-07-01 · Partial fix CWE-416
Priority LOW 37
MariaDB v10.5 to v10.7 was discovered to contain a segmentation fault via the component st_select_lex_unit::exclude_level.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02194 · Published 2022-07-01 · Partial fix
Priority LOW 37
MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component sub_select.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02276 · Published 2022-07-01 · Partial fix
Priority LOW 37
MariaDB v10.5 to v10.7 was discovered to contain an assertion failure at table->get_ref_count() == 0 in dict0dict.cc.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02109 · Published 2022-07-01 · Partial fix CWE-617
Priority LOW 37
MariaDB v10.4 to v10.7 was discovered to contain an use-after-poison in prepare_inplace_add_virtual at /storage/innobase/handler/handler0alter.cc.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02212 · Published 2022-07-01 · Partial fix CWE-416
Priority LOW 32
MariaDB Server before 10.3.34 thru 10.9.3 is vulnerable to Denial of Service.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.01555 · Published 2023-01-20 · Partial fix CWE-476
Priority LOW 24
In MariaDB before 10.9.2, compress_write in extra/mariabackup/ds_compress.cc does not release data_mutex upon a stream write failure, which allows local users to trigger a deadlock.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00253 · Published 2022-08-27 · Partial fix CWE-667