Red Hat Security AdvisoryRHSA-2023:7633
rh-mariadb105-galera and rh-mariadb105-mariadb security update
Released 2023-12-04 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Software Collections for RHEL Workstation(v. 7) rh-mariadb105-galera-26.4.14-1.el7, rh-mariadb105-mariadb-3:10.5.22-1.el7
- Red Hat Software Collections for RHEL(v. 7) rh-mariadb105-galera-26.4.14-1.el7, rh-mariadb105-mariadb-3:10.5.22-1.el7
Fixes 8 records
Priority MEDIUM 43
A vulnerability was found in MariaDB.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02256 · Published 2023-09-26 · Fixed in 8080020230814130040.63b34585, 8080020231003163755.63b34585 +8 CWE-400
Priority LOW 37
MariaDB v10.7 was discovered to contain an use-after-poison in in __interceptor_memset at /libsanitizer/sanitizer_common/sanitizer_common_interceptors.inc.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02367 · Published 2022-07-01 · Partial fix CWE-416
Priority LOW 37
MariaDB v10.5 to v10.7 was discovered to contain a segmentation fault via the component st_select_lex_unit::exclude_level.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02194 · Published 2022-07-01 · Partial fix
Priority LOW 37
MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component sub_select.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02276 · Published 2022-07-01 · Partial fix
Priority LOW 37
MariaDB v10.5 to v10.7 was discovered to contain an assertion failure at table->get_ref_count() == 0 in dict0dict.cc.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02109 · Published 2022-07-01 · Partial fix CWE-617
Priority LOW 37
MariaDB v10.4 to v10.7 was discovered to contain an use-after-poison in prepare_inplace_add_virtual at /storage/innobase/handler/handler0alter.cc.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02212 · Published 2022-07-01 · Partial fix CWE-416
Priority LOW 32
MariaDB Server before 10.3.34 thru 10.9.3 is vulnerable to Denial of Service.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.01555 · Published 2023-01-20 · Partial fix CWE-476
Priority LOW 24
In MariaDB before 10.9.2, compress_write in extra/mariabackup/ds_compress.cc does not release data_mutex upon a stream write failure, which allows local users to trigger a deadlock.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00253 · Published 2022-08-27 · Partial fix CWE-667