almalinux/Judy

Vulnerabilities (94)

• CVE-2021-46661MedFeb 1, 2022
  affected < 1.0.5-18.module_el8.6.0+3072+3c630e87fixed 1.0.5-18.module_el8.6.0+3072+3c630e87

  MariaDB through 10.5.9 allows an application crash in find_field_in_tables and find_order_in_list via an unused common table expression (CTE).

• CVE-2021-46659MedJan 29, 2022
  affected < 1.0.5-18.module_el8.6.0+3072+3c630e87fixed 1.0.5-18.module_el8.6.0+3072+3c630e87

  MariaDB before 10.7.2 allows an application crash because it does not recognize that SELECT_LEX::nest_level is local to each VIEW.

• CVE-2021-46658MedJan 29, 2022
  affected < 1.0.5-18.module_el8.6.0+2867+72759d2ffixed 1.0.5-18.module_el8.6.0+2867+72759d2f

  save_window_function_values in MariaDB before 10.6.3 allows an application crash because of incorrect handling of with_window_func=true for a subquery.

• CVE-2021-46657MedJan 29, 2022
  affected < 1.0.5-18.module_el8.6.0+2867+72759d2ffixed 1.0.5-18.module_el8.6.0+2867+72759d2f

  get_sort_by_table in MariaDB before 10.6.2 allows an application crash via certain subquery uses of ORDER BY.

• CVE-2021-35604MedOct 20, 2021
  affected < 1.0.5-18.module_el8.6.0+2867+72759d2ffixed 1.0.5-18.module_el8.6.0+2867+72759d2f

  Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 5.7.35 and prior and 8.0.26 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise

• CVE-2021-2389MedJul 21, 2021
  affected < 1.0.5-18.module_el8.6.0+2867+72759d2ffixed 1.0.5-18.module_el8.6.0+2867+72759d2f

  Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 5.7.34 and prior and 8.0.25 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromi

• CVE-2021-2372MedJul 21, 2021
  affected < 1.0.5-18.module_el8.6.0+2867+72759d2ffixed 1.0.5-18.module_el8.6.0+2867+72759d2f

  Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 5.7.34 and prior and 8.0.25 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromi

• CVE-2020-15180CriMay 27, 2021
  affected < 1.0.5-18.module_el8.6.0+2867+72759d2ffixed 1.0.5-18.module_el8.6.0+2867+72759d2f

  A flaw was found in the mysql-wsrep component of mariadb. Lack of input sanitization in `wsrep_sst_method` allows for command injection that can be exploited by a remote attacker to execute arbitrary commands on galera cluster nodes. This threatens the system's confidentiality, i

• CVE-2021-2166MedApr 22, 2021
  affected < 1.0.5-18.module_el8.6.0+2867+72759d2ffixed 1.0.5-18.module_el8.6.0+2867+72759d2f

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 5.7.33 and prior and 8.0.23 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compr

• CVE-2021-2154MedApr 22, 2021
  affected < 1.0.5-18.module_el8.6.0+2867+72759d2ffixed 1.0.5-18.module_el8.6.0+2867+72759d2f

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 5.7.33 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. S

• CVE-2021-27928HigMar 19, 2021
  affected < 1.0.5-18.module_el8.6.0+2867+72759d2ffixed 1.0.5-18.module_el8.6.0+2867+72759d2f

  A remote code execution issue was discovered in MariaDB 10.2 before 10.2.37, 10.3 before 10.3.28, 10.4 before 10.4.18, and 10.5 before 10.5.9; Percona Server through 2021-03-03; and the wsrep patch through 2021-03-03 for MySQL. An untrusted search path leads to eval injection, in

• CVE-2020-14812MedOct 21, 2020
  affected < 1.0.5-18.module_el8.6.0+2867+72759d2ffixed 1.0.5-18.module_el8.6.0+2867+72759d2f

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Locking). Supported versions that are affected are 5.6.49 and prior, 5.7.31 and prior and 8.0.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multi

• CVE-2020-14789MedOct 21, 2020
  affected < 1.0.5-18.module_el8.6.0+2867+72759d2ffixed 1.0.5-18.module_el8.6.0+2867+72759d2f

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: FTS). Supported versions that are affected are 5.7.31 and prior and 8.0.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compr

• CVE-2020-14776MedOct 21, 2020
  affected < 1.0.5-18.module_el8.6.0+2867+72759d2ffixed 1.0.5-18.module_el8.6.0+2867+72759d2f

  Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 5.7.31 and prior and 8.0.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise

• CVE-2020-14765MedOct 21, 2020
  affected < 1.0.5-18.module_el8.6.0+2867+72759d2ffixed 1.0.5-18.module_el8.6.0+2867+72759d2f

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: FTS). Supported versions that are affected are 5.6.49 and prior, 5.7.31 and prior and 8.0.21 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple p

• CVE-2020-13249HigMay 20, 2020
  affected < 1.0.5-18.module_el8.6.0+2867+72759d2ffixed 1.0.5-18.module_el8.6.0+2867+72759d2f

  libmariadb/mariadb_lib.c in MariaDB Connector/C before 3.1.8 does not properly validate the content of an OK packet received from a server. NOTE: although mariadb_lib.c was originally based on code shipped for MySQL, this issue does not affect any MySQL components supported by Or

• CVE-2020-2814MedApr 15, 2020
  affected < 1.0.5-18.module_el8.6.0+2867+72759d2ffixed 1.0.5-18.module_el8.6.0+2867+72759d2f

  Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 5.6.47 and prior, 5.7.28 and prior and 8.0.18 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple proto

• CVE-2020-2812MedApr 15, 2020
  affected < 1.0.5-18.module_el8.6.0+2867+72759d2ffixed 1.0.5-18.module_el8.6.0+2867+72759d2f

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored Procedure). Supported versions that are affected are 5.6.47 and prior, 5.7.29 and prior and 8.0.19 and prior. Easily exploitable vulnerability allows high privileged attacker with network access

• CVE-2020-2780MedApr 15, 2020
  affected < 1.0.5-18.module_el8.6.0+2867+72759d2ffixed 1.0.5-18.module_el8.6.0+2867+72759d2f

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 5.6.47 and prior, 5.7.29 and prior and 8.0.19 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple p

• CVE-2020-2760MedApr 15, 2020
  affected < 1.0.5-18.module_el8.6.0+2867+72759d2ffixed 1.0.5-18.module_el8.6.0+2867+72759d2f

  Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 5.7.29 and prior and 8.0.19 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise