rpm package
almalinux/mariadb-server-galera
pkg:rpm/almalinux/mariadb-server-galera
Vulnerabilities (70)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2022-32084 | — | < 3:10.3.39-1.module_el8.8.0+3609+204d4ab0 | 3:10.3.39-1.module_el8.8.0+3609+204d4ab0 | Jul 1, 2022 | MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component sub_select. | ||
| CVE-2022-32082 | — | < 3:10.5.22-1.module_el8.8.0+3620+5d452900 | 3:10.5.22-1.module_el8.8.0+3620+5d452900 | Jul 1, 2022 | MariaDB v10.5 to v10.7 was discovered to contain an assertion failure at table->get_ref_count() == 0 in dict0dict.cc. | ||
| CVE-2022-32081 | — | < 3:10.5.22-1.module_el8.8.0+3620+5d452900 | 3:10.5.22-1.module_el8.8.0+3620+5d452900 | Jul 1, 2022 | MariaDB v10.4 to v10.7 was discovered to contain an use-after-poison in prepare_inplace_add_virtual at /storage/innobase/handler/handler0alter.cc. | ||
| CVE-2022-31623 | — | < 3:10.5.16-2.module_el8.6.0+3072+3c630e87 | 3:10.5.16-2.module_el8.6.0+3072+3c630e87 | May 25, 2022 | MariaDB Server before 10.7 is vulnerable to Denial of Service. In extra/mariabackup/ds_compress.cc, when an error occurs (i.e., going to the err label) while executing the method create_worker_threads, the held lock thd->ctrl_mutex is not released correctly, which allows local us | ||
| CVE-2022-31622 | — | < 3:10.5.16-2.module_el8.6.0+3072+3c630e87 | 3:10.5.16-2.module_el8.6.0+3072+3c630e87 | May 25, 2022 | MariaDB Server before 10.7 is vulnerable to Denial of Service. In extra/mariabackup/ds_compress.cc, when an error occurs (pthread_create returns a nonzero value) while executing the method create_worker_threads, the held lock is not released correctly, which allows local users to | ||
| CVE-2022-21427 | — | < 3:10.3.35-1.module_el8.6.0+3265+230ed96b | 3:10.3.35-1.module_el8.6.0+3265+230ed96b | Apr 19, 2022 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: FTS). Supported versions that are affected are 5.7.37 and prior and 8.0.28 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compr | ||
| CVE-2022-27457 | — | < 3:10.5.16-2.module_el8.6.0+3072+3c630e87 | 3:10.5.16-2.module_el8.6.0+3072+3c630e87 | Apr 14, 2022 | MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component my_mb_wc_latin1 at /strings/ctype-latin1.c. | ||
| CVE-2022-27456 | — | < 3:10.5.16-2.module_el8.6.0+3072+3c630e87 | 3:10.5.16-2.module_el8.6.0+3072+3c630e87 | Apr 14, 2022 | MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component VDec::VDec at /sql/sql_type.cc. | ||
| CVE-2022-27455 | — | < 3:10.5.16-2.module_el8.6.0+3072+3c630e87 | 3:10.5.16-2.module_el8.6.0+3072+3c630e87 | Apr 14, 2022 | MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component my_wildcmp_8bit_impl at /strings/ctype-simple.c. | ||
| CVE-2022-27452 | — | < 3:10.5.16-2.module_el8.6.0+3072+3c630e87 | 3:10.5.16-2.module_el8.6.0+3072+3c630e87 | Apr 14, 2022 | MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/item_cmpfunc.cc. | ||
| CVE-2022-27451 | — | < 3:10.5.16-2.module_el8.6.0+3072+3c630e87 | 3:10.5.16-2.module_el8.6.0+3072+3c630e87 | Apr 14, 2022 | MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/field_conv.cc. | ||
| CVE-2022-27449 | — | < 3:10.5.16-2.module_el8.6.0+3072+3c630e87 | 3:10.5.16-2.module_el8.6.0+3072+3c630e87 | Apr 14, 2022 | MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/item_func.cc:148. | ||
| CVE-2022-27448 | — | < 3:10.5.16-2.module_el8.6.0+3072+3c630e87 | 3:10.5.16-2.module_el8.6.0+3072+3c630e87 | Apr 14, 2022 | There is an Assertion failure in MariaDB Server v10.9 and below via 'node->pcur->rel_pos == BTR_PCUR_ON' at /row/row0mysql.cc. | ||
| CVE-2022-27447 | — | < 3:10.5.16-2.module_el8.6.0+3072+3c630e87 | 3:10.5.16-2.module_el8.6.0+3072+3c630e87 | Apr 14, 2022 | MariaDB Server v10.9 and below was discovered to contain a use-after-free via the component Binary_string::free_buffer() at /sql/sql_string.h. | ||
| CVE-2022-27446 | — | < 3:10.5.16-2.module_el8.6.0+3072+3c630e87 | 3:10.5.16-2.module_el8.6.0+3072+3c630e87 | Apr 14, 2022 | MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/item_cmpfunc.h. | ||
| CVE-2022-27445 | — | < 3:10.5.16-2.module_el8.6.0+3072+3c630e87 | 3:10.5.16-2.module_el8.6.0+3072+3c630e87 | Apr 14, 2022 | MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/sql_window.cc. | ||
| CVE-2022-27444 | — | < 3:10.5.16-2.module_el8.6.0+3072+3c630e87 | 3:10.5.16-2.module_el8.6.0+3072+3c630e87 | Apr 14, 2022 | MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/item_subselect.cc. | ||
| CVE-2022-27387 | — | < 3:10.5.16-2.module_el8.6.0+3072+3c630e87 | 3:10.5.16-2.module_el8.6.0+3072+3c630e87 | Apr 12, 2022 | MariaDB Server v10.7 and below was discovered to contain a global buffer overflow in the component decimal_bin_size, which is exploited via specially crafted SQL statements. | ||
| CVE-2022-27386 | — | < 3:10.5.16-2.module_el8.6.0+3072+3c630e87 | 3:10.5.16-2.module_el8.6.0+3072+3c630e87 | Apr 12, 2022 | MariaDB Server v10.7 and below was discovered to contain a segmentation fault via the component sql/sql_class.cc. | ||
| CVE-2022-27384 | — | < 3:10.5.16-2.module_el8.6.0+3072+3c630e87 | 3:10.5.16-2.module_el8.6.0+3072+3c630e87 | Apr 12, 2022 | An issue in the component Item_subselect::init_expr_cache_tracker of MariaDB Server v10.6 and below was discovered to allow attackers to cause a Denial of Service (DoS) via specially crafted SQL statements. |
- CVE-2022-32084Jul 1, 2022affected < 3:10.3.39-1.module_el8.8.0+3609+204d4ab0fixed 3:10.3.39-1.module_el8.8.0+3609+204d4ab0
MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component sub_select.
- CVE-2022-32082Jul 1, 2022affected < 3:10.5.22-1.module_el8.8.0+3620+5d452900fixed 3:10.5.22-1.module_el8.8.0+3620+5d452900
MariaDB v10.5 to v10.7 was discovered to contain an assertion failure at table->get_ref_count() == 0 in dict0dict.cc.
- CVE-2022-32081Jul 1, 2022affected < 3:10.5.22-1.module_el8.8.0+3620+5d452900fixed 3:10.5.22-1.module_el8.8.0+3620+5d452900
MariaDB v10.4 to v10.7 was discovered to contain an use-after-poison in prepare_inplace_add_virtual at /storage/innobase/handler/handler0alter.cc.
- CVE-2022-31623May 25, 2022affected < 3:10.5.16-2.module_el8.6.0+3072+3c630e87fixed 3:10.5.16-2.module_el8.6.0+3072+3c630e87
MariaDB Server before 10.7 is vulnerable to Denial of Service. In extra/mariabackup/ds_compress.cc, when an error occurs (i.e., going to the err label) while executing the method create_worker_threads, the held lock thd->ctrl_mutex is not released correctly, which allows local us
- CVE-2022-31622May 25, 2022affected < 3:10.5.16-2.module_el8.6.0+3072+3c630e87fixed 3:10.5.16-2.module_el8.6.0+3072+3c630e87
MariaDB Server before 10.7 is vulnerable to Denial of Service. In extra/mariabackup/ds_compress.cc, when an error occurs (pthread_create returns a nonzero value) while executing the method create_worker_threads, the held lock is not released correctly, which allows local users to
- CVE-2022-21427Apr 19, 2022affected < 3:10.3.35-1.module_el8.6.0+3265+230ed96bfixed 3:10.3.35-1.module_el8.6.0+3265+230ed96b
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: FTS). Supported versions that are affected are 5.7.37 and prior and 8.0.28 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compr
- CVE-2022-27457Apr 14, 2022affected < 3:10.5.16-2.module_el8.6.0+3072+3c630e87fixed 3:10.5.16-2.module_el8.6.0+3072+3c630e87
MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component my_mb_wc_latin1 at /strings/ctype-latin1.c.
- CVE-2022-27456Apr 14, 2022affected < 3:10.5.16-2.module_el8.6.0+3072+3c630e87fixed 3:10.5.16-2.module_el8.6.0+3072+3c630e87
MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component VDec::VDec at /sql/sql_type.cc.
- CVE-2022-27455Apr 14, 2022affected < 3:10.5.16-2.module_el8.6.0+3072+3c630e87fixed 3:10.5.16-2.module_el8.6.0+3072+3c630e87
MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component my_wildcmp_8bit_impl at /strings/ctype-simple.c.
- CVE-2022-27452Apr 14, 2022affected < 3:10.5.16-2.module_el8.6.0+3072+3c630e87fixed 3:10.5.16-2.module_el8.6.0+3072+3c630e87
MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/item_cmpfunc.cc.
- CVE-2022-27451Apr 14, 2022affected < 3:10.5.16-2.module_el8.6.0+3072+3c630e87fixed 3:10.5.16-2.module_el8.6.0+3072+3c630e87
MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/field_conv.cc.
- CVE-2022-27449Apr 14, 2022affected < 3:10.5.16-2.module_el8.6.0+3072+3c630e87fixed 3:10.5.16-2.module_el8.6.0+3072+3c630e87
MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/item_func.cc:148.
- CVE-2022-27448Apr 14, 2022affected < 3:10.5.16-2.module_el8.6.0+3072+3c630e87fixed 3:10.5.16-2.module_el8.6.0+3072+3c630e87
There is an Assertion failure in MariaDB Server v10.9 and below via 'node->pcur->rel_pos == BTR_PCUR_ON' at /row/row0mysql.cc.
- CVE-2022-27447Apr 14, 2022affected < 3:10.5.16-2.module_el8.6.0+3072+3c630e87fixed 3:10.5.16-2.module_el8.6.0+3072+3c630e87
MariaDB Server v10.9 and below was discovered to contain a use-after-free via the component Binary_string::free_buffer() at /sql/sql_string.h.
- CVE-2022-27446Apr 14, 2022affected < 3:10.5.16-2.module_el8.6.0+3072+3c630e87fixed 3:10.5.16-2.module_el8.6.0+3072+3c630e87
MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/item_cmpfunc.h.
- CVE-2022-27445Apr 14, 2022affected < 3:10.5.16-2.module_el8.6.0+3072+3c630e87fixed 3:10.5.16-2.module_el8.6.0+3072+3c630e87
MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/sql_window.cc.
- CVE-2022-27444Apr 14, 2022affected < 3:10.5.16-2.module_el8.6.0+3072+3c630e87fixed 3:10.5.16-2.module_el8.6.0+3072+3c630e87
MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/item_subselect.cc.
- CVE-2022-27387Apr 12, 2022affected < 3:10.5.16-2.module_el8.6.0+3072+3c630e87fixed 3:10.5.16-2.module_el8.6.0+3072+3c630e87
MariaDB Server v10.7 and below was discovered to contain a global buffer overflow in the component decimal_bin_size, which is exploited via specially crafted SQL statements.
- CVE-2022-27386Apr 12, 2022affected < 3:10.5.16-2.module_el8.6.0+3072+3c630e87fixed 3:10.5.16-2.module_el8.6.0+3072+3c630e87
MariaDB Server v10.7 and below was discovered to contain a segmentation fault via the component sql/sql_class.cc.
- CVE-2022-27384Apr 12, 2022affected < 3:10.5.16-2.module_el8.6.0+3072+3c630e87fixed 3:10.5.16-2.module_el8.6.0+3072+3c630e87
An issue in the component Item_subselect::init_expr_cache_tracker of MariaDB Server v10.6 and below was discovered to allow attackers to cause a Denial of Service (DoS) via specially crafted SQL statements.
Page 2 of 4