rpm package
almalinux/mariadb-test
pkg:rpm/almalinux/mariadb-test
Vulnerabilities (70)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2021-46661 | Med | 5.5 | < 3:10.5.16-2.module_el8.6.0+3072+3c630e87 | 3:10.5.16-2.module_el8.6.0+3072+3c630e87 | Feb 1, 2022 | MariaDB through 10.5.9 allows an application crash in find_field_in_tables and find_order_in_list via an unused common table expression (CTE). | |
| CVE-2021-46659 | Med | 5.5 | < 3:10.5.16-2.module_el8.6.0+3072+3c630e87 | 3:10.5.16-2.module_el8.6.0+3072+3c630e87 | Jan 29, 2022 | MariaDB before 10.7.2 allows an application crash because it does not recognize that SELECT_LEX::nest_level is local to each VIEW. | |
| CVE-2021-46658 | Med | 5.5 | < 3:10.3.32-2.module_el8.5.0+2632+14ced695 | 3:10.3.32-2.module_el8.5.0+2632+14ced695 | Jan 29, 2022 | save_window_function_values in MariaDB before 10.6.3 allows an application crash because of incorrect handling of with_window_func=true for a subquery. | |
| CVE-2021-46657 | Med | 5.5 | < 3:10.3.32-2.module_el8.5.0+2632+14ced695 | 3:10.3.32-2.module_el8.5.0+2632+14ced695 | Jan 29, 2022 | get_sort_by_table in MariaDB before 10.6.2 allows an application crash via certain subquery uses of ORDER BY. | |
| CVE-2021-35604 | Med | 5.5 | < 3:10.3.32-2.module_el8.5.0+2632+14ced695 | 3:10.3.32-2.module_el8.5.0+2632+14ced695 | Oct 20, 2021 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 5.7.35 and prior and 8.0.26 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise | |
| CVE-2021-2389 | Med | 5.9 | < 3:10.3.32-2.module_el8.5.0+2632+14ced695 | 3:10.3.32-2.module_el8.5.0+2632+14ced695 | Jul 21, 2021 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 5.7.34 and prior and 8.0.25 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromi | |
| CVE-2021-2372 | Med | 4.4 | < 3:10.3.32-2.module_el8.5.0+2632+14ced695 | 3:10.3.32-2.module_el8.5.0+2632+14ced695 | Jul 21, 2021 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 5.7.34 and prior and 8.0.25 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromi | |
| CVE-2021-2166 | Med | 4.9 | < 3:10.3.32-2.module_el8.5.0+2632+14ced695 | 3:10.3.32-2.module_el8.5.0+2632+14ced695 | Apr 22, 2021 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 5.7.33 and prior and 8.0.23 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compr | |
| CVE-2021-2154 | Med | 4.9 | < 3:10.3.32-2.module_el8.5.0+2632+14ced695 | 3:10.3.32-2.module_el8.5.0+2632+14ced695 | Apr 22, 2021 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 5.7.33 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. S | |
| CVE-2021-27928 | Hig | 7.2 | < 3:10.3.28-1.module_el8.3.0+2177+7adc332a | 3:10.3.28-1.module_el8.3.0+2177+7adc332a | Mar 19, 2021 | A remote code execution issue was discovered in MariaDB 10.2 before 10.2.37, 10.3 before 10.3.28, 10.4 before 10.4.18, and 10.5 before 10.5.9; Percona Server through 2021-03-03; and the wsrep patch through 2021-03-03 for MySQL. An untrusted search path leads to eval injection, in |
- affected < 3:10.5.16-2.module_el8.6.0+3072+3c630e87fixed 3:10.5.16-2.module_el8.6.0+3072+3c630e87
MariaDB through 10.5.9 allows an application crash in find_field_in_tables and find_order_in_list via an unused common table expression (CTE).
- affected < 3:10.5.16-2.module_el8.6.0+3072+3c630e87fixed 3:10.5.16-2.module_el8.6.0+3072+3c630e87
MariaDB before 10.7.2 allows an application crash because it does not recognize that SELECT_LEX::nest_level is local to each VIEW.
- affected < 3:10.3.32-2.module_el8.5.0+2632+14ced695fixed 3:10.3.32-2.module_el8.5.0+2632+14ced695
save_window_function_values in MariaDB before 10.6.3 allows an application crash because of incorrect handling of with_window_func=true for a subquery.
- affected < 3:10.3.32-2.module_el8.5.0+2632+14ced695fixed 3:10.3.32-2.module_el8.5.0+2632+14ced695
get_sort_by_table in MariaDB before 10.6.2 allows an application crash via certain subquery uses of ORDER BY.
- affected < 3:10.3.32-2.module_el8.5.0+2632+14ced695fixed 3:10.3.32-2.module_el8.5.0+2632+14ced695
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 5.7.35 and prior and 8.0.26 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise
- affected < 3:10.3.32-2.module_el8.5.0+2632+14ced695fixed 3:10.3.32-2.module_el8.5.0+2632+14ced695
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 5.7.34 and prior and 8.0.25 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromi
- affected < 3:10.3.32-2.module_el8.5.0+2632+14ced695fixed 3:10.3.32-2.module_el8.5.0+2632+14ced695
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 5.7.34 and prior and 8.0.25 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromi
- affected < 3:10.3.32-2.module_el8.5.0+2632+14ced695fixed 3:10.3.32-2.module_el8.5.0+2632+14ced695
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 5.7.33 and prior and 8.0.23 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compr
- affected < 3:10.3.32-2.module_el8.5.0+2632+14ced695fixed 3:10.3.32-2.module_el8.5.0+2632+14ced695
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 5.7.33 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. S
- affected < 3:10.3.28-1.module_el8.3.0+2177+7adc332afixed 3:10.3.28-1.module_el8.3.0+2177+7adc332a
A remote code execution issue was discovered in MariaDB 10.2 before 10.2.37, 10.3 before 10.3.28, 10.4 before 10.4.18, and 10.5 before 10.5.9; Percona Server through 2021-03-03; and the wsrep patch through 2021-03-03 for MySQL. An untrusted search path leads to eval injection, in
Page 4 of 4