opensuse/mariadb&distro=openSUSE Tumbleweed

Vulnerabilities (125)

• CVE-2021-27928HigMar 19, 2021
  affected < 10.6.5-3.1fixed 10.6.5-3.1

  A remote code execution issue was discovered in MariaDB 10.2 before 10.2.37, 10.3 before 10.3.28, 10.4 before 10.4.18, and 10.5 before 10.5.9; Percona Server through 2021-03-03; and the wsrep patch through 2021-03-03 for MySQL. An untrusted search path leads to eval injection, in

• CVE-2020-14812MedOct 21, 2020
  affected < 10.6.4-2.1fixed 10.6.4-2.1

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Locking). Supported versions that are affected are 5.6.49 and prior, 5.7.31 and prior and 8.0.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multi

• CVE-2020-14789MedOct 21, 2020
  affected < 10.6.4-2.1fixed 10.6.4-2.1

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: FTS). Supported versions that are affected are 5.7.31 and prior and 8.0.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compr

• CVE-2020-13249HigMay 20, 2020
  affected < 10.6.4-2.1fixed 10.6.4-2.1

  libmariadb/mariadb_lib.c in MariaDB Connector/C before 3.1.8 does not properly validate the content of an OK packet received from a server. NOTE: although mariadb_lib.c was originally based on code shipped for MySQL, this issue does not affect any MySQL components supported by Or

• CVE-2020-2752MedApr 15, 2020
  affected < 10.6.4-2.1fixed 10.6.4-2.1

  Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions that are affected are 5.6.47 and prior, 5.7.27 and prior and 8.0.17 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple proto

• CVE-2019-18901MedMar 2, 2020
  affected < 10.6.4-2.1fixed 10.6.4-2.1

  A UNIX Symbolic Link (Symlink) Following vulnerability in the mysql-systemd-helper of the mariadb packaging of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15 allows local attackers to change the permissions of arbitrary files to 0640. This issue affects: SUSE Li

• CVE-2020-7221HigFeb 4, 2020
  affected < 10.6.4-2.1fixed 10.6.4-2.1

  mysql_install_db in MariaDB 10.4.7 through 10.4.11 allows privilege escalation from the mysql user account to root because chown and chmod are performed unsafely, as demonstrated by a symlink attack on a chmod 04755 of auth_pam_tool_dir/auth_pam_tool. NOTE: this does not affect t

• CVE-2020-2574MedJan 15, 2020
  affected < 10.6.4-2.1fixed 10.6.4-2.1

  Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions that are affected are 5.6.46 and prior, 5.7.28 and prior and 8.0.18 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple prot

• CVE-2019-2974MedOct 16, 2019
  affected < 10.6.4-2.1fixed 10.6.4-2.1

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 5.6.45 and prior, 5.7.27 and prior and 8.0.17 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via mult

• CVE-2019-2805MedJul 23, 2019
  affected < 10.6.4-2.1fixed 10.6.4-2.1

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser). Supported versions that are affected are 5.6.44 and prior, 5.7.26 and prior and 8.0.16 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via mu

• CVE-2019-2758MedJul 23, 2019
  affected < 10.6.4-2.1fixed 10.6.4-2.1

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.7.26 and prior and 8.0.16 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compr

• CVE-2019-2614MedApr 23, 2019
  affected < 10.6.4-2.1fixed 10.6.4-2.1

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions that are affected are 5.6.43 and prior, 5.7.25 and prior and 8.0.15 and prior. Difficult to exploit vulnerability allows high privileged attacker with network acces

• CVE-2019-2510MedJan 16, 2019
  affected < 10.6.4-2.1fixed 10.6.4-2.1

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.7.24 and prior and 8.0.13 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compr

• CVE-2019-2503MedJan 16, 2019
  affected < 10.6.4-2.1fixed 10.6.4-2.1

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Connection Handling). Supported versions that are affected are 5.6.42 and prior, 5.7.24 and prior and 8.0.13 and prior. Difficult to exploit vulnerability allows low privileged attacker with access

• CVE-2018-3282MedOct 17, 2018
  affected < 10.6.4-2.1fixed 10.6.4-2.1

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Storage Engines). Supported versions that are affected are 5.5.61 and prior, 5.6.41 and prior, 5.7.23 and prior and 8.0.12 and prior. Easily exploitable vulnerability allows high privileged attacke

• CVE-2018-3200MedOct 17, 2018
  affected < 10.6.4-2.1fixed 10.6.4-2.1

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.7.23 and prior and 8.0.12 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compr

• CVE-2018-3185MedOct 17, 2018
  affected < 10.6.4-2.1fixed 10.6.4-2.1

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.7.23 and prior and 8.0.12 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compr

• CVE-2018-3174MedOct 17, 2018
  affected < 10.6.4-2.1fixed 10.6.4-2.1

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs). Supported versions that are affected are 5.5.61 and prior, 5.6.41 and prior, 5.7.23 and prior and 8.0.12 and prior. Difficult to exploit vulnerability allows high privileged attacker with

• CVE-2018-3162MedOct 17, 2018
  affected < 10.6.4-2.1fixed 10.6.4-2.1

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.7.23 and prior and 8.0.12 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compr

• CVE-2018-3156MedOct 17, 2018
  affected < 10.6.4-2.1fixed 10.6.4-2.1

  Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.6.41 and prior, 5.7.23 and prior and 8.0.12 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple p