rpm package

suse/mariadb&distro=SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS

pkg:rpm/suse/mariadb&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-ESPOS

Vulnerabilities (46)

CVE	Sev	CVSS	Affected versions	Fixed in	Published	Description
CVE-2022-32091	Hig	7.5	< 10.4.26-150200.3.31.1	10.4.26-150200.3.31.1	Jul 1, 2022	MariaDB v10.7 was discovered to contain an use-after-poison in in __interceptor_memset at /libsanitizer/sanitizer_common/sanitizer_common_interceptors.inc.
CVE-2022-32089	Hig	7.5	< 10.4.26-150200.3.31.1	10.4.26-150200.3.31.1	Jul 1, 2022	MariaDB v10.5 to v10.7 was discovered to contain a segmentation fault via the component st_select_lex_unit::exclude_level.
CVE-2022-32088	Hig	7.5	< 10.4.26-150200.3.31.1	10.4.26-150200.3.31.1	Jul 1, 2022	MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component Exec_time_tracker::get_loops/Filesort_tracker::report_use/filesort.
CVE-2022-32087	Hig	7.5	< 10.4.26-150200.3.31.1	10.4.26-150200.3.31.1	Jul 1, 2022	MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component Item_args::walk_args.
CVE-2022-32086	Hig	7.5	< 10.4.26-150200.3.31.1	10.4.26-150200.3.31.1	Jul 1, 2022	MariaDB v10.4 to v10.8 was discovered to contain a segmentation fault via the component Item_field::fix_outer_field.
CVE-2022-32085	Hig	7.5	< 10.4.26-150200.3.31.1	10.4.26-150200.3.31.1	Jul 1, 2022	MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component Item_func_in::cleanup/Item::cleanup_processor.
CVE-2022-32084	Hig	7.5	< 10.4.26-150200.3.31.1	10.4.26-150200.3.31.1	Jul 1, 2022	MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component sub_select.
CVE-2022-32083	Hig	7.5	< 10.4.26-150200.3.31.1	10.4.26-150200.3.31.1	Jul 1, 2022	MariaDB v10.2 to v10.6.1 was discovered to contain a segmentation fault via the component Item_subselect::init_expr_cache_tracker.
CVE-2022-32081	Hig	7.5	< 10.4.26-150200.3.31.1	10.4.26-150200.3.31.1	Jul 1, 2022	MariaDB v10.4 to v10.7 was discovered to contain an use-after-poison in prepare_inplace_add_virtual at /storage/innobase/handler/handler0alter.cc.
CVE-2022-21427	Med	4.9	< 10.4.25-150200.3.28.1	10.4.25-150200.3.28.1	Apr 19, 2022	Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: FTS). Supported versions that are affected are 5.7.37 and prior and 8.0.28 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compr
CVE-2022-27457	Hig	7.5	< 10.4.25-150200.3.28.1	10.4.25-150200.3.28.1	Apr 14, 2022	MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component my_mb_wc_latin1 at /strings/ctype-latin1.c.
CVE-2022-27456	Hig	7.5	< 10.4.25-150200.3.28.1	10.4.25-150200.3.28.1	Apr 14, 2022	MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component VDec::VDec at /sql/sql_type.cc.
CVE-2022-27455	Hig	7.5	< 10.4.25-150200.3.28.1	10.4.25-150200.3.28.1	Apr 14, 2022	MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component my_wildcmp_8bit_impl at /strings/ctype-simple.c.
CVE-2022-27452	Hig	7.5	< 10.4.25-150200.3.28.1	10.4.25-150200.3.28.1	Apr 14, 2022	MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/item_cmpfunc.cc.
CVE-2022-27451	Hig	7.5	< 10.4.25-150200.3.28.1	10.4.25-150200.3.28.1	Apr 14, 2022	MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/field_conv.cc.
CVE-2022-27449	Hig	7.5	< 10.4.25-150200.3.28.1	10.4.25-150200.3.28.1	Apr 14, 2022	MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/item_func.cc:148.
CVE-2022-27448	Hig	7.5	< 10.4.25-150200.3.28.1	10.4.25-150200.3.28.1	Apr 14, 2022	There is an Assertion failure in MariaDB Server v10.9 and below via 'node->pcur->rel_pos == BTR_PCUR_ON' at /row/row0mysql.cc.
CVE-2022-27447	Hig	7.5	< 10.4.25-150200.3.28.1	10.4.25-150200.3.28.1	Apr 14, 2022	MariaDB Server v10.9 and below was discovered to contain a use-after-free via the component Binary_string::free_buffer() at /sql/sql_string.h.
CVE-2022-27446	Hig	7.5	< 10.4.25-150200.3.28.1	10.4.25-150200.3.28.1	Apr 14, 2022	MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/item_cmpfunc.h.
CVE-2022-27445	Hig	7.5	< 10.4.25-150200.3.28.1	10.4.25-150200.3.28.1	Apr 14, 2022	MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/sql_window.cc.

CVE-2022-32091HigJul 1, 2022
affected < 10.4.26-150200.3.31.1fixed 10.4.26-150200.3.31.1
MariaDB v10.7 was discovered to contain an use-after-poison in in __interceptor_memset at /libsanitizer/sanitizer_common/sanitizer_common_interceptors.inc.
CVE-2022-32089HigJul 1, 2022
affected < 10.4.26-150200.3.31.1fixed 10.4.26-150200.3.31.1
MariaDB v10.5 to v10.7 was discovered to contain a segmentation fault via the component st_select_lex_unit::exclude_level.
CVE-2022-32088HigJul 1, 2022
affected < 10.4.26-150200.3.31.1fixed 10.4.26-150200.3.31.1
MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component Exec_time_tracker::get_loops/Filesort_tracker::report_use/filesort.
CVE-2022-32087HigJul 1, 2022
affected < 10.4.26-150200.3.31.1fixed 10.4.26-150200.3.31.1
MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component Item_args::walk_args.
CVE-2022-32086HigJul 1, 2022
affected < 10.4.26-150200.3.31.1fixed 10.4.26-150200.3.31.1
MariaDB v10.4 to v10.8 was discovered to contain a segmentation fault via the component Item_field::fix_outer_field.
CVE-2022-32085HigJul 1, 2022
affected < 10.4.26-150200.3.31.1fixed 10.4.26-150200.3.31.1
MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component Item_func_in::cleanup/Item::cleanup_processor.
CVE-2022-32084HigJul 1, 2022
affected < 10.4.26-150200.3.31.1fixed 10.4.26-150200.3.31.1
MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component sub_select.
CVE-2022-32083HigJul 1, 2022
affected < 10.4.26-150200.3.31.1fixed 10.4.26-150200.3.31.1
MariaDB v10.2 to v10.6.1 was discovered to contain a segmentation fault via the component Item_subselect::init_expr_cache_tracker.
CVE-2022-32081HigJul 1, 2022
affected < 10.4.26-150200.3.31.1fixed 10.4.26-150200.3.31.1
MariaDB v10.4 to v10.7 was discovered to contain an use-after-poison in prepare_inplace_add_virtual at /storage/innobase/handler/handler0alter.cc.
CVE-2022-21427MedApr 19, 2022
affected < 10.4.25-150200.3.28.1fixed 10.4.25-150200.3.28.1
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: FTS). Supported versions that are affected are 5.7.37 and prior and 8.0.28 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compr
CVE-2022-27457HigApr 14, 2022
affected < 10.4.25-150200.3.28.1fixed 10.4.25-150200.3.28.1
MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component my_mb_wc_latin1 at /strings/ctype-latin1.c.
CVE-2022-27456HigApr 14, 2022
affected < 10.4.25-150200.3.28.1fixed 10.4.25-150200.3.28.1
MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component VDec::VDec at /sql/sql_type.cc.
CVE-2022-27455HigApr 14, 2022
affected < 10.4.25-150200.3.28.1fixed 10.4.25-150200.3.28.1
MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component my_wildcmp_8bit_impl at /strings/ctype-simple.c.
CVE-2022-27452HigApr 14, 2022
affected < 10.4.25-150200.3.28.1fixed 10.4.25-150200.3.28.1
MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/item_cmpfunc.cc.
CVE-2022-27451HigApr 14, 2022
affected < 10.4.25-150200.3.28.1fixed 10.4.25-150200.3.28.1
MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/field_conv.cc.
CVE-2022-27449HigApr 14, 2022
affected < 10.4.25-150200.3.28.1fixed 10.4.25-150200.3.28.1
MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/item_func.cc:148.
CVE-2022-27448HigApr 14, 2022
affected < 10.4.25-150200.3.28.1fixed 10.4.25-150200.3.28.1
There is an Assertion failure in MariaDB Server v10.9 and below via 'node->pcur->rel_pos == BTR_PCUR_ON' at /row/row0mysql.cc.
CVE-2022-27447HigApr 14, 2022
affected < 10.4.25-150200.3.28.1fixed 10.4.25-150200.3.28.1
MariaDB Server v10.9 and below was discovered to contain a use-after-free via the component Binary_string::free_buffer() at /sql/sql_string.h.
CVE-2022-27446HigApr 14, 2022
affected < 10.4.25-150200.3.28.1fixed 10.4.25-150200.3.28.1
MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/item_cmpfunc.h.
CVE-2022-27445HigApr 14, 2022
affected < 10.4.25-150200.3.28.1fixed 10.4.25-150200.3.28.1
MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/sql_window.cc.

Page 1 of 3