MariaDB

Source repositories

CVEs (416)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2023-5157	MariaDB MariaDB	Hig	0.49	7.5	0.02	Sep 27, 2023	A vulnerability was found in MariaDB. An OpenVAS port scan on ports 3306 and 4567 allows a malicious remote client to cause a denial of service.
CVE-2022-32091	MariaDB MariaDB	Hig	0.49	7.5	0.02	Jul 1, 2022	MariaDB v10.7 was discovered to contain an use-after-poison in in __interceptor_memset at /libsanitizer/sanitizer_common/sanitizer_common_interceptors.inc.
CVE-2022-32089	MariaDB MariaDB	Hig	0.49	7.5	0.02	Jul 1, 2022	MariaDB v10.5 to v10.7 was discovered to contain a segmentation fault via the component st_select_lex_unit::exclude_level.
CVE-2022-32088	MariaDB MariaDB	Hig	0.49	7.5	0.02	Jul 1, 2022	MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component Exec_time_tracker::get_loops/Filesort_tracker::report_use/filesort.
CVE-2022-32087	MariaDB MariaDB	Hig	0.49	7.5	0.02	Jul 1, 2022	MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component Item_args::walk_args.
CVE-2022-32086	MariaDB MariaDB	Hig	0.49	7.5	0.01	Jul 1, 2022	MariaDB v10.4 to v10.8 was discovered to contain a segmentation fault via the component Item_field::fix_outer_field.
CVE-2022-32085	MariaDB MariaDB	Hig	0.49	7.5	0.02	Jul 1, 2022	MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component Item_func_in::cleanup/Item::cleanup_processor.
CVE-2022-32084	MariaDB MariaDB	Hig	0.49	7.5	0.02	Jul 1, 2022	MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component sub_select.
CVE-2022-32083	MariaDB MariaDB	Hig	0.49	7.5	0.02	Jul 1, 2022	MariaDB v10.2 to v10.6.1 was discovered to contain a segmentation fault via the component Item_subselect::init_expr_cache_tracker.
CVE-2022-32082	MariaDB MariaDB	Hig	0.49	7.5	0.02	Jul 1, 2022	MariaDB v10.5 to v10.7 was discovered to contain an assertion failure at table->get_ref_count() == 0 in dict0dict.cc.
CVE-2022-32081	MariaDB MariaDB	Hig	0.49	7.5	0.02	Jul 1, 2022	MariaDB v10.4 to v10.7 was discovered to contain an use-after-poison in prepare_inplace_add_virtual at /storage/innobase/handler/handler0alter.cc.
CVE-2022-27457	MariaDB MariaDB	Hig	0.49	7.5	0.02	Apr 14, 2022	MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component my_mb_wc_latin1 at /strings/ctype-latin1.c.
CVE-2022-27456	MariaDB MariaDB	Hig	0.49	7.5	0.02	Apr 14, 2022	MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component VDec::VDec at /sql/sql_type.cc.
CVE-2022-27455	MariaDB MariaDB	Hig	0.49	7.5	0.02	Apr 14, 2022	MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component my_wildcmp_8bit_impl at /strings/ctype-simple.c.
CVE-2022-27452	MariaDB MariaDB	Hig	0.49	7.5	0.02	Apr 14, 2022	MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/item_cmpfunc.cc.
CVE-2022-27451	MariaDB MariaDB	Hig	0.49	7.5	0.02	Apr 14, 2022	MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/field_conv.cc.
CVE-2022-27449	MariaDB MariaDB	Hig	0.49	7.5	0.02	Apr 14, 2022	MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/item_func.cc:148.
CVE-2022-27448	MariaDB MariaDB	Hig	0.49	7.5	0.02	Apr 14, 2022	There is an Assertion failure in MariaDB Server v10.9 and below via 'node->pcur->rel_pos == BTR_PCUR_ON' at /row/row0mysql.cc.
CVE-2022-27447	MariaDB MariaDB	Hig	0.49	7.5	0.02	Apr 14, 2022	MariaDB Server v10.9 and below was discovered to contain a use-after-free via the component Binary_string::free_buffer() at /sql/sql_string.h.
CVE-2022-27446	MariaDB MariaDB	Hig	0.49	7.5	0.02	Apr 14, 2022	MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/item_cmpfunc.h.

CVE-2023-5157HigSep 27, 2023
MariaDB
MariaDB
risk 0.49cvss 7.5epss 0.02
A vulnerability was found in MariaDB. An OpenVAS port scan on ports 3306 and 4567 allows a malicious remote client to cause a denial of service.
CVE-2022-32091HigJul 1, 2022
MariaDB
MariaDB
risk 0.49cvss 7.5epss 0.02
MariaDB v10.7 was discovered to contain an use-after-poison in in __interceptor_memset at /libsanitizer/sanitizer_common/sanitizer_common_interceptors.inc.
CVE-2022-32089HigJul 1, 2022
MariaDB
MariaDB
risk 0.49cvss 7.5epss 0.02
MariaDB v10.5 to v10.7 was discovered to contain a segmentation fault via the component st_select_lex_unit::exclude_level.
CVE-2022-32088HigJul 1, 2022
MariaDB
MariaDB
risk 0.49cvss 7.5epss 0.02
MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component Exec_time_tracker::get_loops/Filesort_tracker::report_use/filesort.
CVE-2022-32087HigJul 1, 2022
MariaDB
MariaDB
risk 0.49cvss 7.5epss 0.02
MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component Item_args::walk_args.
CVE-2022-32086HigJul 1, 2022
MariaDB
MariaDB
risk 0.49cvss 7.5epss 0.01
MariaDB v10.4 to v10.8 was discovered to contain a segmentation fault via the component Item_field::fix_outer_field.
CVE-2022-32085HigJul 1, 2022
MariaDB
MariaDB
risk 0.49cvss 7.5epss 0.02
MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component Item_func_in::cleanup/Item::cleanup_processor.
CVE-2022-32084HigJul 1, 2022
MariaDB
MariaDB
risk 0.49cvss 7.5epss 0.02
MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component sub_select.
CVE-2022-32083HigJul 1, 2022
MariaDB
MariaDB
risk 0.49cvss 7.5epss 0.02
MariaDB v10.2 to v10.6.1 was discovered to contain a segmentation fault via the component Item_subselect::init_expr_cache_tracker.
CVE-2022-32082HigJul 1, 2022
MariaDB
MariaDB
risk 0.49cvss 7.5epss 0.02
MariaDB v10.5 to v10.7 was discovered to contain an assertion failure at table->get_ref_count() == 0 in dict0dict.cc.
CVE-2022-32081HigJul 1, 2022
MariaDB
MariaDB
risk 0.49cvss 7.5epss 0.02
MariaDB v10.4 to v10.7 was discovered to contain an use-after-poison in prepare_inplace_add_virtual at /storage/innobase/handler/handler0alter.cc.
CVE-2022-27457HigApr 14, 2022
MariaDB
MariaDB
risk 0.49cvss 7.5epss 0.02
MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component my_mb_wc_latin1 at /strings/ctype-latin1.c.
CVE-2022-27456HigApr 14, 2022
MariaDB
MariaDB
risk 0.49cvss 7.5epss 0.02
MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component VDec::VDec at /sql/sql_type.cc.
CVE-2022-27455HigApr 14, 2022
MariaDB
MariaDB
risk 0.49cvss 7.5epss 0.02
MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component my_wildcmp_8bit_impl at /strings/ctype-simple.c.
CVE-2022-27452HigApr 14, 2022
MariaDB
MariaDB
risk 0.49cvss 7.5epss 0.02
MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/item_cmpfunc.cc.
CVE-2022-27451HigApr 14, 2022
MariaDB
MariaDB
risk 0.49cvss 7.5epss 0.02
MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/field_conv.cc.
CVE-2022-27449HigApr 14, 2022
MariaDB
MariaDB
risk 0.49cvss 7.5epss 0.02
MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/item_func.cc:148.
CVE-2022-27448HigApr 14, 2022
MariaDB
MariaDB
risk 0.49cvss 7.5epss 0.02
There is an Assertion failure in MariaDB Server v10.9 and below via 'node->pcur->rel_pos == BTR_PCUR_ON' at /row/row0mysql.cc.
CVE-2022-27447HigApr 14, 2022
MariaDB
MariaDB
risk 0.49cvss 7.5epss 0.02
MariaDB Server v10.9 and below was discovered to contain a use-after-free via the component Binary_string::free_buffer() at /sql/sql_string.h.
CVE-2022-27446HigApr 14, 2022
MariaDB
MariaDB
risk 0.49cvss 7.5epss 0.02
MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/item_cmpfunc.h.

Page 2 of 21