MariaDB

Source repositories

CVEs (416)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2022-27445	MariaDB MariaDB	Hig	0.49	7.5	0.02	Apr 14, 2022	MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/sql_window.cc.
CVE-2022-27444	MariaDB MariaDB	Hig	0.49	7.5	0.01	Apr 14, 2022	MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/item_subselect.cc.
CVE-2022-27387	MariaDB MariaDB	Hig	0.49	7.5	0.02	Apr 12, 2022	MariaDB Server v10.7 and below was discovered to contain a global buffer overflow in the component decimal_bin_size, which is exploited via specially crafted SQL statements.
CVE-2022-27386	MariaDB MariaDB	Hig	0.49	7.5	0.02	Apr 12, 2022	MariaDB Server v10.7 and below was discovered to contain a segmentation fault via the component sql/sql_class.cc.
CVE-2022-27385	MariaDB MariaDB	Hig	0.49	7.5	0.02	Apr 12, 2022	An issue in the component Used_tables_and_const_cache::used_tables_and_const_cache_join of MariaDB Server v10.7 and below was discovered to allow attackers to cause a Denial of Service (DoS) via specially crafted SQL statements.
CVE-2022-27384	MariaDB MariaDB	Hig	0.49	7.5	0.02	Apr 12, 2022	An issue in the component Item_subselect::init_expr_cache_tracker of MariaDB Server v10.6 and below was discovered to allow attackers to cause a Denial of Service (DoS) via specially crafted SQL statements.
CVE-2022-27383	MariaDB MariaDB	Hig	0.49	7.5	0.02	Apr 12, 2022	MariaDB Server v10.6 and below was discovered to contain an use-after-free in the component my_strcasecmp_8bit, which is exploited via specially crafted SQL statements.
CVE-2022-27382	MariaDB MariaDB	Hig	0.49	7.5	0.02	Apr 12, 2022	MariaDB Server v10.7 and below was discovered to contain a segmentation fault via the component Item_field::used_tables/update_depend_map_for_order.
CVE-2022-27381	MariaDB MariaDB	Hig	0.49	7.5	0.02	Apr 12, 2022	An issue in the component Field::set_default of MariaDB Server v10.6 and below was discovered to allow attackers to cause a Denial of Service (DoS) via specially crafted SQL statements.
CVE-2022-27380	MariaDB MariaDB	Hig	0.49	7.5	0.02	Apr 12, 2022	An issue in the component my_decimal::operator= of MariaDB Server v10.6.3 and below was discovered to allow attackers to cause a Denial of Service (DoS) via specially crafted SQL statements.
CVE-2022-27379	MariaDB MariaDB	Hig	0.49	7.5	0.02	Apr 12, 2022	An issue in the component Arg_comparator::compare_real_fixed of MariaDB Server v10.6.2 and below was discovered to allow attackers to cause a Denial of Service (DoS) via specially crafted SQL statements.
CVE-2022-27378	MariaDB MariaDB	Hig	0.49	7.5	0.02	Apr 12, 2022	An issue in the component Create_tmp_table::finalize of MariaDB Server v10.7 and below was discovered to allow attackers to cause a Denial of Service (DoS) via specially crafted SQL statements.
CVE-2022-27377	MariaDB MariaDB	Hig	0.49	7.5	0.02	Apr 12, 2022	MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component Item_func_in::cleanup(), which is exploited via specially crafted SQL statements.
CVE-2022-27376	MariaDB MariaDB	Hig	0.49	7.5	0.02	Apr 12, 2022	MariaDB Server v10.6.5 and below was discovered to contain an use-after-free in the component Item_args::walk_arg, which is exploited via specially crafted SQL statements.
CVE-2021-46669	MariaDB MariaDB	Hig	0.49	7.5	0.02	Feb 1, 2022	MariaDB through 10.5.9 allows attackers to trigger a convert_const_to_int use-after-free when the BIGINT data type is used.
CVE-2017-16046	MariaDB MariaDB	Hig	0.49	7.5	0.01	Jun 4, 2018	`mariadb` was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
CVE-2017-3302	MariaDB MariaDB	Hig	0.49	7.5	0.05	Feb 12, 2017	Crash in libmysqlclient.so in Oracle MySQL before 5.6.21 and 5.7.x before 5.7.5 and MariaDB through 5.5.54, 10.0.x through 10.0.29, 10.1.x through 10.1.21, and 10.2.x through 10.2.3.
CVE-2016-6663	MariaDB MariaDB	Hig	0.49	7.0	0.04	Dec 13, 2016	Race condition in Oracle MySQL before 5.5.52, 5.6.x before 5.6.33, 5.7.x before 5.7.15, and 8.x before 8.0.1; MariaDB before 5.5.52, 10.0.x before 10.0.28, and 10.1.x before 10.1.18; Percona Server before 5.5.51-38.2, 5.6.x before 5.6.32-78-1, and 5.7.x before 5.7.14-8; and…
CVE-2016-3471	MariaDB MariaDB	Hig	0.49	7.5	0.00	Jul 21, 2016	Unspecified vulnerability in Oracle MySQL 5.5.45 and earlier and 5.6.26 and earlier allows local users to affect confidentiality, integrity, and availability via vectors related to Server: Option.
CVE-2026-32710	MariaDB MariaDB	Hig	0.48	8.5	0.01	Mar 20, 2026	MariaDB server is a community developed fork of MySQL server. An authenticated user can crash MariaDB versions 11.4 before 11.4.10 and 11.8 before 11.8.6 via a bug in JSON_SCHEMA_VALID() function. Under certain conditions it might be possible to turn the crash into a remote code…

CVE-2022-27445HigApr 14, 2022
MariaDB
MariaDB
risk 0.49cvss 7.5epss 0.02
MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/sql_window.cc.
CVE-2022-27444HigApr 14, 2022
MariaDB
MariaDB
risk 0.49cvss 7.5epss 0.01
MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/item_subselect.cc.
CVE-2022-27387HigApr 12, 2022
MariaDB
MariaDB
risk 0.49cvss 7.5epss 0.02
MariaDB Server v10.7 and below was discovered to contain a global buffer overflow in the component decimal_bin_size, which is exploited via specially crafted SQL statements.
CVE-2022-27386HigApr 12, 2022
MariaDB
MariaDB
risk 0.49cvss 7.5epss 0.02
MariaDB Server v10.7 and below was discovered to contain a segmentation fault via the component sql/sql_class.cc.
CVE-2022-27385HigApr 12, 2022
MariaDB
MariaDB
risk 0.49cvss 7.5epss 0.02
An issue in the component Used_tables_and_const_cache::used_tables_and_const_cache_join of MariaDB Server v10.7 and below was discovered to allow attackers to cause a Denial of Service (DoS) via specially crafted SQL statements.
CVE-2022-27384HigApr 12, 2022
MariaDB
MariaDB
risk 0.49cvss 7.5epss 0.02
An issue in the component Item_subselect::init_expr_cache_tracker of MariaDB Server v10.6 and below was discovered to allow attackers to cause a Denial of Service (DoS) via specially crafted SQL statements.
CVE-2022-27383HigApr 12, 2022
MariaDB
MariaDB
risk 0.49cvss 7.5epss 0.02
MariaDB Server v10.6 and below was discovered to contain an use-after-free in the component my_strcasecmp_8bit, which is exploited via specially crafted SQL statements.
CVE-2022-27382HigApr 12, 2022
MariaDB
MariaDB
risk 0.49cvss 7.5epss 0.02
MariaDB Server v10.7 and below was discovered to contain a segmentation fault via the component Item_field::used_tables/update_depend_map_for_order.
CVE-2022-27381HigApr 12, 2022
MariaDB
MariaDB
risk 0.49cvss 7.5epss 0.02
An issue in the component Field::set_default of MariaDB Server v10.6 and below was discovered to allow attackers to cause a Denial of Service (DoS) via specially crafted SQL statements.
CVE-2022-27380HigApr 12, 2022
MariaDB
MariaDB
risk 0.49cvss 7.5epss 0.02
An issue in the component my_decimal::operator= of MariaDB Server v10.6.3 and below was discovered to allow attackers to cause a Denial of Service (DoS) via specially crafted SQL statements.
CVE-2022-27379HigApr 12, 2022
MariaDB
MariaDB
risk 0.49cvss 7.5epss 0.02
An issue in the component Arg_comparator::compare_real_fixed of MariaDB Server v10.6.2 and below was discovered to allow attackers to cause a Denial of Service (DoS) via specially crafted SQL statements.
CVE-2022-27378HigApr 12, 2022
MariaDB
MariaDB
risk 0.49cvss 7.5epss 0.02
An issue in the component Create_tmp_table::finalize of MariaDB Server v10.7 and below was discovered to allow attackers to cause a Denial of Service (DoS) via specially crafted SQL statements.
CVE-2022-27377HigApr 12, 2022
MariaDB
MariaDB
risk 0.49cvss 7.5epss 0.02
MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component Item_func_in::cleanup(), which is exploited via specially crafted SQL statements.
CVE-2022-27376HigApr 12, 2022
MariaDB
MariaDB
risk 0.49cvss 7.5epss 0.02
MariaDB Server v10.6.5 and below was discovered to contain an use-after-free in the component Item_args::walk_arg, which is exploited via specially crafted SQL statements.
CVE-2021-46669HigFeb 1, 2022
MariaDB
MariaDB
risk 0.49cvss 7.5epss 0.02
MariaDB through 10.5.9 allows attackers to trigger a convert_const_to_int use-after-free when the BIGINT data type is used.
CVE-2017-16046HigJun 4, 2018
MariaDB
MariaDB
risk 0.49cvss 7.5epss 0.01
`mariadb` was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
CVE-2017-3302HigFeb 12, 2017
MariaDB
MariaDB
risk 0.49cvss 7.5epss 0.05
Crash in libmysqlclient.so in Oracle MySQL before 5.6.21 and 5.7.x before 5.7.5 and MariaDB through 5.5.54, 10.0.x through 10.0.29, 10.1.x through 10.1.21, and 10.2.x through 10.2.3.
CVE-2016-6663HigDec 13, 2016
MariaDB
MariaDB
risk 0.49cvss 7.0epss 0.04
Race condition in Oracle MySQL before 5.5.52, 5.6.x before 5.6.33, 5.7.x before 5.7.15, and 8.x before 8.0.1; MariaDB before 5.5.52, 10.0.x before 10.0.28, and 10.1.x before 10.1.18; Percona Server before 5.5.51-38.2, 5.6.x before 5.6.32-78-1, and 5.7.x before 5.7.14-8; and…
CVE-2016-3471HigJul 21, 2016
MariaDB
MariaDB
risk 0.49cvss 7.5epss 0.00
Unspecified vulnerability in Oracle MySQL 5.5.45 and earlier and 5.6.26 and earlier allows local users to affect confidentiality, integrity, and availability via vectors related to Server: Option.
CVE-2026-32710HigMar 20, 2026
MariaDB
MariaDB
risk 0.48cvss 8.5epss 0.01
MariaDB server is a community developed fork of MySQL server. An authenticated user can crash MariaDB versions 11.4 before 11.4.10 and 11.8 before 11.8.6 via a bug in JSON_SCHEMA_VALID() function. Under certain conditions it might be possible to turn the crash into a remote code…

Page 3 of 21