mariadb vulnerabilities (Alpaquita)
46 vulnerabilities.
mariadbAlpaquitaMariaDB server: Authorization bypass via ALTER TABLE ... CONVERT ... PARTITION8.0 HighmariadbAlpaquitaMariaDB: Insufficient quoting in mariadb-dump and SHOW commands7.7 HighmariadbAlpaquitaMariaDB: Out-of-bound buffer read on in `ST_Area` of a multipolygon.4.3 MediummariadbAlpaquitaMariaDB: Out-of-bound buffer write on in `ST_AsText` of nested GeometryCollections9.9 CriticalmariadbAlpaquitaMariaDB: GRANT PROXY with empty password incorrectly checks grantor's privileges8.8 HighmariadbAlpaquitaMariaDB: Unauthorized file access via CONNECT engine UDFs5.4 MediummariadbAlpaquitaMariaDB: privilege escalation via incorrect view frm parsing7.2 HighmariadbAlpaquitaMariaDB: database privilege escalation via user / role name collision in the acl cache6.4 MediummariadbAlpaquitaMariaDB: insufficient validation of binary frm data when opening a table8.0 HighmariadbAlpaquitaMariaDB Connector/C: libmariadb allowed cleartext password leakage on TLS hostname verification failure5.9 MediummariadbAlpaquitaMariaDB: environment injection via wsrep bootstrap in the mariadb.service file8.4 HighmariadbAlpaquitaMariaDB: mysql_json plugin OOB reads4.4 MediummariadbAlpaquitaMariaDB: `qc_info` plugin can do OOB reads if query contains \06.4 MediummariadbAlpaquitaMariaDB: one byte OOB write in DOS tables of the CONNECT engine8.5 HighmariadbAlpaquitaMariaDB: Insecure $HOME in MariaDB rpm packages8.4 HighmariadbAlpaquitaMariaDB: Numerous issues caused by historical #mysql50# tablename encoding bypass.9.9 CriticalmariadbAlpaquitaVulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server:...2.7 LowmariadbAlpaquitaVulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server:...6.2 MediummariadbAlpaquitaVulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server:...6.6 MediummariadbAlpaquitaVulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server:...6.4 MediummariadbAlpaquitaVulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server:...4.4 MediummariadbAlpaquitaVulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server:...6.5 MediummariadbAlpaquitaVulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server:...4.9 MediummariadbAlpaquitaMariaDB server has unsafe parameter handling in `wsrep_notify_cmd`10.0 CriticalmariadbAlpaquitaMariaDB: unsafe usage of `wsrep_sst_receive_address` values on the joiner side8.0 HighmariadbAlpaquitaMariaDB: wsrep SST unsafe parameter handling on the donor side (rsync)8.0 HighmariadbAlpaquitaMariaDB: FILE privilege was not checked for subqueries in the FROM clause5.0 MediummariadbAlpaquitaMariaDB: mysql_real_escape_string() incorrectly handled big56.9 MediummariadbAlpaquitaMariaDB: path traversal in mbstream6.3 MediummariadbAlpaquitaMariaDB: Argument injection in CONNECT REST Xcurl on Windows via unsanitized URL6.3 MediummariadbAlpaquitaMariaDB: Authorization bypass in role-based routine-level privilege check exposes stored routine definitions4.3 MediummariadbAlpaquitaMariaDB: wsrep SST unsafe parameter handling on the donor side8.0 HighmariadbAlpaquitaVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). ...6.5 MediummariadbAlpaquitaAn issue was discovered in MariaDB Server before 11.4.10, 11.5.x through 11.8.x before 11.8.6,...6.5 MediummariadbAlpaquitaHeap-based Buffer Overflow in MariaDB8.6 HighmariadbAlpaquitaMariaDB Server Audit Plugin Comment Handling Bypass5.3 MediummariadbAlpaquitaVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). ...6.5 MediummariadbAlpaquitaMariaDB mariadb-dump Utility Directory Traversal Remote Code Execution Vulnerability7.0 HighmariadbAlpaquitaVulnerability in the MySQL Client product of Oracle MySQL (component: Client: mysqldump). ...5.3 MediummariadbAlpaquitaVulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported...5.5 MediummariadbAlpaquitaMariaDB Server 10.10 through 10.11.* and 11.0 through 11.4.* crashes in JOIN:...4.9 MediummariadbAlpaquitaMariaDB Server 10.4 through 10.5.*, 10.6 through 10.6.*, 10.7 through 10.11.*, 11.0 through 11.0....4.9 MediummariadbAlpaquitaMariaDB Server 10.4 through 10.5.*, 10.6 through 10.6.*, 10.7 through 10.11.*, and 11.0 through...4.9 MediummariadbAlpaquitaMariaDB Server 10.4 before 10.4.33, 10.5 before 10.5.24, 10.6 before 10.6.17, 10.7 through 10.11...4.9 MediummariadbAlpaquitaVulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported...4.9 MediummariadbAlpaquitaVulnerability in the MySQL Server product of Oracle MySQL (component: Client: mysqldump). ...4.9 Medium