mariadb vulnerabilities (Debian)
43 vulnerabilities.
-
mariadbDebian MariaDB server: Authorization bypass via ALTER TABLE ... CONVERT ... PARTITION 8.0 High -
mariadbDebian MariaDB: Insufficient quoting in mariadb-dump and SHOW commands 7.7 High -
mariadbDebian MariaDB: Out-of-bound buffer read on in `ST_Area` of a multipolygon. 4.3 Medium -
mariadbDebian MariaDB: Out-of-bound buffer write on in `ST_AsText` of nested GeometryCollections 9.9 Critical -
mariadbDebian MariaDB: GRANT PROXY with empty password incorrectly checks grantor's privileges 8.8 High -
mariadbDebian MariaDB: Unauthorized file access via CONNECT engine UDFs 5.4 Medium -
mariadbDebian MariaDB: privilege escalation via incorrect view frm parsing 7.2 High -
mariadbDebian MariaDB: database privilege escalation via user / role name collision in the acl cache 6.4 Medium -
mariadbDebian MariaDB: insufficient validation of binary frm data when opening a table 8.0 High -
mariadbDebian MariaDB: environment injection via wsrep bootstrap in the mariadb.service file 8.4 High -
mariadbDebian MariaDB: mysql_json plugin OOB reads 4.4 Medium -
mariadbDebian MariaDB: `qc_info` plugin can do OOB reads if query contains \0 6.4 Medium -
mariadbDebian MariaDB: one byte OOB write in DOS tables of the CONNECT engine 8.5 High -
mariadbDebian MariaDB: Numerous issues caused by historical #mysql50# tablename encoding bypass. 9.9 Critical -
mariadbDebian Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server:... 2.7 Low -
mariadbDebian Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server:... 6.2 Medium -
mariadbDebian Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server:... 6.6 Medium -
mariadbDebian Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server:... 6.4 Medium -
mariadbDebian Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server:... 4.4 Medium -
mariadbDebian Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server:... 4.9 Medium -
mariadbDebian MariaDB server has unsafe parameter handling in `wsrep_notify_cmd` 10.0 Critical -
mariadbDebian MariaDB: unsafe usage of `wsrep_sst_receive_address` values on the joiner side 8.0 High -
mariadbDebian MariaDB: wsrep SST unsafe parameter handling on the donor side (rsync) 8.0 High -
mariadbDebian MariaDB: FILE privilege was not checked for subqueries in the FROM clause 5.0 Medium -
mariadbDebian MariaDB: mysql_real_escape_string() incorrectly handled big5 6.9 Medium -
mariadbDebian MariaDB: path traversal in mbstream 6.3 Medium -
mariadbDebian MariaDB: Authorization bypass in role-based routine-level privilege check exposes stored routine definitions 4.3 Medium -
mariadbDebian MariaDB: wsrep SST unsafe parameter handling on the donor side 8.0 High -
mariadbDebian Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). ... 6.5 Medium -
mariadbDebian An issue was discovered in MariaDB Server before 11.4.10, 11.5.x through 11.8.x before 11.8.6,... 6.5 Medium -
mariadbDebian Heap-based Buffer Overflow in MariaDB 8.6 High -
mariadbDebian MariaDB Server Audit Plugin Comment Handling Bypass 5.3 Medium -
mariadbDebian Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). ... 6.5 Medium -
mariadbDebian MariaDB mariadb-dump Utility Directory Traversal Remote Code Execution Vulnerability 7.0 High -
mariadbDebian Vulnerability in the MySQL Client product of Oracle MySQL (component: Client: mysqldump). ... 5.3 Medium -
mariadbDebian Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported... 5.5 Medium -
mariadbDebian MariaDB Server 10.10 through 10.11.* and 11.0 through 11.4.* crashes in JOIN:... 4.9 Medium -
mariadbDebian MariaDB Server 10.4 through 10.5.*, 10.6 through 10.6.*, 10.7 through 10.11.*, 11.0 through 11.0.... 4.9 Medium -
mariadbDebian MariaDB Server 10.4 through 10.5.*, 10.6 through 10.6.*, 10.7 through 10.11.*, and 11.0 through... 4.9 Medium -
mariadbDebian Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported... 4.9 Medium -
mariadbDebian Vulnerability in the MySQL Server product of Oracle MySQL (component: Client: mysqldump). ... 4.9 Medium -
mariadbDebian Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported... 4.9 Medium -
mariadbDebian MariaDB Server before 10.3.34 thru 10.9.3 is vulnerable to Denial of Service. It is possible for... 6.5 Medium