mariadb-connector-java vulnerabilities (Debian)
8 vulnerabilities.
-
mariadb-connector-javaDebian MariaDB Connector/J: Server could switch character_set_results away from UTF-8 without the client noticing 5.9 Medium -
mariadb-connector-javaDebian MariaDB Connector/J : XA recover() trusted server-supplied gtrid and bqual lengths 3.7 Low -
mariadb-connector-javaDebian MariaDB Connector/J: Length-encoded integers larger than Integer.MAX_VALUE were truncated before being used as lengths 5.9 Medium -
mariadb-connector-javaDebian MariaDB Connector/J: Rogue server can crash the client during caching_sha2_password authentication 5.9 Medium -
mariadb-connector-javaDebian MariaDB Connector/J: Rogue server can make the client read past the packet through server-declared lengths 5.9 Medium -
mariadb-connector-javaDebian MariaDB Connector/J: Rogue server can drive large heap allocations from server-declared lengths in OK packets 5.9 Medium -
mariadb-connector-javaDebian MariaDB Connector/J: LOAD DATA LOCAL INFILE file check could be satisfied by text inside quoted identifiers, letting a malicious server read client files 5.9 Medium -
mariadb-connector-javaDebian MariaDB Connector/J does not enforce allowLocalInfile=false on server-initiated LOCAL INFILE requests 3.7 Low