Vulnerability-Lookup

RHSA-2022_5948

Vulnerability from csaf_redhat - Published: 2022-08-09 12:23 - Updated: 2024-11-15 14:56

Summary

Red Hat Security Advisory: galera, mariadb, and mysql-selinux security, bug fix, and enhancement update

Severity

Moderate

Notes

Topic: An update for galera, mariadb, and mysql-selinux is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Details: MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL. The following packages have been upgraded to a later upstream version: galera (26.4.11), mariadb (10.5.16), mysql-selinux (1.0.5). Security Fix(es): * mariadb: MariaDB through 10.5.9 allows attackers to trigger a convert_const_to_int use-after-free when the BIGINT data type is used (CVE-2021-46669) * mariadb: lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer (CVE-2022-24048) * mariadb: lack of validating the existence of an object prior to performing operations on the object (CVE-2022-24050) * mariadb: lack of proper validation of a user-supplied string before using it as a format specifier (CVE-2022-24051) * mariadb: CONNECT Storage Engine Heap-based Buffer Overflow Privilege Escalation Vulnerability (CVE-2022-24052) * mariadb: assertion failure in Item_args::walk_arg (CVE-2022-27376) * mariadb: use-after-poison when complex conversion is involved in blob (CVE-2022-27377) * mariadb: server crash in create_tmp_table::finalize (CVE-2022-27378) * mariadb: server crash in component arg_comparator::compare_real_fixed (CVE-2022-27379) * mariadb: server crash at my_decimal::operator= (CVE-2022-27380) * mariadb: server crash at Field::set_default via specially crafted SQL statements (CVE-2022-27381) * mariadb: assertion failure via component Item_field::used_tables/update_depend_map_for_order (CVE-2022-27382) * mariadb: use-after-poison in my_strcasecmp_8bit() of ctype-simple.c (CVE-2022-27383) * mariadb: crash via component Item_subselect::init_expr_cache_tracker (CVE-2022-27384) * mariadb: server crashes in query_arena::set_query_arena upon SELECT from view (CVE-2022-27386) * mariadb: assertion failures in decimal_bin_size (CVE-2022-27387) * mariadb: crash when using HAVING with NOT EXIST predicate in an equality (CVE-2022-27444) * mariadb: assertion failure in compare_order_elements (CVE-2022-27445) * mariadb: crash when using HAVING with IS NULL predicate in an equality (CVE-2022-27446) * mariadb: use-after-poison in Binary_string::free_buffer (CVE-2022-27447) * mariadb: crash in multi-update and implicit grouping (CVE-2022-27448) * mariadb: assertion failure in sql/item_func.cc (CVE-2022-27449) * mariadb: crash via window function in expression in ORDER BY (CVE-2022-27451) * mariadb: assertion failure in sql/item_cmpfunc.cc (CVE-2022-27452) * mariadb: use-after-free when WHERE has subquery with an outer reference in HAVING (CVE-2022-27455) * mariadb: assertion failure in VDec::VDec at /sql/sql_type.cc (CVE-2022-27456) * mariadb: incorrect key in "dup value" error after long unique (CVE-2022-27457) * mariadb: use-after-poison in Binary_string::free_buffer (CVE-2022-27458) * mariadb: improper locking due to the unreleased lock in extra/mariabackup/ds_compress.cc (CVE-2022-31622) * mariadb: improper locking due to the unreleased lock in extra/mariabackup/ds_compress.cc (CVE-2022-31623) * mariadb: Crash executing query with VIEW, aggregate and subquery (CVE-2021-46659) * mariadb: MariaDB allows an application crash in find_field_in_tables and find_order_in_list via an unused common table expression (CTE) (CVE-2021-46661) * mariadb: MariaDB through 10.5.13 allows a ha_maria::extra application crash via certain SELECT statements (CVE-2021-46663) * mariadb: MariaDB through 10.5.9 allows an application crash in sub_select_postjoin_aggr for a NULL value of aggr (CVE-2021-46664) * mariadb: MariaDB through 10.5.9 allows a sql_parse.cc application crash because of incorrect used_tables expectations (CVE-2021-46665) * mariadb: MariaDB through 10.5.9 allows an application crash via certain long SELECT DISTINCT statements (CVE-2021-46668) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2021-46659

MariaDB before 10.7.2 allows an application crash because it does not recognize that SELECT_LEX::nest_level is local to each VIEW.

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-20 - Improper Input Validation

Affected products

Fixed 194 products

Product	Version	Remediation
Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:mariadb-3:10.5.16-2.el9_0.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:mariadb-3:10.5.16-2.el9_0.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:mariadb-3:10.5.16-2.el9_0.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:mariadb-3:10.5.16-2.el9_0.src	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:mariadb-3:10.5.16-2.el9_0.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:mariadb-backup-3:10.5.16-2.el9_0.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:mariadb-backup-3:10.5.16-2.el9_0.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:mariadb-backup-3:10.5.16-2.el9_0.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:mariadb-backup-3:10.5.16-2.el9_0.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:mariadb-backup-debuginfo-3:10.5.16-2.el9_0.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:mariadb-backup-debuginfo-3:10.5.16-2.el9_0.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:mariadb-backup-debuginfo-3:10.5.16-2.el9_0.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:mariadb-backup-debuginfo-3:10.5.16-2.el9_0.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:mariadb-common-3:10.5.16-2.el9_0.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:mariadb-common-3:10.5.16-2.el9_0.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:mariadb-common-3:10.5.16-2.el9_0.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:mariadb-common-3:10.5.16-2.el9_0.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:mariadb-debuginfo-3:10.5.16-2.el9_0.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:mariadb-debuginfo-3:10.5.16-2.el9_0.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:mariadb-debuginfo-3:10.5.16-2.el9_0.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:mariadb-debuginfo-3:10.5.16-2.el9_0.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:mariadb-debugsource-3:10.5.16-2.el9_0.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:mariadb-debugsource-3:10.5.16-2.el9_0.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:mariadb-debugsource-3:10.5.16-2.el9_0.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:mariadb-debugsource-3:10.5.16-2.el9_0.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:mariadb-devel-3:10.5.16-2.el9_0.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:mariadb-devel-3:10.5.16-2.el9_0.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:mariadb-devel-3:10.5.16-2.el9_0.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:mariadb-devel-3:10.5.16-2.el9_0.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:mariadb-embedded-3:10.5.16-2.el9_0.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:mariadb-embedded-3:10.5.16-2.el9_0.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:mariadb-embedded-3:10.5.16-2.el9_0.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:mariadb-embedded-3:10.5.16-2.el9_0.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:mariadb-embedded-debuginfo-3:10.5.16-2.el9_0.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:mariadb-embedded-debuginfo-3:10.5.16-2.el9_0.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:mariadb-embedded-debuginfo-3:10.5.16-2.el9_0.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:mariadb-embedded-debuginfo-3:10.5.16-2.el9_0.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:mariadb-embedded-devel-3:10.5.16-2.el9_0.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:mariadb-embedded-devel-3:10.5.16-2.el9_0.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:mariadb-embedded-devel-3:10.5.16-2.el9_0.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:mariadb-embedded-devel-3:10.5.16-2.el9_0.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:mariadb-errmsg-3:10.5.16-2.el9_0.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:mariadb-errmsg-3:10.5.16-2.el9_0.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:mariadb-errmsg-3:10.5.16-2.el9_0.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:mariadb-errmsg-3:10.5.16-2.el9_0.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:mariadb-gssapi-server-3:10.5.16-2.el9_0.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:mariadb-gssapi-server-3:10.5.16-2.el9_0.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:mariadb-gssapi-server-3:10.5.16-2.el9_0.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:mariadb-gssapi-server-3:10.5.16-2.el9_0.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:mariadb-gssapi-server-debuginfo-3:10.5.16-2.el9_0.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:mariadb-gssapi-server-debuginfo-3:10.5.16-2.el9_0.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:mariadb-gssapi-server-debuginfo-3:10.5.16-2.el9_0.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:mariadb-gssapi-server-debuginfo-3:10.5.16-2.el9_0.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:mariadb-oqgraph-engine-3:10.5.16-2.el9_0.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:mariadb-oqgraph-engine-3:10.5.16-2.el9_0.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:mariadb-oqgraph-engine-3:10.5.16-2.el9_0.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:mariadb-oqgraph-engine-3:10.5.16-2.el9_0.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:mariadb-oqgraph-engine-debuginfo-3:10.5.16-2.el9_0.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:mariadb-oqgraph-engine-debuginfo-3:10.5.16-2.el9_0.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:mariadb-oqgraph-engine-debuginfo-3:10.5.16-2.el9_0.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:mariadb-oqgraph-engine-debuginfo-3:10.5.16-2.el9_0.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:mariadb-pam-3:10.5.16-2.el9_0.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:mariadb-pam-3:10.5.16-2.el9_0.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:mariadb-pam-3:10.5.16-2.el9_0.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:mariadb-pam-3:10.5.16-2.el9_0.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:mariadb-pam-debuginfo-3:10.5.16-2.el9_0.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:mariadb-pam-debuginfo-3:10.5.16-2.el9_0.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:mariadb-pam-debuginfo-3:10.5.16-2.el9_0.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:mariadb-pam-debuginfo-3:10.5.16-2.el9_0.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:mariadb-server-3:10.5.16-2.el9_0.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:mariadb-server-3:10.5.16-2.el9_0.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:mariadb-server-3:10.5.16-2.el9_0.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:mariadb-server-3:10.5.16-2.el9_0.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:mariadb-server-debuginfo-3:10.5.16-2.el9_0.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:mariadb-server-debuginfo-3:10.5.16-2.el9_0.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:mariadb-server-debuginfo-3:10.5.16-2.el9_0.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:mariadb-server-debuginfo-3:10.5.16-2.el9_0.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:mariadb-server-galera-3:10.5.16-2.el9_0.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:mariadb-server-galera-3:10.5.16-2.el9_0.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:mariadb-server-galera-3:10.5.16-2.el9_0.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:mariadb-server-galera-3:10.5.16-2.el9_0.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:mariadb-server-utils-3:10.5.16-2.el9_0.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:mariadb-server-utils-3:10.5.16-2.el9_0.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:mariadb-server-utils-3:10.5.16-2.el9_0.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:mariadb-server-utils-3:10.5.16-2.el9_0.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:mariadb-server-utils-debuginfo-3:10.5.16-2.el9_0.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:mariadb-server-utils-debuginfo-3:10.5.16-2.el9_0.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:mariadb-server-utils-debuginfo-3:10.5.16-2.el9_0.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:mariadb-server-utils-debuginfo-3:10.5.16-2.el9_0.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:mariadb-test-3:10.5.16-2.el9_0.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:mariadb-test-3:10.5.16-2.el9_0.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:mariadb-test-3:10.5.16-2.el9_0.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:mariadb-test-3:10.5.16-2.el9_0.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:mariadb-test-debuginfo-3:10.5.16-2.el9_0.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:mariadb-test-debuginfo-3:10.5.16-2.el9_0.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:mariadb-test-debuginfo-3:10.5.16-2.el9_0.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:mariadb-test-debuginfo-3:10.5.16-2.el9_0.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-9.0.0.Z.MAIN.EUS:mariadb-3:10.5.16-2.el9_0.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.0.0.Z.MAIN.EUS:mariadb-3:10.5.16-2.el9_0.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-9.0.0.Z.MAIN.EUS:mariadb-3:10.5.16-2.el9_0.s390x	—	Vendor Fix fix
Unresolved product id: CRB-9.0.0.Z.MAIN.EUS:mariadb-3:10.5.16-2.el9_0.src	—	Vendor Fix fix
Unresolved product id: CRB-9.0.0.Z.MAIN.EUS:mariadb-3:10.5.16-2.el9_0.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-9.0.0.Z.MAIN.EUS:mariadb-backup-3:10.5.16-2.el9_0.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.0.0.Z.MAIN.EUS:mariadb-backup-3:10.5.16-2.el9_0.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-9.0.0.Z.MAIN.EUS:mariadb-backup-3:10.5.16-2.el9_0.s390x	—	Vendor Fix fix
Unresolved product id: CRB-9.0.0.Z.MAIN.EUS:mariadb-backup-3:10.5.16-2.el9_0.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-9.0.0.Z.MAIN.EUS:mariadb-backup-debuginfo-3:10.5.16-2.el9_0.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.0.0.Z.MAIN.EUS:mariadb-backup-debuginfo-3:10.5.16-2.el9_0.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-9.0.0.Z.MAIN.EUS:mariadb-backup-debuginfo-3:10.5.16-2.el9_0.s390x	—	Vendor Fix fix
Unresolved product id: CRB-9.0.0.Z.MAIN.EUS:mariadb-backup-debuginfo-3:10.5.16-2.el9_0.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-9.0.0.Z.MAIN.EUS:mariadb-common-3:10.5.16-2.el9_0.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.0.0.Z.MAIN.EUS:mariadb-common-3:10.5.16-2.el9_0.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-9.0.0.Z.MAIN.EUS:mariadb-common-3:10.5.16-2.el9_0.s390x	—	Vendor Fix fix
Unresolved product id: CRB-9.0.0.Z.MAIN.EUS:mariadb-common-3:10.5.16-2.el9_0.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-9.0.0.Z.MAIN.EUS:mariadb-debuginfo-3:10.5.16-2.el9_0.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.0.0.Z.MAIN.EUS:mariadb-debuginfo-3:10.5.16-2.el9_0.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-9.0.0.Z.MAIN.EUS:mariadb-debuginfo-3:10.5.16-2.el9_0.s390x	—	Vendor Fix fix
Unresolved product id: CRB-9.0.0.Z.MAIN.EUS:mariadb-debuginfo-3:10.5.16-2.el9_0.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-9.0.0.Z.MAIN.EUS:mariadb-debugsource-3:10.5.16-2.el9_0.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.0.0.Z.MAIN.EUS:mariadb-debugsource-3:10.5.16-2.el9_0.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-9.0.0.Z.MAIN.EUS:mariadb-debugsource-3:10.5.16-2.el9_0.s390x	—	Vendor Fix fix
Unresolved product id: CRB-9.0.0.Z.MAIN.EUS:mariadb-debugsource-3:10.5.16-2.el9_0.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-9.0.0.Z.MAIN.EUS:mariadb-devel-3:10.5.16-2.el9_0.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.0.0.Z.MAIN.EUS:mariadb-devel-3:10.5.16-2.el9_0.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-9.0.0.Z.MAIN.EUS:mariadb-devel-3:10.5.16-2.el9_0.s390x	—	Vendor Fix fix
Unresolved product id: CRB-9.0.0.Z.MAIN.EUS:mariadb-devel-3:10.5.16-2.el9_0.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-9.0.0.Z.MAIN.EUS:mariadb-embedded-3:10.5.16-2.el9_0.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.0.0.Z.MAIN.EUS:mariadb-embedded-3:10.5.16-2.el9_0.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-9.0.0.Z.MAIN.EUS:mariadb-embedded-3:10.5.16-2.el9_0.s390x	—	Vendor Fix fix
Unresolved product id: CRB-9.0.0.Z.MAIN.EUS:mariadb-embedded-3:10.5.16-2.el9_0.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-9.0.0.Z.MAIN.EUS:mariadb-embedded-debuginfo-3:10.5.16-2.el9_0.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.0.0.Z.MAIN.EUS:mariadb-embedded-debuginfo-3:10.5.16-2.el9_0.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-9.0.0.Z.MAIN.EUS:mariadb-embedded-debuginfo-3:10.5.16-2.el9_0.s390x	—	Vendor Fix fix
Unresolved product id: CRB-9.0.0.Z.MAIN.EUS:mariadb-embedded-debuginfo-3:10.5.16-2.el9_0.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-9.0.0.Z.MAIN.EUS:mariadb-embedded-devel-3:10.5.16-2.el9_0.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.0.0.Z.MAIN.EUS:mariadb-embedded-devel-3:10.5.16-2.el9_0.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-9.0.0.Z.MAIN.EUS:mariadb-embedded-devel-3:10.5.16-2.el9_0.s390x	—	Vendor Fix fix
Unresolved product id: CRB-9.0.0.Z.MAIN.EUS:mariadb-embedded-devel-3:10.5.16-2.el9_0.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-9.0.0.Z.MAIN.EUS:mariadb-errmsg-3:10.5.16-2.el9_0.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.0.0.Z.MAIN.EUS:mariadb-errmsg-3:10.5.16-2.el9_0.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-9.0.0.Z.MAIN.EUS:mariadb-errmsg-3:10.5.16-2.el9_0.s390x	—	Vendor Fix fix
Unresolved product id: CRB-9.0.0.Z.MAIN.EUS:mariadb-errmsg-3:10.5.16-2.el9_0.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-9.0.0.Z.MAIN.EUS:mariadb-gssapi-server-3:10.5.16-2.el9_0.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.0.0.Z.MAIN.EUS:mariadb-gssapi-server-3:10.5.16-2.el9_0.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-9.0.0.Z.MAIN.EUS:mariadb-gssapi-server-3:10.5.16-2.el9_0.s390x	—	Vendor Fix fix
Unresolved product id: CRB-9.0.0.Z.MAIN.EUS:mariadb-gssapi-server-3:10.5.16-2.el9_0.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-9.0.0.Z.MAIN.EUS:mariadb-gssapi-server-debuginfo-3:10.5.16-2.el9_0.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.0.0.Z.MAIN.EUS:mariadb-gssapi-server-debuginfo-3:10.5.16-2.el9_0.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-9.0.0.Z.MAIN.EUS:mariadb-gssapi-server-debuginfo-3:10.5.16-2.el9_0.s390x	—	Vendor Fix fix
Unresolved product id: CRB-9.0.0.Z.MAIN.EUS:mariadb-gssapi-server-debuginfo-3:10.5.16-2.el9_0.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-9.0.0.Z.MAIN.EUS:mariadb-oqgraph-engine-3:10.5.16-2.el9_0.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.0.0.Z.MAIN.EUS:mariadb-oqgraph-engine-3:10.5.16-2.el9_0.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-9.0.0.Z.MAIN.EUS:mariadb-oqgraph-engine-3:10.5.16-2.el9_0.s390x	—	Vendor Fix fix
Unresolved product id: CRB-9.0.0.Z.MAIN.EUS:mariadb-oqgraph-engine-3:10.5.16-2.el9_0.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-9.0.0.Z.MAIN.EUS:mariadb-oqgraph-engine-debuginfo-3:10.5.16-2.el9_0.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.0.0.Z.MAIN.EUS:mariadb-oqgraph-engine-debuginfo-3:10.5.16-2.el9_0.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-9.0.0.Z.MAIN.EUS:mariadb-oqgraph-engine-debuginfo-3:10.5.16-2.el9_0.s390x	—	Vendor Fix fix
Unresolved product id: CRB-9.0.0.Z.MAIN.EUS:mariadb-oqgraph-engine-debuginfo-3:10.5.16-2.el9_0.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-9.0.0.Z.MAIN.EUS:mariadb-pam-3:10.5.16-2.el9_0.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.0.0.Z.MAIN.EUS:mariadb-pam-3:10.5.16-2.el9_0.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-9.0.0.Z.MAIN.EUS:mariadb-pam-3:10.5.16-2.el9_0.s390x	—	Vendor Fix fix
Unresolved product id: CRB-9.0.0.Z.MAIN.EUS:mariadb-pam-3:10.5.16-2.el9_0.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-9.0.0.Z.MAIN.EUS:mariadb-pam-debuginfo-3:10.5.16-2.el9_0.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.0.0.Z.MAIN.EUS:mariadb-pam-debuginfo-3:10.5.16-2.el9_0.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-9.0.0.Z.MAIN.EUS:mariadb-pam-debuginfo-3:10.5.16-2.el9_0.s390x	—	Vendor Fix fix
Unresolved product id: CRB-9.0.0.Z.MAIN.EUS:mariadb-pam-debuginfo-3:10.5.16-2.el9_0.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-9.0.0.Z.MAIN.EUS:mariadb-server-3:10.5.16-2.el9_0.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.0.0.Z.MAIN.EUS:mariadb-server-3:10.5.16-2.el9_0.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-9.0.0.Z.MAIN.EUS:mariadb-server-3:10.5.16-2.el9_0.s390x	—	Vendor Fix fix
Unresolved product id: CRB-9.0.0.Z.MAIN.EUS:mariadb-server-3:10.5.16-2.el9_0.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-9.0.0.Z.MAIN.EUS:mariadb-server-debuginfo-3:10.5.16-2.el9_0.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.0.0.Z.MAIN.EUS:mariadb-server-debuginfo-3:10.5.16-2.el9_0.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-9.0.0.Z.MAIN.EUS:mariadb-server-debuginfo-3:10.5.16-2.el9_0.s390x	—	Vendor Fix fix
Unresolved product id: CRB-9.0.0.Z.MAIN.EUS:mariadb-server-debuginfo-3:10.5.16-2.el9_0.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-9.0.0.Z.MAIN.EUS:mariadb-server-galera-3:10.5.16-2.el9_0.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.0.0.Z.MAIN.EUS:mariadb-server-galera-3:10.5.16-2.el9_0.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-9.0.0.Z.MAIN.EUS:mariadb-server-galera-3:10.5.16-2.el9_0.s390x	—	Vendor Fix fix
Unresolved product id: CRB-9.0.0.Z.MAIN.EUS:mariadb-server-galera-3:10.5.16-2.el9_0.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-9.0.0.Z.MAIN.EUS:mariadb-server-utils-3:10.5.16-2.el9_0.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.0.0.Z.MAIN.EUS:mariadb-server-utils-3:10.5.16-2.el9_0.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-9.0.0.Z.MAIN.EUS:mariadb-server-utils-3:10.5.16-2.el9_0.s390x	—	Vendor Fix fix
Unresolved product id: CRB-9.0.0.Z.MAIN.EUS:mariadb-server-utils-3:10.5.16-2.el9_0.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-9.0.0.Z.MAIN.EUS:mariadb-server-utils-debuginfo-3:10.5.16-2.el9_0.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.0.0.Z.MAIN.EUS:mariadb-server-utils-debuginfo-3:10.5.16-2.el9_0.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-9.0.0.Z.MAIN.EUS:mariadb-server-utils-debuginfo-3:10.5.16-2.el9_0.s390x	—	Vendor Fix fix
Unresolved product id: CRB-9.0.0.Z.MAIN.EUS:mariadb-server-utils-debuginfo-3:10.5.16-2.el9_0.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-9.0.0.Z.MAIN.EUS:mariadb-test-3:10.5.16-2.el9_0.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.0.0.Z.MAIN.EUS:mariadb-test-3:10.5.16-2.el9_0.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-9.0.0.Z.MAIN.EUS:mariadb-test-3:10.5.16-2.el9_0.s390x	—	Vendor Fix fix
Unresolved product id: CRB-9.0.0.Z.MAIN.EUS:mariadb-test-3:10.5.16-2.el9_0.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-9.0.0.Z.MAIN.EUS:mariadb-test-debuginfo-3:10.5.16-2.el9_0.aarch64	—	Vendor Fix fix
Unresolved product id: CRB-9.0.0.Z.MAIN.EUS:mariadb-test-debuginfo-3:10.5.16-2.el9_0.ppc64le	—	Vendor Fix fix
Unresolved product id: CRB-9.0.0.Z.MAIN.EUS:mariadb-test-debuginfo-3:10.5.16-2.el9_0.s390x	—	Vendor Fix fix
Unresolved product id: CRB-9.0.0.Z.MAIN.EUS:mariadb-test-debuginfo-3:10.5.16-2.el9_0.x86_64	—	Vendor Fix fix

Known not affected 15 products

Product	Identifier	Version	Remediation
Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:galera-0:26.4.11-1.el9_0.aarch64		—
Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:galera-0:26.4.11-1.el9_0.ppc64le		—
Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:galera-0:26.4.11-1.el9_0.s390x		—
Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:galera-0:26.4.11-1.el9_0.src		—
Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:galera-0:26.4.11-1.el9_0.x86_64		—
Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:galera-debuginfo-0:26.4.11-1.el9_0.aarch64		—
Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:galera-debuginfo-0:26.4.11-1.el9_0.ppc64le		—
Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:galera-debuginfo-0:26.4.11-1.el9_0.s390x		—
Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:galera-debuginfo-0:26.4.11-1.el9_0.x86_64		—
Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:galera-debugsource-0:26.4.11-1.el9_0.aarch64		—
Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:galera-debugsource-0:26.4.11-1.el9_0.ppc64le		—
Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:galera-debugsource-0:26.4.11-1.el9_0.s390x		—
Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:galera-debugsource-0:26.4.11-1.el9_0.x86_64		—
Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:mysql-selinux-0:1.0.5-1.el9_0.noarch		—
Unresolved product id: AppStream-9.0.0.Z.MAIN.EUS:mysql-selinux-0:1.0.5-1.el9_0.src		—

Threats

Impact Low

CVE-2021-46661

MariaDB through 10.5.9 allows an application crash in find_field_in_tables and find_order_in_list via an unused common table expression (CTE).

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-20 - Improper Input Validation

Affected products

Fixed 194 products, the same list as for CVE-2021-46659

Known not affected 15 products, the same list as for CVE-2021-46659

Threats

Impact Low

CVE-2021-46663

MariaDB through 10.5.13 allows a ha_maria::extra application crash via certain SELECT statements.

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-20 - Improper Input Validation

Affected products

Fixed 194 products, the same list as for CVE-2021-46659

Known not affected 15 products, the same list as for CVE-2021-46659

Threats

Impact Low

CVE-2021-46664

MariaDB through 10.5.9 allows an application crash in sub_select_postjoin_aggr for a NULL value of aggr.

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-476 - NULL Pointer Dereference

Affected products

Fixed 194 products, the same list as for CVE-2021-46659

Known not affected 15 products, the same list as for CVE-2021-46659

Threats

Impact Low

CVE-2021-46665

MariaDB through 10.5.9 allows a sql_parse.cc application crash because of incorrect used_tables expectations.

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-20 - Improper Input Validation

Affected products

Fixed 194 products, the same list as for CVE-2021-46659

Known not affected 15 products, the same list as for CVE-2021-46659

Threats

Impact Low

CVE-2021-46668

MariaDB through 10.5.9 allows an application crash via certain long SELECT DISTINCT statements that improperly interact with storage-engine resource limitations for temporary data structures.

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-400 - Uncontrolled Resource Consumption

Affected products

Fixed 194 products, the same list as for CVE-2021-46659

Known not affected 15 products, the same list as for CVE-2021-46659

Threats

Impact Low

CVE-2021-46669

A use-after-free vulnerability was found in MariaDB. This flaw allows attackers to trigger a convert_const_to_int() use-after-free when the BIGINT data type is used, resulting in a denial of service.

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-416 - Use After Free

Affected products

Fixed 194 products, the same list as for CVE-2021-46659

Known not affected 15 products, the same list as for CVE-2021-46659

Threats

Impact Moderate

CVE-2022-21595

Vulnerability in the MySQL Server product of Oracle MySQL (component: C API). Supported versions that are affected are 5.7.36 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H).

4.4 (Medium)


                
                  CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Fixed 194 products, the same list as for CVE-2021-46659

Known not affected 15 products, the same list as for CVE-2021-46659

Threats

Impact Moderate

CVE-2022-24048

MariaDB CONNECT Storage Engine Stack-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL queries. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the service account. Was ZDI-CAN-16191.

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Affected products

Fixed 194 products, the same list as for CVE-2021-46659

Known not affected 15 products, the same list as for CVE-2021-46659

Threats

Impact Moderate

CVE-2022-24050

MariaDB CONNECT Storage Engine Use-After-Free Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL queries. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the service account. Was ZDI-CAN-16207.

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-1173 - Improper Use of Validation Framework

Affected products

Fixed 194 products, the same list as for CVE-2021-46659

Known not affected 15 products, the same list as for CVE-2021-46659

Threats

Impact Moderate

CVE-2022-24051

MariaDB CONNECT Storage Engine Format String Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL queries. The issue results from the lack of proper validation of a user-supplied string before using it as a format specifier. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the service account. Was ZDI-CAN-16193.

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Affected products

Fixed 194 products, the same list as for CVE-2021-46659

Known not affected 15 products, the same list as for CVE-2021-46659

Threats

Impact Moderate

CVE-2022-24052

A flaw was found in MariaDB. Lack of input validation leads to a heap buffer overflow. This flaw allows an authenticated, local attacker with at least a low level of privileges to submit a crafted SQL query to MariaDB and escalate their privileges to the level of the MariaDB service user, running arbitrary code.

7.0 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-122 - Heap-based Buffer Overflow

Affected products

Fixed 194 products, the same list as for CVE-2021-46659

Known not affected 15 products, the same list as for CVE-2021-46659

Threats

Impact Moderate

CVE-2022-27376

A use-after-free flaw was found in Maria DB. The MariaDB Server contains a use-after-free in the component, Item_args::walk_arg, which is exploited via specially crafted SQL statements, affecting availability.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-617 - Reachable Assertion

Affected products

Fixed 194 products, the same list as for CVE-2021-46659

Known not affected 15 products, the same list as for CVE-2021-46659

Threats

Impact Moderate

CVE-2022-27377

A flaw was found in the MariaDB Server, where it contains a use-after-free in the component, Item_func_in::cleanup(). This issue is exploited via specially crafted SQL statements, affecting availability.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-416 - Use After Free

Affected products

Fixed 194 products, the same list as for CVE-2021-46659

Known not affected 15 products, the same list as for CVE-2021-46659

Threats

Impact Moderate

CVE-2022-27378

A flaw was found in MariaDB. The component, Create_tmp_table::finalize, allows attackers to cause a denial of service (DoS) via specially crafted SQL statements, affecting availability.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-89 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Affected products

Fixed 194 products, the same list as for CVE-2021-46659

Known not affected 15 products, the same list as for CVE-2021-46659

Threats

Impact Moderate

CVE-2022-27379

A flaw was found in MariaDB. The component, Arg_comparator::compare_real_fixed, allows attackers to cause a denial of service (DoS) via specially crafted SQL statements, affecting availability.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-89 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Affected products

Fixed 194 products, the same list as for CVE-2021-46659

Known not affected 15 products, the same list as for CVE-2021-46659

Threats

Impact Moderate

CVE-2022-27380

A flaw was found in MariaDB. The component, my_decimal::operator=, allows attackers to cause a denial of service (DoS) via specially crafted SQL statements, affecting availability.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-89 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Affected products

Fixed 194 products, the same list as for CVE-2021-46659

Known not affected 15 products, the same list as for CVE-2021-46659

Threats

Impact Moderate

CVE-2022-27381

A flaw was found in MariaDB. The component, Field::set_default, allows attackers to cause a denial of service (DoS) via specially crafted SQL statements, affecting availability.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-89 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Affected products

Fixed 194 products, the same list as for CVE-2021-46659

Known not affected 15 products, the same list as for CVE-2021-46659

Threats

Impact Moderate

CVE-2022-27382

A flaw was found in MariaDB. A segmentation fault via the component, Item_field::used_tables/update_depend_map_for_order, impacts availability.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-617 - Reachable Assertion

Affected products

Fixed 194 products, the same list as for CVE-2021-46659

Known not affected 15 products, the same list as for CVE-2021-46659

Threats

Impact Moderate

CVE-2022-27383

A flaw was found in the MariaDB Server. A use-after-free in the component, my_strcasecmp_8bit, can be exploited via specially crafted SQL statements, impacting availability.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-416 - Use After Free

Affected products

Fixed 194 products, the same list as for CVE-2021-46659

Known not affected 15 products, the same list as for CVE-2021-46659

Threats

Impact Moderate

CVE-2022-27384

A flaw was found in MariaDB. An issue in the component, Item_subselect::init_expr_cache_tracker of the MariaDB Server, allows attackers to cause a denial of service (DoS) via specially crafted SQL statements, impacting availability.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-89 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Affected products

Fixed 194 products, the same list as for CVE-2021-46659

Known not affected 15 products, the same list as for CVE-2021-46659

Threats

Impact Moderate

CVE-2022-27386

A flaw was found in the MariaDB Server. It contains a segmentation fault via the component, sql/sql_class.cc, impacting availability.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-89 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Affected products

Fixed 194 products, the same list as for CVE-2021-46659

Known not affected 15 products, the same list as for CVE-2021-46659

Threats

Impact Moderate

CVE-2022-27387

A flaw was found in the MariaDB Server. It contains a global buffer overflow in the component, decimal_bin_size, which is exploited via specially crafted SQL statements, impacting availability.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer

Affected products

Fixed 194 products, the same list as for CVE-2021-46659

Known not affected 15 products, the same list as for CVE-2021-46659

Threats

Impact Moderate

CVE-2022-27444

A flaw was found in the MariaDB Server. It contains a segmentation fault via the component, sql/item_subselect.cc, affecting availability.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-89 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Affected products

Fixed 194 products, the same list as for CVE-2021-46659

Known not affected 15 products, the same list as for CVE-2021-46659

Threats

Impact Moderate

CVE-2022-27445

A flaw was found in the MariaDB Server. It contains a segmentation fault via the component, sql/sql_window.cc, impacting availability.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Fixed 194 products, the same list as for CVE-2021-46659

Known not affected 15 products, the same list as for CVE-2021-46659

Threats

Impact Moderate

CVE-2022-27446

A flaw was found in the MariaDB Server. It contains a segmentation fault via the component, sql/item_cmpfunc.h, impacting availability.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-617 - Reachable Assertion

Affected products

Fixed 194 products, the same list as for CVE-2021-46659

Known not affected 15 products, the same list as for CVE-2021-46659

Threats

Impact Moderate

CVE-2022-27447

A flaw was found in the MariaDB Server. It contains a use-after-free via the component,Binary_string::free_buffer() at /sql/sql_string.h, affecting availability.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-617 - Reachable Assertion

Affected products

Fixed 194 products, the same list as for CVE-2021-46659

Known not affected 15 products, the same list as for CVE-2021-46659

Threats

Impact Moderate

CVE-2022-27448

An assertion failure was found in the MariaDB Server. This issue is via, 'node->pcur->rel_pos == BTR_PCUR_ON' at /row/row0mysql.cc, affecting availability.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-617 - Reachable Assertion

Affected products

Fixed 194 products, the same list as for CVE-2021-46659

Known not affected 15 products, the same list as for CVE-2021-46659

Threats

Impact Moderate

CVE-2022-27449

A flaw was found in the MariaDB Server. It contains a segmentation fault via the component, sql/item_func.cc:148, affecting availability.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-617 - Reachable Assertion

Affected products

Fixed 194 products, the same list as for CVE-2021-46659

Known not affected 15 products, the same list as for CVE-2021-46659

Threats

Impact Moderate

CVE-2022-27451

A flaw was found in the MariaDB Server. It contains a segmentation fault via the component, sql/field_conv.cc, affecting availability.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-1173 - Improper Use of Validation Framework

Affected products

Fixed 194 products, the same list as for CVE-2021-46659

Known not affected 15 products, the same list as for CVE-2021-46659

Threats

Impact Moderate

CVE-2022-27452

A flaw was found in the MariaDB Server. It contains a segmentation fault via the component, sql/item_cmpfunc.cc, affecting availability.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-617 - Reachable Assertion

Affected products

Fixed 194 products, the same list as for CVE-2021-46659

Known not affected 15 products, the same list as for CVE-2021-46659

Threats

Impact Moderate

CVE-2022-27455

A flaw was found in the MariaDB Server. It contains a use-after-free in the component, my_wildcmp_8bit_impl at /strings/ctype-simple.c, affecting availability.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-416 - Use After Free

Affected products

Fixed 194 products, the same list as for CVE-2021-46659

Known not affected 15 products, the same list as for CVE-2021-46659

Threats

Impact Moderate

CVE-2022-27456

A flaw was found in the MariaDB Server. It contains a use-after-free in the component, VDec::VDec at /sql/sql_type.cc, affecting availability.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-617 - Reachable Assertion

Affected products

Fixed 194 products, the same list as for CVE-2021-46659

Known not affected 15 products, the same list as for CVE-2021-46659

Threats

Impact Moderate

CVE-2022-27457

A flaw was found in the MariaDB Server. It contains a use-after-free in the component, my_mb_wc_latin1 at /strings/ctype-latin1.c, affecting availability.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-416 - Use After Free

Affected products

Fixed 194 products, the same list as for CVE-2021-46659

Known not affected 15 products, the same list as for CVE-2021-46659

Threats

Impact Moderate

CVE-2022-27458

A flaw was found in the MariaDB Server. It contains a use-after-free in the component, Binary_string::free_buffer() at /sql/sql_string.h, affecting availability.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-617 - Reachable Assertion

Affected products

Fixed 194 products, the same list as for CVE-2021-46659

Known not affected 15 products, the same list as for CVE-2021-46659

Threats

Impact Moderate

CVE-2022-31622

MariaDB Server before 10.7 is vulnerable to Denial of Service. In extra/mariabackup/ds_compress.cc, when an error occurs (pthread_create returns a nonzero value) while executing the method create_worker_threads, the held lock is not released correctly, which allows local users to trigger a denial of service due to the deadlock. Note: The vendor argues this is just an improper locking bug and not a vulnerability with adverse effects.

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-404 - Improper Resource Shutdown or Release

Affected products

Fixed 194 products, the same list as for CVE-2021-46659

Known not affected 15 products, the same list as for CVE-2021-46659

Threats

Impact Moderate

CVE-2022-31623

MariaDB Server before 10.7 is vulnerable to Denial of Service. In extra/mariabackup/ds_compress.cc, when an error occurs (i.e., going to the err label) while executing the method create_worker_threads, the held lock thd->ctrl_mutex is not released correctly, which allows local users to trigger a denial of service due to the deadlock. Note: The vendor argues this is just an improper locking bug and not a vulnerability with adverse effects.

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-667 - Improper Locking

Affected products

Fixed 194 products, the same list as for CVE-2021-46659

Known not affected 15 products, the same list as for CVE-2021-46659

Threats

Impact Moderate

References

192 references

URL	Category
https://access.redhat.com/errata/RHSA-2022:5948	self
https://access.redhat.com/security/updates/classi…	external
https://bugzilla.redhat.com/show_bug.cgi?id=2049302	external
https://bugzilla.redhat.com/show_bug.cgi?id=2050017	external
https://bugzilla.redhat.com/show_bug.cgi?id=2050022	external
https://bugzilla.redhat.com/show_bug.cgi?id=2050024	external
https://bugzilla.redhat.com/show_bug.cgi?id=2050026	external
https://bugzilla.redhat.com/show_bug.cgi?id=2050032	external
https://bugzilla.redhat.com/show_bug.cgi?id=2050034	external
https://bugzilla.redhat.com/show_bug.cgi?id=2068211	external
https://bugzilla.redhat.com/show_bug.cgi?id=2068233	external
https://bugzilla.redhat.com/show_bug.cgi?id=2068234	external
https://bugzilla.redhat.com/show_bug.cgi?id=2069833	external
https://bugzilla.redhat.com/show_bug.cgi?id=2074817	external
https://bugzilla.redhat.com/show_bug.cgi?id=2074947	external
https://bugzilla.redhat.com/show_bug.cgi?id=2074949	external
https://bugzilla.redhat.com/show_bug.cgi?id=2074951	external
https://bugzilla.redhat.com/show_bug.cgi?id=2074966	external
https://bugzilla.redhat.com/show_bug.cgi?id=2074981	external
https://bugzilla.redhat.com/show_bug.cgi?id=2074987	external
https://bugzilla.redhat.com/show_bug.cgi?id=2074996	external
https://bugzilla.redhat.com/show_bug.cgi?id=2074999	external
https://bugzilla.redhat.com/show_bug.cgi?id=2075005	external
https://bugzilla.redhat.com/show_bug.cgi?id=2075006	external
https://bugzilla.redhat.com/show_bug.cgi?id=2075691	external
https://bugzilla.redhat.com/show_bug.cgi?id=2075692	external
https://bugzilla.redhat.com/show_bug.cgi?id=2075693	external
https://bugzilla.redhat.com/show_bug.cgi?id=2075694	external
https://bugzilla.redhat.com/show_bug.cgi?id=2075695	external
https://bugzilla.redhat.com/show_bug.cgi?id=2075696	external
https://bugzilla.redhat.com/show_bug.cgi?id=2075697	external
https://bugzilla.redhat.com/show_bug.cgi?id=2075699	external
https://bugzilla.redhat.com/show_bug.cgi?id=2075700	external
https://bugzilla.redhat.com/show_bug.cgi?id=2075701	external
https://bugzilla.redhat.com/show_bug.cgi?id=2076144	external
https://bugzilla.redhat.com/show_bug.cgi?id=2076145	external
https://bugzilla.redhat.com/show_bug.cgi?id=2092354	external
https://bugzilla.redhat.com/show_bug.cgi?id=2092360	external
https://bugzilla.redhat.com/show_bug.cgi?id=2096271	external
https://bugzilla.redhat.com/show_bug.cgi?id=2096274	external
https://bugzilla.redhat.com/show_bug.cgi?id=2096276	external
https://bugzilla.redhat.com/show_bug.cgi?id=2096277	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2021-46659	self
https://bugzilla.redhat.com/show_bug.cgi?id=2049302	external
https://www.cve.org/CVERecord?id=CVE-2021-46659	external
https://nvd.nist.gov/vuln/detail/CVE-2021-46659	external
https://access.redhat.com/security/cve/CVE-2021-46661	self
https://bugzilla.redhat.com/show_bug.cgi?id=2050017	external
https://www.cve.org/CVERecord?id=CVE-2021-46661	external
https://nvd.nist.gov/vuln/detail/CVE-2021-46661	external
https://access.redhat.com/security/cve/CVE-2021-46663	self
https://bugzilla.redhat.com/show_bug.cgi?id=2050022	external
https://www.cve.org/CVERecord?id=CVE-2021-46663	external
https://nvd.nist.gov/vuln/detail/CVE-2021-46663	external
https://access.redhat.com/security/cve/CVE-2021-46664	self
https://bugzilla.redhat.com/show_bug.cgi?id=2050024	external
https://www.cve.org/CVERecord?id=CVE-2021-46664	external
https://nvd.nist.gov/vuln/detail/CVE-2021-46664	external
https://access.redhat.com/security/cve/CVE-2021-46665	self
https://bugzilla.redhat.com/show_bug.cgi?id=2050026	external
https://www.cve.org/CVERecord?id=CVE-2021-46665	external
https://nvd.nist.gov/vuln/detail/CVE-2021-46665	external
https://access.redhat.com/security/cve/CVE-2021-46668	self
https://bugzilla.redhat.com/show_bug.cgi?id=2050032	external
https://www.cve.org/CVERecord?id=CVE-2021-46668	external
https://nvd.nist.gov/vuln/detail/CVE-2021-46668	external
https://access.redhat.com/security/cve/CVE-2021-46669	self
https://bugzilla.redhat.com/show_bug.cgi?id=2050034	external
https://www.cve.org/CVERecord?id=CVE-2021-46669	external
https://nvd.nist.gov/vuln/detail/CVE-2021-46669	external
https://access.redhat.com/security/cve/CVE-2022-21595	self
https://bugzilla.redhat.com/show_bug.cgi?id=2142862	external
https://www.cve.org/CVERecord?id=CVE-2022-21595	external
https://nvd.nist.gov/vuln/detail/CVE-2022-21595	external
https://access.redhat.com/security/cve/CVE-2022-24048	self
https://bugzilla.redhat.com/show_bug.cgi?id=2068234	external
https://www.cve.org/CVERecord?id=CVE-2022-24048	external
https://nvd.nist.gov/vuln/detail/CVE-2022-24048	external
https://access.redhat.com/security/cve/CVE-2022-24050	self
https://bugzilla.redhat.com/show_bug.cgi?id=2069833	external
https://www.cve.org/CVERecord?id=CVE-2022-24050	external
https://nvd.nist.gov/vuln/detail/CVE-2022-24050	external
https://access.redhat.com/security/cve/CVE-2022-24051	self
https://bugzilla.redhat.com/show_bug.cgi?id=2068233	external
https://www.cve.org/CVERecord?id=CVE-2022-24051	external
https://nvd.nist.gov/vuln/detail/CVE-2022-24051	external
https://access.redhat.com/security/cve/CVE-2022-24052	self
https://bugzilla.redhat.com/show_bug.cgi?id=2068211	external
https://www.cve.org/CVERecord?id=CVE-2022-24052	external
https://nvd.nist.gov/vuln/detail/CVE-2022-24052	external
https://mariadb.com/kb/en/security/	external
https://access.redhat.com/security/cve/CVE-2022-27376	self
https://bugzilla.redhat.com/show_bug.cgi?id=2074817	external
https://www.cve.org/CVERecord?id=CVE-2022-27376	external
https://nvd.nist.gov/vuln/detail/CVE-2022-27376	external
https://access.redhat.com/security/cve/CVE-2022-27377	self
https://bugzilla.redhat.com/show_bug.cgi?id=2074947	external
https://www.cve.org/CVERecord?id=CVE-2022-27377	external
https://nvd.nist.gov/vuln/detail/CVE-2022-27377	external
https://access.redhat.com/security/cve/CVE-2022-27378	self
https://bugzilla.redhat.com/show_bug.cgi?id=2074949	external
https://www.cve.org/CVERecord?id=CVE-2022-27378	external
https://nvd.nist.gov/vuln/detail/CVE-2022-27378	external
https://access.redhat.com/security/cve/CVE-2022-27379	self
https://bugzilla.redhat.com/show_bug.cgi?id=2074951	external
https://www.cve.org/CVERecord?id=CVE-2022-27379	external
https://nvd.nist.gov/vuln/detail/CVE-2022-27379	external
https://access.redhat.com/security/cve/CVE-2022-27380	self
https://bugzilla.redhat.com/show_bug.cgi?id=2074966	external
https://www.cve.org/CVERecord?id=CVE-2022-27380	external
https://nvd.nist.gov/vuln/detail/CVE-2022-27380	external
https://access.redhat.com/security/cve/CVE-2022-27381	self
https://bugzilla.redhat.com/show_bug.cgi?id=2074981	external
https://www.cve.org/CVERecord?id=CVE-2022-27381	external
https://nvd.nist.gov/vuln/detail/CVE-2022-27381	external
https://access.redhat.com/security/cve/CVE-2022-27382	self
https://bugzilla.redhat.com/show_bug.cgi?id=2074987	external
https://www.cve.org/CVERecord?id=CVE-2022-27382	external
https://nvd.nist.gov/vuln/detail/CVE-2022-27382	external
https://access.redhat.com/security/cve/CVE-2022-27383	self
https://bugzilla.redhat.com/show_bug.cgi?id=2074996	external
https://www.cve.org/CVERecord?id=CVE-2022-27383	external
https://nvd.nist.gov/vuln/detail/CVE-2022-27383	external
https://access.redhat.com/security/cve/CVE-2022-27384	self
https://bugzilla.redhat.com/show_bug.cgi?id=2074999	external
https://www.cve.org/CVERecord?id=CVE-2022-27384	external
https://nvd.nist.gov/vuln/detail/CVE-2022-27384	external
https://access.redhat.com/security/cve/CVE-2022-27386	self
https://bugzilla.redhat.com/show_bug.cgi?id=2075005	external
https://www.cve.org/CVERecord?id=CVE-2022-27386	external
https://nvd.nist.gov/vuln/detail/CVE-2022-27386	external
https://access.redhat.com/security/cve/CVE-2022-27387	self
https://bugzilla.redhat.com/show_bug.cgi?id=2075006	external
https://www.cve.org/CVERecord?id=CVE-2022-27387	external
https://nvd.nist.gov/vuln/detail/CVE-2022-27387	external
https://access.redhat.com/security/cve/CVE-2022-27444	self
https://bugzilla.redhat.com/show_bug.cgi?id=2075696	external
https://www.cve.org/CVERecord?id=CVE-2022-27444	external
https://nvd.nist.gov/vuln/detail/CVE-2022-27444	external
https://access.redhat.com/security/cve/CVE-2022-27445	self
https://bugzilla.redhat.com/show_bug.cgi?id=2075691	external
https://www.cve.org/CVERecord?id=CVE-2022-27445	external
https://nvd.nist.gov/vuln/detail/CVE-2022-27445	external
https://access.redhat.com/security/cve/CVE-2022-27446	self
https://bugzilla.redhat.com/show_bug.cgi?id=2075692	external
https://www.cve.org/CVERecord?id=CVE-2022-27446	external
https://nvd.nist.gov/vuln/detail/CVE-2022-27446	external
https://access.redhat.com/security/cve/CVE-2022-27447	self
https://bugzilla.redhat.com/show_bug.cgi?id=2075693	external
https://www.cve.org/CVERecord?id=CVE-2022-27447	external
https://nvd.nist.gov/vuln/detail/CVE-2022-27447	external
https://access.redhat.com/security/cve/CVE-2022-27448	self
https://bugzilla.redhat.com/show_bug.cgi?id=2075694	external
https://www.cve.org/CVERecord?id=CVE-2022-27448	external
https://nvd.nist.gov/vuln/detail/CVE-2022-27448	external
https://access.redhat.com/security/cve/CVE-2022-27449	self
https://bugzilla.redhat.com/show_bug.cgi?id=2075695	external
https://www.cve.org/CVERecord?id=CVE-2022-27449	external
https://nvd.nist.gov/vuln/detail/CVE-2022-27449	external
https://access.redhat.com/security/cve/CVE-2022-27451	self
https://bugzilla.redhat.com/show_bug.cgi?id=2076144	external
https://www.cve.org/CVERecord?id=CVE-2022-27451	external
https://nvd.nist.gov/vuln/detail/CVE-2022-27451	external
https://access.redhat.com/security/cve/CVE-2022-27452	self
https://bugzilla.redhat.com/show_bug.cgi?id=2076145	external
https://www.cve.org/CVERecord?id=CVE-2022-27452	external
https://nvd.nist.gov/vuln/detail/CVE-2022-27452	external
https://access.redhat.com/security/cve/CVE-2022-27455	self
https://bugzilla.redhat.com/show_bug.cgi?id=2075701	external
https://www.cve.org/CVERecord?id=CVE-2022-27455	external
https://nvd.nist.gov/vuln/detail/CVE-2022-27455	external
https://access.redhat.com/security/cve/CVE-2022-27456	self
https://bugzilla.redhat.com/show_bug.cgi?id=2075697	external
https://www.cve.org/CVERecord?id=CVE-2022-27456	external
https://nvd.nist.gov/vuln/detail/CVE-2022-27456	external
https://access.redhat.com/security/cve/CVE-2022-27457	self
https://bugzilla.redhat.com/show_bug.cgi?id=2075699	external
https://www.cve.org/CVERecord?id=CVE-2022-27457	external
https://nvd.nist.gov/vuln/detail/CVE-2022-27457	external
https://access.redhat.com/security/cve/CVE-2022-27458	self
https://bugzilla.redhat.com/show_bug.cgi?id=2075700	external
https://www.cve.org/CVERecord?id=CVE-2022-27458	external
https://nvd.nist.gov/vuln/detail/CVE-2022-27458	external
https://access.redhat.com/security/cve/CVE-2022-31622	self
https://bugzilla.redhat.com/show_bug.cgi?id=2092354	external
https://www.cve.org/CVERecord?id=CVE-2022-31622	external
https://nvd.nist.gov/vuln/detail/CVE-2022-31622	external
https://access.redhat.com/security/cve/CVE-2022-31623	self
https://bugzilla.redhat.com/show_bug.cgi?id=2092360	external
https://www.cve.org/CVERecord?id=CVE-2022-31623	external
https://nvd.nist.gov/vuln/detail/CVE-2022-31623	external

JSON

To clipboard

Loading 2.1 MB of JSON…

CVE-2021-46659 (GCVE-0-2021-46659)

Vulnerability from cvelistv5 – Published: 2022-01-29 22:34 – Updated: 2024-08-04 05:10

Summary

MariaDB before 10.7.2 allows an application crash because it does not recognize that SELECT_LEX::nest_level is local to each VIEW.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

6 references

URL	Tags
https://jira.mariadb.org/browse/MDEV-25631	x_refsource_MISC
https://security.netapp.com/advisory/ntap-2022031…	x_refsource_CONFIRM
https://mariadb.com/kb/en/security/	x_refsource_CONFIRM
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T05:10:35.489Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://jira.mariadb.org/browse/MDEV-25631"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20220311-0003/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://mariadb.com/kb/en/security/"
          },
          {
            "name": "FEDORA-2022-263f7cc483",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NJ4KDAGF3H4D4BDTHRAM6ZEAJJWWMRUO/"
          },
          {
            "name": "FEDORA-2022-03350936ee",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DKJRBYJAQCOPHSED43A3HUPNKQLDTFGD/"
          },
          {
            "name": "FEDORA-2022-5cfe372ab7",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EZFZVMJL5UDTOZMARLXQIMG3BTG6UNYW/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "MariaDB before 10.7.2 allows an application crash because it does not recognize that SELECT_LEX::nest_level is local to each VIEW."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-05-08T03:06:47.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://jira.mariadb.org/browse/MDEV-25631"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20220311-0003/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://mariadb.com/kb/en/security/"
        },
        {
          "name": "FEDORA-2022-263f7cc483",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NJ4KDAGF3H4D4BDTHRAM6ZEAJJWWMRUO/"
        },
        {
          "name": "FEDORA-2022-03350936ee",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DKJRBYJAQCOPHSED43A3HUPNKQLDTFGD/"
        },
        {
          "name": "FEDORA-2022-5cfe372ab7",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EZFZVMJL5UDTOZMARLXQIMG3BTG6UNYW/"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2021-46659",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "MariaDB before 10.7.2 allows an application crash because it does not recognize that SELECT_LEX::nest_level is local to each VIEW."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://jira.mariadb.org/browse/MDEV-25631",
              "refsource": "MISC",
              "url": "https://jira.mariadb.org/browse/MDEV-25631"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20220311-0003/",
              "refsource": "CONFIRM",
              "url": "https://security.netapp.com/advisory/ntap-20220311-0003/"
            },
            {
              "name": "https://mariadb.com/kb/en/security/",
              "refsource": "CONFIRM",
              "url": "https://mariadb.com/kb/en/security/"
            },
            {
              "name": "FEDORA-2022-263f7cc483",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NJ4KDAGF3H4D4BDTHRAM6ZEAJJWWMRUO/"
            },
            {
              "name": "FEDORA-2022-03350936ee",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DKJRBYJAQCOPHSED43A3HUPNKQLDTFGD/"
            },
            {
              "name": "FEDORA-2022-5cfe372ab7",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EZFZVMJL5UDTOZMARLXQIMG3BTG6UNYW/"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2021-46659",
    "datePublished": "2022-01-29T22:34:03.000Z",
    "dateReserved": "2022-01-29T00:00:00.000Z",
    "dateUpdated": "2024-08-04T05:10:35.489Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2021-46661 (GCVE-0-2021-46661)

Vulnerability from cvelistv5 – Published: 2022-02-01 01:48 – Updated: 2024-08-04 05:10

Summary

MariaDB through 10.5.9 allows an application crash in find_field_in_tables and find_order_in_list via an unused common table expression (CTE).

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

6 references

URL	Tags
https://jira.mariadb.org/browse/MDEV-25766	x_refsource_MISC
https://security.netapp.com/advisory/ntap-2022022…	x_refsource_CONFIRM
https://mariadb.com/kb/en/security/	x_refsource_CONFIRM
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T05:10:35.483Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://jira.mariadb.org/browse/MDEV-25766"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20220221-0002/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://mariadb.com/kb/en/security/"
          },
          {
            "name": "FEDORA-2022-263f7cc483",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NJ4KDAGF3H4D4BDTHRAM6ZEAJJWWMRUO/"
          },
          {
            "name": "FEDORA-2022-03350936ee",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DKJRBYJAQCOPHSED43A3HUPNKQLDTFGD/"
          },
          {
            "name": "FEDORA-2022-5cfe372ab7",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EZFZVMJL5UDTOZMARLXQIMG3BTG6UNYW/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "MariaDB through 10.5.9 allows an application crash in find_field_in_tables and find_order_in_list via an unused common table expression (CTE)."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-05-08T03:06:36.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://jira.mariadb.org/browse/MDEV-25766"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20220221-0002/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://mariadb.com/kb/en/security/"
        },
        {
          "name": "FEDORA-2022-263f7cc483",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NJ4KDAGF3H4D4BDTHRAM6ZEAJJWWMRUO/"
        },
        {
          "name": "FEDORA-2022-03350936ee",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DKJRBYJAQCOPHSED43A3HUPNKQLDTFGD/"
        },
        {
          "name": "FEDORA-2022-5cfe372ab7",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EZFZVMJL5UDTOZMARLXQIMG3BTG6UNYW/"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2021-46661",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "MariaDB through 10.5.9 allows an application crash in find_field_in_tables and find_order_in_list via an unused common table expression (CTE)."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://jira.mariadb.org/browse/MDEV-25766",
              "refsource": "MISC",
              "url": "https://jira.mariadb.org/browse/MDEV-25766"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20220221-0002/",
              "refsource": "CONFIRM",
              "url": "https://security.netapp.com/advisory/ntap-20220221-0002/"
            },
            {
              "name": "https://mariadb.com/kb/en/security/",
              "refsource": "CONFIRM",
              "url": "https://mariadb.com/kb/en/security/"
            },
            {
              "name": "FEDORA-2022-263f7cc483",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NJ4KDAGF3H4D4BDTHRAM6ZEAJJWWMRUO/"
            },
            {
              "name": "FEDORA-2022-03350936ee",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DKJRBYJAQCOPHSED43A3HUPNKQLDTFGD/"
            },
            {
              "name": "FEDORA-2022-5cfe372ab7",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EZFZVMJL5UDTOZMARLXQIMG3BTG6UNYW/"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2021-46661",
    "datePublished": "2022-02-01T01:48:27.000Z",
    "dateReserved": "2022-02-01T00:00:00.000Z",
    "dateUpdated": "2024-08-04T05:10:35.483Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2021-46663 (GCVE-0-2021-46663)

Vulnerability from cvelistv5 – Published: 2022-02-01 01:47 – Updated: 2024-08-04 05:10

Summary

MariaDB through 10.5.13 allows a ha_maria::extra application crash via certain SELECT statements.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

6 references

URL	Tags
https://jira.mariadb.org/browse/MDEV-26351	x_refsource_MISC
https://security.netapp.com/advisory/ntap-2022022…	x_refsource_CONFIRM
https://mariadb.com/kb/en/security/	x_refsource_CONFIRM
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T05:10:35.449Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://jira.mariadb.org/browse/MDEV-26351"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20220221-0002/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://mariadb.com/kb/en/security/"
          },
          {
            "name": "FEDORA-2022-263f7cc483",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NJ4KDAGF3H4D4BDTHRAM6ZEAJJWWMRUO/"
          },
          {
            "name": "FEDORA-2022-03350936ee",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DKJRBYJAQCOPHSED43A3HUPNKQLDTFGD/"
          },
          {
            "name": "FEDORA-2022-5cfe372ab7",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EZFZVMJL5UDTOZMARLXQIMG3BTG6UNYW/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "MariaDB through 10.5.13 allows a ha_maria::extra application crash via certain SELECT statements."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-05-08T03:06:41.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://jira.mariadb.org/browse/MDEV-26351"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20220221-0002/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://mariadb.com/kb/en/security/"
        },
        {
          "name": "FEDORA-2022-263f7cc483",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NJ4KDAGF3H4D4BDTHRAM6ZEAJJWWMRUO/"
        },
        {
          "name": "FEDORA-2022-03350936ee",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DKJRBYJAQCOPHSED43A3HUPNKQLDTFGD/"
        },
        {
          "name": "FEDORA-2022-5cfe372ab7",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EZFZVMJL5UDTOZMARLXQIMG3BTG6UNYW/"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2021-46663",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "MariaDB through 10.5.13 allows a ha_maria::extra application crash via certain SELECT statements."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://jira.mariadb.org/browse/MDEV-26351",
              "refsource": "MISC",
              "url": "https://jira.mariadb.org/browse/MDEV-26351"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20220221-0002/",
              "refsource": "CONFIRM",
              "url": "https://security.netapp.com/advisory/ntap-20220221-0002/"
            },
            {
              "name": "https://mariadb.com/kb/en/security/",
              "refsource": "CONFIRM",
              "url": "https://mariadb.com/kb/en/security/"
            },
            {
              "name": "FEDORA-2022-263f7cc483",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NJ4KDAGF3H4D4BDTHRAM6ZEAJJWWMRUO/"
            },
            {
              "name": "FEDORA-2022-03350936ee",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DKJRBYJAQCOPHSED43A3HUPNKQLDTFGD/"
            },
            {
              "name": "FEDORA-2022-5cfe372ab7",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EZFZVMJL5UDTOZMARLXQIMG3BTG6UNYW/"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2021-46663",
    "datePublished": "2022-02-01T01:47:40.000Z",
    "dateReserved": "2022-02-01T00:00:00.000Z",
    "dateUpdated": "2024-08-04T05:10:35.449Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2021-46664 (GCVE-0-2021-46664)

Vulnerability from cvelistv5 – Published: 2022-02-01 01:47 – Updated: 2024-08-04 05:17

Summary

MariaDB through 10.5.9 allows an application crash in sub_select_postjoin_aggr for a NULL value of aggr.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

6 references

URL	Tags
https://jira.mariadb.org/browse/MDEV-25761	x_refsource_MISC
https://security.netapp.com/advisory/ntap-2022022…	x_refsource_CONFIRM
https://mariadb.com/kb/en/security/	x_refsource_CONFIRM
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T05:17:41.530Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://jira.mariadb.org/browse/MDEV-25761"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20220221-0002/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://mariadb.com/kb/en/security/"
          },
          {
            "name": "FEDORA-2022-263f7cc483",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NJ4KDAGF3H4D4BDTHRAM6ZEAJJWWMRUO/"
          },
          {
            "name": "FEDORA-2022-03350936ee",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DKJRBYJAQCOPHSED43A3HUPNKQLDTFGD/"
          },
          {
            "name": "FEDORA-2022-5cfe372ab7",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EZFZVMJL5UDTOZMARLXQIMG3BTG6UNYW/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "MariaDB through 10.5.9 allows an application crash in sub_select_postjoin_aggr for a NULL value of aggr."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-05-08T03:06:40.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://jira.mariadb.org/browse/MDEV-25761"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20220221-0002/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://mariadb.com/kb/en/security/"
        },
        {
          "name": "FEDORA-2022-263f7cc483",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NJ4KDAGF3H4D4BDTHRAM6ZEAJJWWMRUO/"
        },
        {
          "name": "FEDORA-2022-03350936ee",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DKJRBYJAQCOPHSED43A3HUPNKQLDTFGD/"
        },
        {
          "name": "FEDORA-2022-5cfe372ab7",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EZFZVMJL5UDTOZMARLXQIMG3BTG6UNYW/"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2021-46664",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "MariaDB through 10.5.9 allows an application crash in sub_select_postjoin_aggr for a NULL value of aggr."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://jira.mariadb.org/browse/MDEV-25761",
              "refsource": "MISC",
              "url": "https://jira.mariadb.org/browse/MDEV-25761"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20220221-0002/",
              "refsource": "CONFIRM",
              "url": "https://security.netapp.com/advisory/ntap-20220221-0002/"
            },
            {
              "name": "https://mariadb.com/kb/en/security/",
              "refsource": "CONFIRM",
              "url": "https://mariadb.com/kb/en/security/"
            },
            {
              "name": "FEDORA-2022-263f7cc483",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NJ4KDAGF3H4D4BDTHRAM6ZEAJJWWMRUO/"
            },
            {
              "name": "FEDORA-2022-03350936ee",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DKJRBYJAQCOPHSED43A3HUPNKQLDTFGD/"
            },
            {
              "name": "FEDORA-2022-5cfe372ab7",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EZFZVMJL5UDTOZMARLXQIMG3BTG6UNYW/"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2021-46664",
    "datePublished": "2022-02-01T01:47:27.000Z",
    "dateReserved": "2022-02-01T00:00:00.000Z",
    "dateUpdated": "2024-08-04T05:17:41.530Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2021-46665 (GCVE-0-2021-46665)

Vulnerability from cvelistv5 – Published: 2022-02-01 01:47 – Updated: 2024-08-04 05:17

Summary

MariaDB through 10.5.9 allows a sql_parse.cc application crash because of incorrect used_tables expectations.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

6 references

URL	Tags
https://jira.mariadb.org/browse/MDEV-25636	x_refsource_MISC
https://security.netapp.com/advisory/ntap-2022022…	x_refsource_CONFIRM
https://mariadb.com/kb/en/security/	x_refsource_CONFIRM
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T05:17:41.616Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://jira.mariadb.org/browse/MDEV-25636"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20220221-0002/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://mariadb.com/kb/en/security/"
          },
          {
            "name": "FEDORA-2022-263f7cc483",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NJ4KDAGF3H4D4BDTHRAM6ZEAJJWWMRUO/"
          },
          {
            "name": "FEDORA-2022-03350936ee",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DKJRBYJAQCOPHSED43A3HUPNKQLDTFGD/"
          },
          {
            "name": "FEDORA-2022-5cfe372ab7",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EZFZVMJL5UDTOZMARLXQIMG3BTG6UNYW/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "MariaDB through 10.5.9 allows a sql_parse.cc application crash because of incorrect used_tables expectations."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-05-08T03:06:48.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://jira.mariadb.org/browse/MDEV-25636"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20220221-0002/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://mariadb.com/kb/en/security/"
        },
        {
          "name": "FEDORA-2022-263f7cc483",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NJ4KDAGF3H4D4BDTHRAM6ZEAJJWWMRUO/"
        },
        {
          "name": "FEDORA-2022-03350936ee",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DKJRBYJAQCOPHSED43A3HUPNKQLDTFGD/"
        },
        {
          "name": "FEDORA-2022-5cfe372ab7",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EZFZVMJL5UDTOZMARLXQIMG3BTG6UNYW/"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2021-46665",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "MariaDB through 10.5.9 allows a sql_parse.cc application crash because of incorrect used_tables expectations."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://jira.mariadb.org/browse/MDEV-25636",
              "refsource": "MISC",
              "url": "https://jira.mariadb.org/browse/MDEV-25636"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20220221-0002/",
              "refsource": "CONFIRM",
              "url": "https://security.netapp.com/advisory/ntap-20220221-0002/"
            },
            {
              "name": "https://mariadb.com/kb/en/security/",
              "refsource": "CONFIRM",
              "url": "https://mariadb.com/kb/en/security/"
            },
            {
              "name": "FEDORA-2022-263f7cc483",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NJ4KDAGF3H4D4BDTHRAM6ZEAJJWWMRUO/"
            },
            {
              "name": "FEDORA-2022-03350936ee",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DKJRBYJAQCOPHSED43A3HUPNKQLDTFGD/"
            },
            {
              "name": "FEDORA-2022-5cfe372ab7",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EZFZVMJL5UDTOZMARLXQIMG3BTG6UNYW/"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2021-46665",
    "datePublished": "2022-02-01T01:47:15.000Z",
    "dateReserved": "2022-02-01T00:00:00.000Z",
    "dateUpdated": "2024-08-04T05:17:41.616Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2021-46668 (GCVE-0-2021-46668)

Vulnerability from cvelistv5 – Published: 2022-02-01 01:46 – Updated: 2024-08-04 05:17

Summary

MariaDB through 10.5.9 allows an application crash via certain long SELECT DISTINCT statements that improperly interact with storage-engine resource limitations for temporary data structures.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

6 references

URL	Tags
https://jira.mariadb.org/browse/MDEV-25787	x_refsource_MISC
https://security.netapp.com/advisory/ntap-2022022…	x_refsource_CONFIRM
https://mariadb.com/kb/en/security/	x_refsource_CONFIRM
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T05:17:41.665Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://jira.mariadb.org/browse/MDEV-25787"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20220221-0002/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://mariadb.com/kb/en/security/"
          },
          {
            "name": "FEDORA-2022-263f7cc483",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NJ4KDAGF3H4D4BDTHRAM6ZEAJJWWMRUO/"
          },
          {
            "name": "FEDORA-2022-03350936ee",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DKJRBYJAQCOPHSED43A3HUPNKQLDTFGD/"
          },
          {
            "name": "FEDORA-2022-5cfe372ab7",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EZFZVMJL5UDTOZMARLXQIMG3BTG6UNYW/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "MariaDB through 10.5.9 allows an application crash via certain long SELECT DISTINCT statements that improperly interact with storage-engine resource limitations for temporary data structures."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-05-08T03:06:44.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://jira.mariadb.org/browse/MDEV-25787"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20220221-0002/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://mariadb.com/kb/en/security/"
        },
        {
          "name": "FEDORA-2022-263f7cc483",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NJ4KDAGF3H4D4BDTHRAM6ZEAJJWWMRUO/"
        },
        {
          "name": "FEDORA-2022-03350936ee",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DKJRBYJAQCOPHSED43A3HUPNKQLDTFGD/"
        },
        {
          "name": "FEDORA-2022-5cfe372ab7",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EZFZVMJL5UDTOZMARLXQIMG3BTG6UNYW/"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2021-46668",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "MariaDB through 10.5.9 allows an application crash via certain long SELECT DISTINCT statements that improperly interact with storage-engine resource limitations for temporary data structures."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://jira.mariadb.org/browse/MDEV-25787",
              "refsource": "MISC",
              "url": "https://jira.mariadb.org/browse/MDEV-25787"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20220221-0002/",
              "refsource": "CONFIRM",
              "url": "https://security.netapp.com/advisory/ntap-20220221-0002/"
            },
            {
              "name": "https://mariadb.com/kb/en/security/",
              "refsource": "CONFIRM",
              "url": "https://mariadb.com/kb/en/security/"
            },
            {
              "name": "FEDORA-2022-263f7cc483",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NJ4KDAGF3H4D4BDTHRAM6ZEAJJWWMRUO/"
            },
            {
              "name": "FEDORA-2022-03350936ee",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DKJRBYJAQCOPHSED43A3HUPNKQLDTFGD/"
            },
            {
              "name": "FEDORA-2022-5cfe372ab7",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EZFZVMJL5UDTOZMARLXQIMG3BTG6UNYW/"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2021-46668",
    "datePublished": "2022-02-01T01:46:34.000Z",
    "dateReserved": "2022-02-01T00:00:00.000Z",
    "dateUpdated": "2024-08-04T05:17:41.665Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2021-46669 (GCVE-0-2021-46669)

Vulnerability from cvelistv5 – Published: 2022-02-01 01:46 – Updated: 2024-08-04 05:17

Summary

MariaDB through 10.5.9 allows attackers to trigger a convert_const_to_int use-after-free when the BIGINT data type is used.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

6 references

URL	Tags
https://jira.mariadb.org/browse/MDEV-25638	x_refsource_MISC
https://security.netapp.com/advisory/ntap-2022022…	x_refsource_CONFIRM
https://mariadb.com/kb/en/security/	x_refsource_CONFIRM
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://lists.debian.org/debian-lts-announce/2022…	mailing-listx_refsource_MLIST

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T05:17:41.543Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://jira.mariadb.org/browse/MDEV-25638"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20220221-0002/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://mariadb.com/kb/en/security/"
          },
          {
            "name": "FEDORA-2022-25dcba7104",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FRJCSPQHYPKTWXXZVDMY6JAHZJQ4TZ5X/"
          },
          {
            "name": "FEDORA-2022-e6dc7ed871",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KHEOTQ63YWC3PGHGDFGS7AZIEXCGOPWH/"
          },
          {
            "name": "[debian-lts-announce] 20220916 [SECURITY] [DLA 3114-1] mariadb-10.3 security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2022/09/msg00023.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "MariaDB through 10.5.9 allows attackers to trigger a convert_const_to_int use-after-free when the BIGINT data type is used."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-09-16T10:06:08.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://jira.mariadb.org/browse/MDEV-25638"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20220221-0002/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://mariadb.com/kb/en/security/"
        },
        {
          "name": "FEDORA-2022-25dcba7104",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FRJCSPQHYPKTWXXZVDMY6JAHZJQ4TZ5X/"
        },
        {
          "name": "FEDORA-2022-e6dc7ed871",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KHEOTQ63YWC3PGHGDFGS7AZIEXCGOPWH/"
        },
        {
          "name": "[debian-lts-announce] 20220916 [SECURITY] [DLA 3114-1] mariadb-10.3 security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2022/09/msg00023.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2021-46669",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "MariaDB through 10.5.9 allows attackers to trigger a convert_const_to_int use-after-free when the BIGINT data type is used."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://jira.mariadb.org/browse/MDEV-25638",
              "refsource": "MISC",
              "url": "https://jira.mariadb.org/browse/MDEV-25638"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20220221-0002/",
              "refsource": "CONFIRM",
              "url": "https://security.netapp.com/advisory/ntap-20220221-0002/"
            },
            {
              "name": "https://mariadb.com/kb/en/security/",
              "refsource": "CONFIRM",
              "url": "https://mariadb.com/kb/en/security/"
            },
            {
              "name": "FEDORA-2022-25dcba7104",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FRJCSPQHYPKTWXXZVDMY6JAHZJQ4TZ5X/"
            },
            {
              "name": "FEDORA-2022-e6dc7ed871",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KHEOTQ63YWC3PGHGDFGS7AZIEXCGOPWH/"
            },
            {
              "name": "[debian-lts-announce] 20220916 [SECURITY] [DLA 3114-1] mariadb-10.3 security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2022/09/msg00023.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2021-46669",
    "datePublished": "2022-02-01T01:46:16.000Z",
    "dateReserved": "2022-02-01T00:00:00.000Z",
    "dateUpdated": "2024-08-04T05:17:41.543Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-21595 (GCVE-0-2022-21595)

Vulnerability from cvelistv5 – Published: 2022-10-18 00:00 – Updated: 2024-09-24 19:38

Summary

Severity

4.4 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-09-23 15:21 UTC

CWE

Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.

Assigner

oracle mitre root

References

2 references

URL	Tags
https://www.oracle.com/security-alerts/cpuoct2022.html
https://security.netapp.com/advisory/ntap-2022102…

Impacted products

1 product

Vendor	Product	Version
Oracle Corporation	MySQL Server	Affected: 5.7.36 and prior Affected: 8.0.27 and prior

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T02:46:38.716Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.oracle.com/security-alerts/cpuoct2022.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20221028-0013/"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2022-21595",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-23T15:21:13.860583Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-24T19:38:32.221Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MySQL Server",
          "vendor": "Oracle Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "5.7.36 and prior"
            },
            {
              "status": "affected",
              "version": "8.0.27 and prior"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Vulnerability in the MySQL Server product of Oracle MySQL (component: C API). Supported versions that are affected are 5.7.36 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H)."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 4.4,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server.",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-10-28T00:00:00.000Z",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "url": "https://www.oracle.com/security-alerts/cpuoct2022.html"
        },
        {
          "url": "https://security.netapp.com/advisory/ntap-20221028-0013/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2022-21595",
    "datePublished": "2022-10-18T00:00:00.000Z",
    "dateReserved": "2021-11-15T00:00:00.000Z",
    "dateUpdated": "2024-09-24T19:38:32.221Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-24048 (GCVE-0-2022-24048)

Vulnerability from cvelistv5 – Published: 2022-02-18 19:51 – Updated: 2024-08-03 03:59

Summary

Severity

7 (High)


                        
                          CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-121 - Stack-based Buffer Overflow

Assigner

zdi mitre root

References

6 references

URL	Tags
https://mariadb.com/kb/en/security/	x_refsource_MISC
https://www.zerodayinitiative.com/advisories/ZDI-…	x_refsource_MISC
https://security.netapp.com/advisory/ntap-2022031…	x_refsource_CONFIRM
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA

Impacted products

1 product

Vendor	Product	Version
MariaDB	MariaDB	Affected: 10.6.5

Credits

Anonymous

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T03:59:23.650Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://mariadb.com/kb/en/security/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.zerodayinitiative.com/advisories/ZDI-22-363/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20220318-0004/"
          },
          {
            "name": "FEDORA-2022-263f7cc483",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NJ4KDAGF3H4D4BDTHRAM6ZEAJJWWMRUO/"
          },
          {
            "name": "FEDORA-2022-03350936ee",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DKJRBYJAQCOPHSED43A3HUPNKQLDTFGD/"
          },
          {
            "name": "FEDORA-2022-5cfe372ab7",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EZFZVMJL5UDTOZMARLXQIMG3BTG6UNYW/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MariaDB",
          "vendor": "MariaDB",
          "versions": [
            {
              "status": "affected",
              "version": "10.6.5"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Anonymous"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "MariaDB CONNECT Storage Engine Stack-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL queries. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the service account. Was ZDI-CAN-16191."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-121",
              "description": "CWE-121: Stack-based Buffer Overflow",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-05-08T03:06:42.000Z",
        "orgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
        "shortName": "zdi"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://mariadb.com/kb/en/security/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.zerodayinitiative.com/advisories/ZDI-22-363/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20220318-0004/"
        },
        {
          "name": "FEDORA-2022-263f7cc483",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NJ4KDAGF3H4D4BDTHRAM6ZEAJJWWMRUO/"
        },
        {
          "name": "FEDORA-2022-03350936ee",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DKJRBYJAQCOPHSED43A3HUPNKQLDTFGD/"
        },
        {
          "name": "FEDORA-2022-5cfe372ab7",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EZFZVMJL5UDTOZMARLXQIMG3BTG6UNYW/"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "zdi-disclosures@trendmicro.com",
          "ID": "CVE-2022-24048",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "MariaDB",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "10.6.5"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "MariaDB"
              }
            ]
          }
        },
        "credit": "Anonymous",
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "MariaDB CONNECT Storage Engine Stack-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL queries. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the service account. Was ZDI-CAN-16191."
            }
          ]
        },
        "impact": {
          "cvss": {
            "vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          }
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-121: Stack-based Buffer Overflow"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://mariadb.com/kb/en/security/",
              "refsource": "MISC",
              "url": "https://mariadb.com/kb/en/security/"
            },
            {
              "name": "https://www.zerodayinitiative.com/advisories/ZDI-22-363/",
              "refsource": "MISC",
              "url": "https://www.zerodayinitiative.com/advisories/ZDI-22-363/"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20220318-0004/",
              "refsource": "CONFIRM",
              "url": "https://security.netapp.com/advisory/ntap-20220318-0004/"
            },
            {
              "name": "FEDORA-2022-263f7cc483",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NJ4KDAGF3H4D4BDTHRAM6ZEAJJWWMRUO/"
            },
            {
              "name": "FEDORA-2022-03350936ee",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DKJRBYJAQCOPHSED43A3HUPNKQLDTFGD/"
            },
            {
              "name": "FEDORA-2022-5cfe372ab7",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EZFZVMJL5UDTOZMARLXQIMG3BTG6UNYW/"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
    "assignerShortName": "zdi",
    "cveId": "CVE-2022-24048",
    "datePublished": "2022-02-18T19:51:41.000Z",
    "dateReserved": "2022-01-27T00:00:00.000Z",
    "dateUpdated": "2024-08-03T03:59:23.650Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-24050 (GCVE-0-2022-24050)

Vulnerability from cvelistv5 – Published: 2022-02-18 19:51 – Updated: 2024-08-03 03:59

Summary

Severity

7 (High)


                        
                          CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-416 - Use After Free

Assigner

zdi mitre root

References

6 references

URL	Tags
https://mariadb.com/kb/en/security/	x_refsource_MISC
https://www.zerodayinitiative.com/advisories/ZDI-…	x_refsource_MISC
https://security.netapp.com/advisory/ntap-2022031…	x_refsource_CONFIRM
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisoryx_refsource_FEDORA

Impacted products

1 product

Vendor	Product	Version
MariaDB	MariaDB	Affected: 10.6.5

Credits

Anonymous

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T03:59:23.684Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://mariadb.com/kb/en/security/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.zerodayinitiative.com/advisories/ZDI-22-364/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20220318-0004/"
          },
          {
            "name": "FEDORA-2022-263f7cc483",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NJ4KDAGF3H4D4BDTHRAM6ZEAJJWWMRUO/"
          },
          {
            "name": "FEDORA-2022-03350936ee",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DKJRBYJAQCOPHSED43A3HUPNKQLDTFGD/"
          },
          {
            "name": "FEDORA-2022-5cfe372ab7",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EZFZVMJL5UDTOZMARLXQIMG3BTG6UNYW/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "MariaDB",
          "vendor": "MariaDB",
          "versions": [
            {
              "status": "affected",
              "version": "10.6.5"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Anonymous"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "MariaDB CONNECT Storage Engine Use-After-Free Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL queries. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the service account. Was ZDI-CAN-16207."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-416",
              "description": "CWE-416: Use After Free",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-05-08T03:06:43.000Z",
        "orgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
        "shortName": "zdi"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://mariadb.com/kb/en/security/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.zerodayinitiative.com/advisories/ZDI-22-364/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20220318-0004/"
        },
        {
          "name": "FEDORA-2022-263f7cc483",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NJ4KDAGF3H4D4BDTHRAM6ZEAJJWWMRUO/"
        },
        {
          "name": "FEDORA-2022-03350936ee",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DKJRBYJAQCOPHSED43A3HUPNKQLDTFGD/"
        },
        {
          "name": "FEDORA-2022-5cfe372ab7",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EZFZVMJL5UDTOZMARLXQIMG3BTG6UNYW/"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "zdi-disclosures@trendmicro.com",
          "ID": "CVE-2022-24050",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "MariaDB",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "10.6.5"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "MariaDB"
              }
            ]
          }
        },
        "credit": "Anonymous",
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "MariaDB CONNECT Storage Engine Use-After-Free Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL queries. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the service account. Was ZDI-CAN-16207."
            }
          ]
        },
        "impact": {
          "cvss": {
            "vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          }
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-416: Use After Free"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://mariadb.com/kb/en/security/",
              "refsource": "MISC",
              "url": "https://mariadb.com/kb/en/security/"
            },
            {
              "name": "https://www.zerodayinitiative.com/advisories/ZDI-22-364/",
              "refsource": "MISC",
              "url": "https://www.zerodayinitiative.com/advisories/ZDI-22-364/"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20220318-0004/",
              "refsource": "CONFIRM",
              "url": "https://security.netapp.com/advisory/ntap-20220318-0004/"
            },
            {
              "name": "FEDORA-2022-263f7cc483",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NJ4KDAGF3H4D4BDTHRAM6ZEAJJWWMRUO/"
            },
            {
              "name": "FEDORA-2022-03350936ee",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DKJRBYJAQCOPHSED43A3HUPNKQLDTFGD/"
            },
            {
              "name": "FEDORA-2022-5cfe372ab7",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EZFZVMJL5UDTOZMARLXQIMG3BTG6UNYW/"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
    "assignerShortName": "zdi",
    "cveId": "CVE-2022-24050",
    "datePublished": "2022-02-18T19:51:44.000Z",
    "dateReserved": "2022-01-27T00:00:00.000Z",
    "dateUpdated": "2024-08-03T03:59:23.684Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.

Action not permitted

RHSA-2022_5948

CVE-2021-46659 (GCVE-0-2021-46659)

CVE-2021-46661 (GCVE-0-2021-46661)

CVE-2021-46663 (GCVE-0-2021-46663)

CVE-2021-46664 (GCVE-0-2021-46664)

CVE-2021-46665 (GCVE-0-2021-46665)

CVE-2021-46668 (GCVE-0-2021-46668)

CVE-2021-46669 (GCVE-0-2021-46669)

CVE-2022-21595 (GCVE-0-2022-21595)

CVE-2022-24048 (GCVE-0-2022-24048)

CVE-2022-24050 (GCVE-0-2022-24050)

Tags

Sightings

Nomenclature