Описание
MariaDB before 10.6.5 has a sql_lex.cc integer overflow, leading to an application crash.
Пакеты
Пакет | Статус | Версия исправления | Релиз | Тип |
---|---|---|---|---|
mariadb-10.6 | fixed | 1:10.6.5-1 | package | |
mariadb-10.5 | removed | package | ||
mariadb-10.5 | fixed | 1:10.5.15-0+deb11u1 | bullseye | package |
mariadb-10.3 | removed | package | ||
mariadb-10.3 | fixed | 1:10.3.34-0+deb10u1 | buster | package |
Примечания
Bug MariaDB: https://jira.mariadb.org/browse/MDEV-26350
Commit MariaDB: https://github.com/MariaDB/server/commit/0dec71ca53729bd1a565bdc800e64008b44ffa48 (mariadb-10.2.41)
Fixed in MariaDB: 10.2.41, 10.3.32, 10.4.22, 10.5.13, 10.6.5
EPSS
Процентиль: 13%
0.00044
Низкий
Связанные уязвимости
CVSS3: 5.5
ubuntu
больше 3 лет назад
MariaDB before 10.6.5 has a sql_lex.cc integer overflow, leading to an application crash.
CVSS3: 5.5
redhat
почти 4 года назад
MariaDB before 10.6.5 has a sql_lex.cc integer overflow, leading to an application crash.
CVSS3: 5.5
nvd
больше 3 лет назад
MariaDB before 10.6.5 has a sql_lex.cc integer overflow, leading to an application crash.
CVSS3: 7.5
github
больше 3 лет назад
MariaDB before 10.6.5 has a sql_lex.cc integer overflow, leading to an application crash.
EPSS
Процентиль: 13%
0.00044
Низкий