Описание
MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component Item_func_in::cleanup/Item::cleanup_processor.
Пакеты
Пакет | Статус | Версия исправления | Релиз | Тип |
---|---|---|---|---|
mariadb-10.6 | fixed | 1:10.6.8-1 | package | |
mariadb-10.5 | removed | package | ||
mariadb-10.5 | fixed | 1:10.5.18-0+deb11u1 | bullseye | package |
mariadb-10.3 | removed | package |
Примечания
Main bug https://jira.mariadb.org/browse/MDEV-26407
Duplicate https://jira.mariadb.org/browse/MDEV-24176
Fixed in: 10.3.35, 10.4.25, 10.5.16, 10.6.8, 10.7.4
Does not affects version before 10.3 due to need virtual column feature
Commit [1/2]: https://github.com/MariaDB/server/commit/08c7ab404f69d9c4ca6ca7a9cf7eec74c804f917 (mariadb-10.3.35)
Commit [2/2]: https://github.com/MariaDB/server/commit/b3c3291f0b7c1623cb20663f7cf31b7f749768bc (mariadb-10.3.35)
Связанные уязвимости
MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component Item_func_in::cleanup/Item::cleanup_processor.
MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component Item_func_in::cleanup/Item::cleanup_processor.
MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component Item_func_in::cleanup/Item::cleanup_processor.
MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component Item_func_in::cleanup/Item::cleanup_processor.
Уязвимость функции Item_func_in::cleanup/Item::cleanup_processor системы управления базами данных MariaDB, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность, доступность защищаемой информации