Описание
MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component Exec_time_tracker::get_loops/Filesort_tracker::report_use/filesort.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| mariadb-10.6 | fixed | 1:10.6.8-1 | package | |
| mariadb-10.5 | removed | package | ||
| mariadb-10.5 | fixed | 1:10.5.18-0+deb11u1 | bullseye | package |
| mariadb-10.3 | removed | package |
Примечания
Bug MariaDB: https://jira.mariadb.org/browse/MDEV-26419
Duplicate MariaDB bug: https://jira.mariadb.org/browse/MDEV-15208
Fixed in: 10.2.44, 10.3.35, 10.4.25, 10.5.16, 10.6.8, 10.7.4
Affect windows function introduced in 10.2 see https://mariadb.com/kb/en/changes-improvements-in-mariadb-10-2/
Commit [1/2]: https://github.com/MariaDB/server/commit/942a9791b2231273ba20649a658c856641268fae (mariadb-10.2.44)
Commit [2/2]: https://github.com/MariaDB/server/commit/647e952315740286df3cf6643732ad8deb1ff7fe (mariadb-10.3.44)
EPSS
Связанные уязвимости
MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component Exec_time_tracker::get_loops/Filesort_tracker::report_use/filesort.
MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component Exec_time_tracker::get_loops/Filesort_tracker::report_use/filesort.
MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component Exec_time_tracker::get_loops/Filesort_tracker::report_use/filesort.
MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component Exec_time_tracker::get_loops/Filesort_tracker::report_use/filesort.
Уязвимость функции Exec_time_tracker::get_loops/Filesort_tracker::report_use/filesort системы управления базами данных MariaDB, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность, доступность защищаемой информации
EPSS