MariaDB — ответвление от системы управления базами данных MySQL, разрабатываемое сообществом под лицензией GNU GPL.
Релизный цикл, информация об уязвимостях
График релизов
Количество 2 144
CVE-2022-47015
MariaDB Server before 10.3.34 thru 10.9.3 is vulnerable to Denial of Service. It is possible for function spider_db_mbase::print_warnings to dereference a null pointer.
GHSA-v65w-qwp3-hm34
In MariaDB before 10.9.2, compress_write in extra/mariabackup/ds_compress.cc does not release data_mutex upon a stream write failure, which allows local users to trigger a deadlock.
CVE-2022-38791
In MariaDB before 10.9.2, compress_write in extra/mariabackup/ds_compress.cc does not release data_mutex upon a stream write failure, which allows local users to trigger a deadlock.
CVE-2022-38791
In MariaDB before 10.9.2, compress_write in extra/mariabackup/ds_compr ...
CVE-2022-38791
In MariaDB before 10.9.2, compress_write in extra/mariabackup/ds_compress.cc does not release data_mutex upon a stream write failure, which allows local users to trigger a deadlock.
BDU:2023-05678
Уязвимость компонента ds_compress.cc системы управления базами данных MariaDB, позволяющая нарушителю вызвать отказ в обслуживании
GHSA-vcx9-8fp4-h37w
MariaDB v10.4 to v10.7 was discovered to contain an use-after-poison in prepare_inplace_add_virtual at /storage/innobase/handler/handler0alter.cc.
GHSA-cxcg-577f-2582
MariaDB v10.2 to v10.6.1 was discovered to contain a segmentation fault via the component Item_subselect::init_expr_cache_tracker.
GHSA-hc55-j7j2-f8w9
MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component Item_args::walk_args.
GHSA-8rp2-7jc6-wrw4
MariaDB v10.4 to v10.8 was discovered to contain a segmentation fault via the component Item_field::fix_outer_field.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
 | CVE-2022-47015 MariaDB Server before 10.3.34 thru 10.9.3 is vulnerable to Denial of Service. It is possible for function spider_db_mbase::print_warnings to dereference a null pointer. | CVSS3: 6.5 | 0% Низкий | почти 3 года назад |
| GHSA-v65w-qwp3-hm34 In MariaDB before 10.9.2, compress_write in extra/mariabackup/ds_compress.cc does not release data_mutex upon a stream write failure, which allows local users to trigger a deadlock. | CVSS3: 5.5 | 0% Низкий | почти 3 года назад |
 | CVE-2022-38791 In MariaDB before 10.9.2, compress_write in extra/mariabackup/ds_compress.cc does not release data_mutex upon a stream write failure, which allows local users to trigger a deadlock. | CVSS3: 5.5 | 0% Низкий | почти 3 года назад |
| CVE-2022-38791 In MariaDB before 10.9.2, compress_write in extra/mariabackup/ds_compr ... | CVSS3: 5.5 | 0% Низкий | почти 3 года назад |
 | CVE-2022-38791 In MariaDB before 10.9.2, compress_write in extra/mariabackup/ds_compress.cc does not release data_mutex upon a stream write failure, which allows local users to trigger a deadlock. | CVSS3: 5.5 | 0% Низкий | почти 3 года назад |
 | BDU:2023-05678 Уязвимость компонента ds_compress.cc системы управления базами данных MariaDB, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 5.5 | 0% Низкий | почти 3 года назад |
| GHSA-vcx9-8fp4-h37w MariaDB v10.4 to v10.7 was discovered to contain an use-after-poison in prepare_inplace_add_virtual at /storage/innobase/handler/handler0alter.cc. | CVSS3: 9.8 | 0% Низкий | около 3 лет назад |
| GHSA-cxcg-577f-2582 MariaDB v10.2 to v10.6.1 was discovered to contain a segmentation fault via the component Item_subselect::init_expr_cache_tracker. | CVSS3: 7.5 | 0% Низкий | около 3 лет назад |
| GHSA-hc55-j7j2-f8w9 MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component Item_args::walk_args. | CVSS3: 7.5 | 0% Низкий | около 3 лет назад |
| GHSA-8rp2-7jc6-wrw4 MariaDB v10.4 to v10.8 was discovered to contain a segmentation fault via the component Item_field::fix_outer_field. | CVSS3: 7.5 | 0% Низкий | около 3 лет назад |
Уязвимостей на страницу