Логотип exploitDog
bind: "CVE-2022-24052"
Консоль
Логотип exploitDog

exploitDog

bind: "CVE-2022-24052"

Количество 25

Количество 25

ubuntu логотип

CVE-2022-24052

почти 4 года назад

MariaDB CONNECT Storage Engine Heap-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL queries. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the service account. Was ZDI-CAN-16190.

CVSS3: 7.8
EPSS: Низкий
redhat логотип

CVE-2022-24052

почти 4 года назад

MariaDB CONNECT Storage Engine Heap-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL queries. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the service account. Was ZDI-CAN-16190.

CVSS3: 7
EPSS: Низкий
nvd логотип

CVE-2022-24052

почти 4 года назад

MariaDB CONNECT Storage Engine Heap-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL queries. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the service account. Was ZDI-CAN-16190.

CVSS3: 7.8
EPSS: Низкий
msrc логотип

CVE-2022-24052

почти 4 года назад

MariaDB CONNECT Storage Engine Heap-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL queries. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the service account. Was ZDI-CAN-16190.

CVSS3: 7.8
EPSS: Низкий
debian логотип

CVE-2022-24052

почти 4 года назад

MariaDB CONNECT Storage Engine Heap-based Buffer Overflow Privilege Es ...

CVSS3: 7.8
EPSS: Низкий
github логотип

GHSA-pfvf-3927-r9fx

почти 4 года назад

This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL queries. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the service account. Was ZDI-CAN-16190.

CVSS3: 7.8
EPSS: Низкий
fstec логотип

BDU:2022-00883

почти 4 года назад

Уязвимость системы управления базами данных MariaDB, связанная с переполнением буфера в динамической памяти, позволяющая нарушителю выполнить произвольный код

CVSS3: 7
EPSS: Низкий
redos логотип

ROS-20220217-01

почти 4 года назад

Уязвимость системы управления базами данных MariaDB

EPSS: Низкий
suse-cvrf логотип

openSUSE-SU-2022:0731-1

больше 3 лет назад

Security update for mariadb

EPSS: Низкий
suse-cvrf логотип

openSUSE-SU-2022:0726-1

больше 3 лет назад

Security update for mariadb

EPSS: Низкий
suse-cvrf логотип

openSUSE-SU-2022:0725-1

больше 3 лет назад

Security update for mariadb

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2022:0782-1

больше 3 лет назад

Security update for mariadb

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2022:0731-2

больше 3 лет назад

Security update for mariadb

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2022:0731-1

больше 3 лет назад

Security update for mariadb

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2022:0726-1

больше 3 лет назад

Security update for mariadb

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2022:0725-1

больше 3 лет назад

Security update for mariadb

EPSS: Низкий
oracle-oval логотип

ELSA-2022-6443

около 3 лет назад

ELSA-2022-6443: mariadb:10.3 security and bug fix update (MODERATE)

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2022:2561-1

больше 3 лет назад

Security update for mariadb

EPSS: Низкий
rocky логотип

RLSA-2022:6443

около 3 лет назад

Moderate: mariadb:10.3 security and bug fix update

EPSS: Низкий
oracle-oval логотип

ELSA-2022-5948

больше 3 лет назад

ELSA-2022-5948: galera, mariadb, and mysql-selinux security, bug fix, and enhancement update (MODERATE)

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2022-24052

MariaDB CONNECT Storage Engine Heap-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL queries. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the service account. Was ZDI-CAN-16190.

CVSS3: 7.8
0%
Низкий
почти 4 года назад
redhat логотип
CVE-2022-24052

MariaDB CONNECT Storage Engine Heap-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL queries. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the service account. Was ZDI-CAN-16190.

CVSS3: 7
0%
Низкий
почти 4 года назад
nvd логотип
CVE-2022-24052

MariaDB CONNECT Storage Engine Heap-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL queries. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the service account. Was ZDI-CAN-16190.

CVSS3: 7.8
0%
Низкий
почти 4 года назад
msrc логотип
CVE-2022-24052

MariaDB CONNECT Storage Engine Heap-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL queries. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the service account. Was ZDI-CAN-16190.

CVSS3: 7.8
0%
Низкий
почти 4 года назад
debian логотип
CVE-2022-24052

MariaDB CONNECT Storage Engine Heap-based Buffer Overflow Privilege Es ...

CVSS3: 7.8
0%
Низкий
почти 4 года назад
github логотип
GHSA-pfvf-3927-r9fx

This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL queries. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the service account. Was ZDI-CAN-16190.

CVSS3: 7.8
0%
Низкий
почти 4 года назад
fstec логотип
BDU:2022-00883

Уязвимость системы управления базами данных MariaDB, связанная с переполнением буфера в динамической памяти, позволяющая нарушителю выполнить произвольный код

CVSS3: 7
почти 4 года назад
redos логотип
ROS-20220217-01

Уязвимость системы управления базами данных MariaDB

почти 4 года назад
suse-cvrf логотип
openSUSE-SU-2022:0731-1

Security update for mariadb

больше 3 лет назад
suse-cvrf логотип
openSUSE-SU-2022:0726-1

Security update for mariadb

больше 3 лет назад
suse-cvrf логотип
openSUSE-SU-2022:0725-1

Security update for mariadb

больше 3 лет назад
suse-cvrf логотип
SUSE-SU-2022:0782-1

Security update for mariadb

больше 3 лет назад
suse-cvrf логотип
SUSE-SU-2022:0731-2

Security update for mariadb

больше 3 лет назад
suse-cvrf логотип
SUSE-SU-2022:0731-1

Security update for mariadb

больше 3 лет назад
suse-cvrf логотип
SUSE-SU-2022:0726-1

Security update for mariadb

больше 3 лет назад
suse-cvrf логотип
SUSE-SU-2022:0725-1

Security update for mariadb

больше 3 лет назад
oracle-oval логотип
ELSA-2022-6443

ELSA-2022-6443: mariadb:10.3 security and bug fix update (MODERATE)

около 3 лет назад
suse-cvrf логотип
SUSE-SU-2022:2561-1

Security update for mariadb

больше 3 лет назад
rocky логотип
RLSA-2022:6443

Moderate: mariadb:10.3 security and bug fix update

около 3 лет назад
oracle-oval логотип
ELSA-2022-5948

ELSA-2022-5948: galera, mariadb, and mysql-selinux security, bug fix, and enhancement update (MODERATE)

больше 3 лет назад

Уязвимостей на страницу