Логотип exploitDog
bind:"GHSA-3p23-jfm6-493m" OR bind:"CVE-2022-24048"
Консоль
Логотип exploitDog

exploitDog

bind:"GHSA-3p23-jfm6-493m" OR bind:"CVE-2022-24048"

Количество 25

Количество 25

github логотип

GHSA-3p23-jfm6-493m

почти 4 года назад

This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL queries. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the service account. Was ZDI-CAN-16191.

CVSS3: 7.8
EPSS: Низкий
ubuntu логотип

CVE-2022-24048

почти 4 года назад

MariaDB CONNECT Storage Engine Stack-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL queries. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the service account. Was ZDI-CAN-16191.

CVSS3: 7.8
EPSS: Низкий
redhat логотип

CVE-2022-24048

почти 4 года назад

MariaDB CONNECT Storage Engine Stack-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL queries. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the service account. Was ZDI-CAN-16191.

CVSS3: 7.8
EPSS: Низкий
nvd логотип

CVE-2022-24048

почти 4 года назад

MariaDB CONNECT Storage Engine Stack-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL queries. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the service account. Was ZDI-CAN-16191.

CVSS3: 7.8
EPSS: Низкий
msrc логотип

CVE-2022-24048

почти 4 года назад

MariaDB CONNECT Storage Engine Stack-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL queries. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the service account. Was ZDI-CAN-16191.

CVSS3: 7.8
EPSS: Низкий
debian логотип

CVE-2022-24048

почти 4 года назад

MariaDB CONNECT Storage Engine Stack-based Buffer Overflow Privilege E ...

CVSS3: 7.8
EPSS: Низкий
fstec логотип

BDU:2022-00903

почти 4 года назад

Уязвимость системы управления базами данных MariaDB, связана с переполнением буфера в стеке, позволяющая нарушителю выполнить произвольный код

CVSS3: 7
EPSS: Низкий
redos логотип

ROS-20220217-01

почти 4 года назад

Уязвимость системы управления базами данных MariaDB

EPSS: Низкий
suse-cvrf логотип

openSUSE-SU-2022:0731-1

больше 3 лет назад

Security update for mariadb

EPSS: Низкий
suse-cvrf логотип

openSUSE-SU-2022:0726-1

больше 3 лет назад

Security update for mariadb

EPSS: Низкий
suse-cvrf логотип

openSUSE-SU-2022:0725-1

больше 3 лет назад

Security update for mariadb

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2022:0782-1

больше 3 лет назад

Security update for mariadb

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2022:0731-2

больше 3 лет назад

Security update for mariadb

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2022:0731-1

больше 3 лет назад

Security update for mariadb

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2022:0726-1

больше 3 лет назад

Security update for mariadb

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2022:0725-1

больше 3 лет назад

Security update for mariadb

EPSS: Низкий
oracle-oval логотип

ELSA-2022-6443

около 3 лет назад

ELSA-2022-6443: mariadb:10.3 security and bug fix update (MODERATE)

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2022:2561-1

больше 3 лет назад

Security update for mariadb

EPSS: Низкий
rocky логотип

RLSA-2022:6443

около 3 лет назад

Moderate: mariadb:10.3 security and bug fix update

EPSS: Низкий
oracle-oval логотип

ELSA-2022-5948

больше 3 лет назад

ELSA-2022-5948: galera, mariadb, and mysql-selinux security, bug fix, and enhancement update (MODERATE)

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
github логотип
GHSA-3p23-jfm6-493m

This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL queries. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the service account. Was ZDI-CAN-16191.

CVSS3: 7.8
0%
Низкий
почти 4 года назад
ubuntu логотип
CVE-2022-24048

MariaDB CONNECT Storage Engine Stack-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL queries. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the service account. Was ZDI-CAN-16191.

CVSS3: 7.8
0%
Низкий
почти 4 года назад
redhat логотип
CVE-2022-24048

MariaDB CONNECT Storage Engine Stack-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL queries. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the service account. Was ZDI-CAN-16191.

CVSS3: 7.8
0%
Низкий
почти 4 года назад
nvd логотип
CVE-2022-24048

MariaDB CONNECT Storage Engine Stack-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL queries. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the service account. Was ZDI-CAN-16191.

CVSS3: 7.8
0%
Низкий
почти 4 года назад
msrc логотип
CVE-2022-24048

MariaDB CONNECT Storage Engine Stack-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL queries. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the service account. Was ZDI-CAN-16191.

CVSS3: 7.8
0%
Низкий
почти 4 года назад
debian логотип
CVE-2022-24048

MariaDB CONNECT Storage Engine Stack-based Buffer Overflow Privilege E ...

CVSS3: 7.8
0%
Низкий
почти 4 года назад
fstec логотип
BDU:2022-00903

Уязвимость системы управления базами данных MariaDB, связана с переполнением буфера в стеке, позволяющая нарушителю выполнить произвольный код

CVSS3: 7
0%
Низкий
почти 4 года назад
redos логотип
ROS-20220217-01

Уязвимость системы управления базами данных MariaDB

почти 4 года назад
suse-cvrf логотип
openSUSE-SU-2022:0731-1

Security update for mariadb

больше 3 лет назад
suse-cvrf логотип
openSUSE-SU-2022:0726-1

Security update for mariadb

больше 3 лет назад
suse-cvrf логотип
openSUSE-SU-2022:0725-1

Security update for mariadb

больше 3 лет назад
suse-cvrf логотип
SUSE-SU-2022:0782-1

Security update for mariadb

больше 3 лет назад
suse-cvrf логотип
SUSE-SU-2022:0731-2

Security update for mariadb

больше 3 лет назад
suse-cvrf логотип
SUSE-SU-2022:0731-1

Security update for mariadb

больше 3 лет назад
suse-cvrf логотип
SUSE-SU-2022:0726-1

Security update for mariadb

больше 3 лет назад
suse-cvrf логотип
SUSE-SU-2022:0725-1

Security update for mariadb

больше 3 лет назад
oracle-oval логотип
ELSA-2022-6443

ELSA-2022-6443: mariadb:10.3 security and bug fix update (MODERATE)

около 3 лет назад
suse-cvrf логотип
SUSE-SU-2022:2561-1

Security update for mariadb

больше 3 лет назад
rocky логотип
RLSA-2022:6443

Moderate: mariadb:10.3 security and bug fix update

около 3 лет назад
oracle-oval логотип
ELSA-2022-5948

ELSA-2022-5948: galera, mariadb, and mysql-selinux security, bug fix, and enhancement update (MODERATE)

больше 3 лет назад

Уязвимостей на страницу