Mariadb: >> Mariadb >> 10.6.6 Security Vulnerabilities
A vulnerability was found in MariaDB. An OpenVAS port scan on ports 3306 and 4567 allows a malicious remote client to cause a denial of service.
CVSS Score
7.5
EPSS Score
0.02
Published
2023-09-27
MariaDB Server before 10.3.34 thru 10.9.3 is vulnerable to Denial of Service. It is possible for function spider_db_mbase::print_warnings to dereference a null pointer.
CVSS Score
6.5
EPSS Score
0.015
Published
2023-01-20
In MariaDB before 10.9.2, compress_write in extra/mariabackup/ds_compress.cc does not release data_mutex upon a stream write failure, which allows local users to trigger a deadlock.
CVSS Score
5.5
EPSS Score
0.002
Published
2022-08-27
MariaDB v10.4 to v10.7 was discovered to contain an use-after-poison in prepare_inplace_add_virtual at /storage/innobase/handler/handler0alter.cc.
CVSS Score
7.5
EPSS Score
0.019
Published
2022-07-01
MariaDB v10.5 to v10.7 was discovered to contain an assertion failure at table->get_ref_count() == 0 in dict0dict.cc.
CVSS Score
7.5
EPSS Score
0.019
Published
2022-07-01
MariaDB v10.2 to v10.6.1 was discovered to contain a segmentation fault via the component Item_subselect::init_expr_cache_tracker.
CVSS Score
7.5
EPSS Score
0.018
Published
2022-07-01
MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component sub_select.
CVSS Score
7.5
EPSS Score
0.02
Published
2022-07-01
MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component Item_func_in::cleanup/Item::cleanup_processor.
CVSS Score
7.5
EPSS Score
0.018
Published
2022-07-01
MariaDB v10.4 to v10.8 was discovered to contain a segmentation fault via the component Item_field::fix_outer_field.
CVSS Score
7.5
EPSS Score
0.014
Published
2022-07-01
MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component Item_args::walk_args.
CVSS Score
7.5
EPSS Score
0.017
Published
2022-07-01