DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
MariaDB: Mehrere Schwachstellen ermöglichen Denial of Service
Advisory ansehen veröffentlicht 2022-04-18
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in MariaDB ausnutzen, um einen Denial of Service Angriff durchzuführen.
01
beschreibt (12)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2022-27458US | — | — | ||
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2022-27447. Reason: This candidate is a reservation duplicate of CVE-2022-27447. Notes: All CVE users should refe… | ||||
| CVE-2022-27457US | high7.5 | — | ||
MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component my_mb_wc_latin1 at /strings/ctype-latin1.c. | ||||
| CVE-2022-27456US | high7.5 | — | ||
MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component VDec::VDec at /sql/sql_type.cc. | ||||
| CVE-2022-27455US | high7.5 | — | ||
MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component my_wildcmp_8bit_impl at /strings/ctype-simple.c. | ||||
| CVE-2022-27452US | high7.5 | — | ||
MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/item_cmpfunc.cc. | ||||
| CVE-2022-27451US | high7.5 | — | ||
MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/field_conv.cc. | ||||
| CVE-2022-27449US | high7.5 | — | ||
MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/item_func.cc:148. | ||||
| CVE-2022-27448US | high7.5 | — | ||
There is an Assertion failure in MariaDB Server v10.9 and below via 'node->pcur->rel_pos == BTR_PCUR_ON' at /row/row0mysql.cc. | ||||
| CVE-2022-27447US | high7.5 | — | ||
MariaDB Server v10.9 and below was discovered to contain a use-after-free via the component Binary_string::free_buffer() at /sql/sql_string.h. | ||||
| CVE-2022-27446US | high7.5 | — | ||
MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/item_cmpfunc.h. | ||||
| CVE-2022-27445US | high7.5 | — | ||
MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/sql_window.cc. | ||||
| CVE-2022-27444US | high7.5 | — | ||
MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/item_subselect.cc. | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Oracle Linux Security Advisory ELSA-2022-5826 vom 2022-08-04external
- Oracle Linux Security Advisory ELSA-2022-5948 vom 2022-08-11external
- Red Hat Security Advisory RHSA-2022:5759 vom 2022-07-29external
- Red Hat Security Advisory RHSA-2022:5826 vom 2022-08-03external
- Red Hat Security Advisory RHSA-2022:5948 vom 2022-08-09external
- Red Hat Security Advisory RHSA-2022:6306 vom 2022-09-01external
- Red Hat Security Advisory RHSA-2022:6443 vom 2022-09-13external
- Amazon Linux Security Advisory ALASMARIADB10.5-2023-003 vom 2023-09-27external
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan