Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2021-46659 (GCVE-0-2021-46659)
Vulnerability from cvelistv5 – Published: 2022-01-29 22:34 – Updated: 2024-08-04 05:10- n/a
| URL | Tags |
|---|---|
| https://jira.mariadb.org/browse/MDEV-25631 | x_refsource_MISC |
| https://security.netapp.com/advisory/ntap-2022031… | x_refsource_CONFIRM |
| https://mariadb.com/kb/en/security/ | x_refsource_CONFIRM |
| https://lists.fedoraproject.org/archives/list/pac… | vendor-advisoryx_refsource_FEDORA |
| https://lists.fedoraproject.org/archives/list/pac… | vendor-advisoryx_refsource_FEDORA |
| https://lists.fedoraproject.org/archives/list/pac… | vendor-advisoryx_refsource_FEDORA |
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-04T05:10:35.489Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://jira.mariadb.org/browse/MDEV-25631"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://security.netapp.com/advisory/ntap-20220311-0003/"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://mariadb.com/kb/en/security/"
},
{
"name": "FEDORA-2022-263f7cc483",
"tags": [
"vendor-advisory",
"x_refsource_FEDORA",
"x_transferred"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NJ4KDAGF3H4D4BDTHRAM6ZEAJJWWMRUO/"
},
{
"name": "FEDORA-2022-03350936ee",
"tags": [
"vendor-advisory",
"x_refsource_FEDORA",
"x_transferred"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DKJRBYJAQCOPHSED43A3HUPNKQLDTFGD/"
},
{
"name": "FEDORA-2022-5cfe372ab7",
"tags": [
"vendor-advisory",
"x_refsource_FEDORA",
"x_transferred"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EZFZVMJL5UDTOZMARLXQIMG3BTG6UNYW/"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "MariaDB before 10.7.2 allows an application crash because it does not recognize that SELECT_LEX::nest_level is local to each VIEW."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2022-05-08T03:06:47.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://jira.mariadb.org/browse/MDEV-25631"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://security.netapp.com/advisory/ntap-20220311-0003/"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://mariadb.com/kb/en/security/"
},
{
"name": "FEDORA-2022-263f7cc483",
"tags": [
"vendor-advisory",
"x_refsource_FEDORA"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NJ4KDAGF3H4D4BDTHRAM6ZEAJJWWMRUO/"
},
{
"name": "FEDORA-2022-03350936ee",
"tags": [
"vendor-advisory",
"x_refsource_FEDORA"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DKJRBYJAQCOPHSED43A3HUPNKQLDTFGD/"
},
{
"name": "FEDORA-2022-5cfe372ab7",
"tags": [
"vendor-advisory",
"x_refsource_FEDORA"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EZFZVMJL5UDTOZMARLXQIMG3BTG6UNYW/"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2021-46659",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "MariaDB before 10.7.2 allows an application crash because it does not recognize that SELECT_LEX::nest_level is local to each VIEW."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://jira.mariadb.org/browse/MDEV-25631",
"refsource": "MISC",
"url": "https://jira.mariadb.org/browse/MDEV-25631"
},
{
"name": "https://security.netapp.com/advisory/ntap-20220311-0003/",
"refsource": "CONFIRM",
"url": "https://security.netapp.com/advisory/ntap-20220311-0003/"
},
{
"name": "https://mariadb.com/kb/en/security/",
"refsource": "CONFIRM",
"url": "https://mariadb.com/kb/en/security/"
},
{
"name": "FEDORA-2022-263f7cc483",
"refsource": "FEDORA",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NJ4KDAGF3H4D4BDTHRAM6ZEAJJWWMRUO/"
},
{
"name": "FEDORA-2022-03350936ee",
"refsource": "FEDORA",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DKJRBYJAQCOPHSED43A3HUPNKQLDTFGD/"
},
{
"name": "FEDORA-2022-5cfe372ab7",
"refsource": "FEDORA",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EZFZVMJL5UDTOZMARLXQIMG3BTG6UNYW/"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2021-46659",
"datePublished": "2022-01-29T22:34:03.000Z",
"dateReserved": "2022-01-29T00:00:00.000Z",
"dateUpdated": "2024-08-04T05:10:35.489Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2021-46659",
"date": "2026-05-20",
"epss": "0.00039",
"percentile": "0.1169"
},
"fkie_nvd": {
"configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"5.5.0\", \"versionEndExcluding\": \"10.2.42\", \"matchCriteriaId\": \"5E1E48C3-3784-44D7-9CEB-26920418F9FB\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"10.3.0\", \"versionEndExcluding\": \"10.3.33\", \"matchCriteriaId\": \"F8EB13E9-AFD7-4E82-A471-61201460CAC4\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"10.4.0\", \"versionEndExcluding\": \"10.4.23\", \"matchCriteriaId\": \"3EFE42EF-DB07-4DD4-A40C-6DD6A7D1E6DC\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"10.5.0\", \"versionEndExcluding\": \"10.5.14\", \"matchCriteriaId\": \"E3C63CE6-6B86-4C48-8D30-DC74CA83C5EC\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"10.6.0\", \"versionEndExcluding\": \"10.6.6\", \"matchCriteriaId\": \"09ADA35C-125F-4970-ACB7-36A9CC3516BF\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"10.7.0\", \"versionEndExcluding\": \"10.7.2\", \"matchCriteriaId\": \"E0435104-B0F9-4997-A769-36821689DF45\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"A930E247-0B43-43CB-98FF-6CE7B8189835\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"80E516C0-98A4-4ADE-B69F-66A772E2BAAA\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"5C675112-476C-4D7C-BCB9-A2FB2D0BC9FD\"}]}]}]",
"descriptions": "[{\"lang\": \"en\", \"value\": \"MariaDB before 10.7.2 allows an application crash because it does not recognize that SELECT_LEX::nest_level is local to each VIEW.\"}, {\"lang\": \"es\", \"value\": \"MariaDB versiones anteriores a 10.7.2 permite un bloqueo de la aplicaci\\u00f3n porque no reconoce que SELECT_LEX::nest_level es local a cada VIEW\"}]",
"id": "CVE-2021-46659",
"lastModified": "2024-11-21T06:34:32.617",
"metrics": "{\"cvssMetricV31\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\", \"baseScore\": 5.5, \"baseSeverity\": \"MEDIUM\", \"attackVector\": \"LOCAL\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"LOW\", \"userInteraction\": \"NONE\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"NONE\", \"integrityImpact\": \"NONE\", \"availabilityImpact\": \"HIGH\"}, \"exploitabilityScore\": 1.8, \"impactScore\": 3.6}], \"cvssMetricV2\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"2.0\", \"vectorString\": \"AV:L/AC:L/Au:N/C:N/I:N/A:P\", \"baseScore\": 2.1, \"accessVector\": \"LOCAL\", \"accessComplexity\": \"LOW\", \"authentication\": \"NONE\", \"confidentialityImpact\": \"NONE\", \"integrityImpact\": \"NONE\", \"availabilityImpact\": \"PARTIAL\"}, \"baseSeverity\": \"LOW\", \"exploitabilityScore\": 3.9, \"impactScore\": 2.9, \"acInsufInfo\": false, \"obtainAllPrivilege\": false, \"obtainUserPrivilege\": false, \"obtainOtherPrivilege\": false, \"userInteractionRequired\": false}]}",
"published": "2022-01-29T23:15:07.457",
"references": "[{\"url\": \"https://jira.mariadb.org/browse/MDEV-25631\", \"source\": \"cve@mitre.org\", \"tags\": [\"Exploit\", \"Vendor Advisory\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DKJRBYJAQCOPHSED43A3HUPNKQLDTFGD/\", \"source\": \"cve@mitre.org\"}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EZFZVMJL5UDTOZMARLXQIMG3BTG6UNYW/\", \"source\": \"cve@mitre.org\"}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NJ4KDAGF3H4D4BDTHRAM6ZEAJJWWMRUO/\", \"source\": \"cve@mitre.org\"}, {\"url\": \"https://mariadb.com/kb/en/security/\", \"source\": \"cve@mitre.org\", \"tags\": [\"Release Notes\", \"Vendor Advisory\"]}, {\"url\": \"https://security.netapp.com/advisory/ntap-20220311-0003/\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://jira.mariadb.org/browse/MDEV-25631\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Exploit\", \"Vendor Advisory\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DKJRBYJAQCOPHSED43A3HUPNKQLDTFGD/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EZFZVMJL5UDTOZMARLXQIMG3BTG6UNYW/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NJ4KDAGF3H4D4BDTHRAM6ZEAJJWWMRUO/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://mariadb.com/kb/en/security/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Release Notes\", \"Vendor Advisory\"]}, {\"url\": \"https://security.netapp.com/advisory/ntap-20220311-0003/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}]",
"sourceIdentifier": "cve@mitre.org",
"vulnStatus": "Modified",
"weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"NVD-CWE-noinfo\"}]}]"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2021-46659\",\"sourceIdentifier\":\"cve@mitre.org\",\"published\":\"2022-01-29T23:15:07.457\",\"lastModified\":\"2024-11-21T06:34:32.617\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"MariaDB before 10.7.2 allows an application crash because it does not recognize that SELECT_LEX::nest_level is local to each VIEW.\"},{\"lang\":\"es\",\"value\":\"MariaDB versiones anteriores a 10.7.2 permite un bloqueo de la aplicaci\u00f3n porque no reconoce que SELECT_LEX::nest_level es local a cada VIEW\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":5.5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":3.6}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:L/AC:L/Au:N/C:N/I:N/A:P\",\"baseScore\":2.1,\"accessVector\":\"LOCAL\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"PARTIAL\"},\"baseSeverity\":\"LOW\",\"exploitabilityScore\":3.9,\"impactScore\":2.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-noinfo\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.5.0\",\"versionEndExcluding\":\"10.2.42\",\"matchCriteriaId\":\"5E1E48C3-3784-44D7-9CEB-26920418F9FB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"10.3.0\",\"versionEndExcluding\":\"10.3.33\",\"matchCriteriaId\":\"F8EB13E9-AFD7-4E82-A471-61201460CAC4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"10.4.0\",\"versionEndExcluding\":\"10.4.23\",\"matchCriteriaId\":\"3EFE42EF-DB07-4DD4-A40C-6DD6A7D1E6DC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"10.5.0\",\"versionEndExcluding\":\"10.5.14\",\"matchCriteriaId\":\"E3C63CE6-6B86-4C48-8D30-DC74CA83C5EC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"10.6.0\",\"versionEndExcluding\":\"10.6.6\",\"matchCriteriaId\":\"09ADA35C-125F-4970-ACB7-36A9CC3516BF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"10.7.0\",\"versionEndExcluding\":\"10.7.2\",\"matchCriteriaId\":\"E0435104-B0F9-4997-A769-36821689DF45\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A930E247-0B43-43CB-98FF-6CE7B8189835\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"80E516C0-98A4-4ADE-B69F-66A772E2BAAA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5C675112-476C-4D7C-BCB9-A2FB2D0BC9FD\"}]}]}],\"references\":[{\"url\":\"https://jira.mariadb.org/browse/MDEV-25631\",\"source\":\"cve@mitre.org\",\"tags\":[\"Exploit\",\"Vendor Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DKJRBYJAQCOPHSED43A3HUPNKQLDTFGD/\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EZFZVMJL5UDTOZMARLXQIMG3BTG6UNYW/\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NJ4KDAGF3H4D4BDTHRAM6ZEAJJWWMRUO/\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://mariadb.com/kb/en/security/\",\"source\":\"cve@mitre.org\",\"tags\":[\"Release Notes\",\"Vendor Advisory\"]},{\"url\":\"https://security.netapp.com/advisory/ntap-20220311-0003/\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://jira.mariadb.org/browse/MDEV-25631\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Exploit\",\"Vendor Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DKJRBYJAQCOPHSED43A3HUPNKQLDTFGD/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EZFZVMJL5UDTOZMARLXQIMG3BTG6UNYW/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NJ4KDAGF3H4D4BDTHRAM6ZEAJJWWMRUO/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://mariadb.com/kb/en/security/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Release Notes\",\"Vendor Advisory\"]},{\"url\":\"https://security.netapp.com/advisory/ntap-20220311-0003/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]}]}}"
}
}
alsa-2022:5826
Vulnerability from osv_almalinux
MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL. The following packages have been upgraded to a later upstream version: galera (26.4.11), mariadb (10.5.16). Security Fix(es): * mariadb: MariaDB through 10.5.9 allows attackers to trigger a convert_const_to_int use-after-free when the BIGINT data type is used (CVE-2021-46669) * mariadb: lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer (CVE-2022-24048) * mariadb: lack of validating the existence of an object prior to performing operations on the object (CVE-2022-24050) * mariadb: lack of proper validation of a user-supplied string before using it as a format specifier (CVE-2022-24051) * mariadb: CONNECT Storage Engine Heap-based Buffer Overflow Privilege Escalation Vulnerability (CVE-2022-24052) * mariadb: assertion failure in Item_args::walk_arg (CVE-2022-27376) * mariadb: use-after-poison when complex conversion is involved in blob (CVE-2022-27377) * mariadb: crash in create_tmp_table::finalize (CVE-2022-27378) * mariadb: crash in component arg_comparator::compare_real_fixed (CVE-2022-27379) * mariadb: crash at my_decimal::operator= (CVE-2022-27380) * mariadb: crash at Field::set_default via specially crafted SQL statements (CVE-2022-27381) * mariadb: assertion failure via component Item_field::used_tables/update_depend_map_for_order (CVE-2022-27382) * mariadb: use-after-poison in my_strcasecmp_8bit() of ctype-simple.c (CVE-2022-27383) * mariadb: via component Item_subselect::init_expr_cache_tracker (CVE-2022-27384) * mariadb: crash in query_arena::set_query_arena upon SELECT from view (CVE-2022-27386) * mariadb: assertion failures in decimal_bin_size (CVE-2022-27387) * mariadb: crash when using HAVING with NOT EXIST predicate in an equality (CVE-2022-27444) * mariadb: assertion failure in compare_order_elements (CVE-2022-27445) * mariadb: crash when using HAVING with IS NULL predicate in an equality (CVE-2022-27446) * mariadb: use-after-poison in Binary_string::free_buffer (CVE-2022-27447) * mariadb: crash in multi-update and implicit grouping (CVE-2022-27448) * mariadb: assertion failure in sql/item_func.cc (CVE-2022-27449) * mariadb: crash via window function in expression in ORDER BY (CVE-2022-27451) * mariadb: assertion failure in sql/item_cmpfunc.cc (CVE-2022-27452) * mariadb: use-after-free when WHERE has subquery with an outer reference in HAVING (CVE-2022-27455) * mariadb: assertion failure in VDec::VDec at /sql/sql_type.cc (CVE-2022-27456) * mariadb: incorrect key in "dup value" error after long unique (CVE-2022-27457) * mariadb: use-after-poison in Binary_string::free_buffer (CVE-2022-27458) * mariadb: improper locking due to the unreleased lock in extra/mariabackup/ds_compress.cc (CVE-2022-31622) * mariadb: improper locking due to the unreleased lock in extra/mariabackup/ds_compress.cc (CVE-2022-31623) * mariadb: Crash executing query with VIEW, aggregate and subquery (CVE-2021-46659) * mariadb: MariaDB allows an application crash in find_field_in_tables and find_order_in_list via an unused common table expression (CTE) (CVE-2021-46661) * mariadb: MariaDB through 10.5.13 allows a ha_maria::extra application crash via certain SELECT statements (CVE-2021-46663) * mariadb: crash in sub_select_postjoin_aggr for a NULL value of aggr (CVE-2021-46664) * mariadb: crash because of incorrect used_tables expectations (CVE-2021-46665) * mariadb: crash via certain long SELECT DISTINCT statements (CVE-2021-46668) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * Don't use less parallelism if not necessary (BZ#2096934) * Links in galera package description are bad (BZ#2096935) * [Tracker] Rebase to Galera 26.4.11 (BZ#2096936)
{
"affected": [
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "Judy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1.0.5-18.module_el8.6.0+3072+3c630e87"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "galera"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "26.4.11-1.module_el8.6.0+3072+3c630e87"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "mariadb"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "3:10.5.16-2.module_el8.6.0+3072+3c630e87"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "mariadb-backup"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "3:10.5.16-2.module_el8.6.0+3072+3c630e87"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "mariadb-common"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "3:10.5.16-2.module_el8.6.0+3072+3c630e87"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "mariadb-devel"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "3:10.5.16-2.module_el8.6.0+3072+3c630e87"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "mariadb-embedded"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "3:10.5.16-2.module_el8.6.0+3072+3c630e87"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "mariadb-embedded-devel"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "3:10.5.16-2.module_el8.6.0+3072+3c630e87"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "mariadb-errmsg"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "3:10.5.16-2.module_el8.6.0+3072+3c630e87"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "mariadb-gssapi-server"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "3:10.5.16-2.module_el8.6.0+3072+3c630e87"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "mariadb-oqgraph-engine"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "3:10.5.16-2.module_el8.6.0+3072+3c630e87"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "mariadb-pam"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "3:10.5.16-2.module_el8.6.0+3072+3c630e87"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "mariadb-server"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "3:10.5.16-2.module_el8.6.0+3072+3c630e87"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "mariadb-server-galera"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "3:10.5.16-2.module_el8.6.0+3072+3c630e87"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "mariadb-server-utils"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "3:10.5.16-2.module_el8.6.0+3072+3c630e87"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "mariadb-test"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "3:10.5.16-2.module_el8.6.0+3072+3c630e87"
}
],
"type": "ECOSYSTEM"
}
]
}
],
"details": "MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL.\nThe following packages have been upgraded to a later upstream version: galera (26.4.11), mariadb (10.5.16).\nSecurity Fix(es):\n* mariadb: MariaDB through 10.5.9 allows attackers to trigger a convert_const_to_int use-after-free when the BIGINT data type is used (CVE-2021-46669)\n* mariadb: lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer (CVE-2022-24048)\n* mariadb: lack of validating the existence of an object prior to performing operations on the object (CVE-2022-24050)\n* mariadb: lack of proper validation of a user-supplied string before using it as a format specifier (CVE-2022-24051)\n* mariadb: CONNECT Storage Engine Heap-based Buffer Overflow Privilege Escalation Vulnerability (CVE-2022-24052)\n* mariadb: assertion failure in Item_args::walk_arg (CVE-2022-27376)\n* mariadb: use-after-poison when complex conversion is involved in blob (CVE-2022-27377)\n* mariadb: crash in create_tmp_table::finalize (CVE-2022-27378)\n* mariadb: crash in component arg_comparator::compare_real_fixed (CVE-2022-27379)\n* mariadb: crash at my_decimal::operator= (CVE-2022-27380)\n* mariadb: crash at Field::set_default via specially crafted SQL statements (CVE-2022-27381)\n* mariadb: assertion failure via component Item_field::used_tables/update_depend_map_for_order (CVE-2022-27382)\n* mariadb: use-after-poison in my_strcasecmp_8bit() of ctype-simple.c (CVE-2022-27383)\n* mariadb: via component Item_subselect::init_expr_cache_tracker (CVE-2022-27384)\n* mariadb: crash in query_arena::set_query_arena upon SELECT from view (CVE-2022-27386)\n* mariadb: assertion failures in decimal_bin_size (CVE-2022-27387)\n* mariadb: crash when using HAVING with NOT EXIST predicate in an equality (CVE-2022-27444)\n* mariadb: assertion failure in compare_order_elements (CVE-2022-27445)\n* mariadb: crash when using HAVING with IS NULL predicate in an equality (CVE-2022-27446)\n* mariadb: use-after-poison in Binary_string::free_buffer (CVE-2022-27447)\n* mariadb: crash in multi-update and implicit grouping (CVE-2022-27448)\n* mariadb: assertion failure in sql/item_func.cc (CVE-2022-27449)\n* mariadb: crash via window function in expression in ORDER BY (CVE-2022-27451)\n* mariadb: assertion failure in sql/item_cmpfunc.cc (CVE-2022-27452)\n* mariadb: use-after-free when WHERE has subquery with an outer reference in HAVING (CVE-2022-27455)\n* mariadb: assertion failure in VDec::VDec at /sql/sql_type.cc (CVE-2022-27456)\n* mariadb: incorrect key in \"dup value\" error after long unique (CVE-2022-27457)\n* mariadb: use-after-poison in Binary_string::free_buffer (CVE-2022-27458)\n* mariadb: improper locking due to the unreleased lock in extra/mariabackup/ds_compress.cc (CVE-2022-31622)\n* mariadb: improper locking due to the unreleased lock in extra/mariabackup/ds_compress.cc (CVE-2022-31623)\n* mariadb: Crash executing query with VIEW, aggregate and subquery (CVE-2021-46659)\n* mariadb: MariaDB allows an application crash in find_field_in_tables and find_order_in_list via an unused common table expression (CTE) (CVE-2021-46661)\n* mariadb: MariaDB through 10.5.13 allows a ha_maria::extra application crash via certain SELECT statements (CVE-2021-46663)\n* mariadb: crash in sub_select_postjoin_aggr for a NULL value of aggr (CVE-2021-46664)\n* mariadb: crash because of incorrect used_tables expectations (CVE-2021-46665)\n* mariadb: crash via certain long SELECT DISTINCT statements (CVE-2021-46668)\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\nBug Fix(es):\n* Don\u0027t use less parallelism if not necessary (BZ#2096934)\n* Links in galera package description are bad (BZ#2096935)\n* [Tracker] Rebase to Galera 26.4.11 (BZ#2096936)",
"id": "ALSA-2022:5826",
"modified": "2022-08-05T15:41:21Z",
"published": "2022-08-02T00:00:00Z",
"references": [
{
"type": "ADVISORY",
"url": "https://access.redhat.com/errata/RHSA-2022:5826"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2021-46659"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2021-46661"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2021-46663"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2021-46664"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2021-46665"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2021-46668"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2021-46669"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2022-24048"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2022-24050"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2022-24051"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2022-24052"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2022-27376"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2022-27377"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2022-27378"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2022-27379"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2022-27380"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2022-27381"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2022-27382"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2022-27383"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2022-27384"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2022-27386"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2022-27387"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2022-27444"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2022-27445"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2022-27446"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2022-27447"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2022-27448"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2022-27449"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2022-27451"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2022-27452"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2022-27455"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2022-27456"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2022-27457"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2022-27458"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2022-31622"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2022-31623"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2049302"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2050017"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2050022"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2050024"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2050026"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2050032"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2050034"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2068211"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2068233"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2068234"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2069833"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2074817"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2074947"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2074949"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2074951"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2074966"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2074981"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2074987"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2074996"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2074999"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2075005"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2075006"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2075691"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2075692"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2075693"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2075694"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2075695"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2075696"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2075697"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2075699"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2075700"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2075701"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2076144"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2076145"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2092354"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2092360"
},
{
"type": "ADVISORY",
"url": "https://errata.almalinux.org/8/ALSA-2022-5826.html"
}
],
"related": [
"CVE-2021-46669",
"CVE-2022-24048",
"CVE-2022-24050",
"CVE-2022-24051",
"CVE-2022-24052",
"CVE-2022-27376",
"CVE-2022-27377",
"CVE-2022-27378",
"CVE-2022-27379",
"CVE-2022-27380",
"CVE-2022-27381",
"CVE-2022-27382",
"CVE-2022-27383",
"CVE-2022-27384",
"CVE-2022-27386",
"CVE-2022-27387",
"CVE-2022-27444",
"CVE-2022-27445",
"CVE-2022-27446",
"CVE-2022-27447",
"CVE-2022-27448",
"CVE-2022-27449",
"CVE-2022-27451",
"CVE-2022-27452",
"CVE-2022-27455",
"CVE-2022-27456",
"CVE-2022-27457",
"CVE-2022-27458",
"CVE-2022-31622",
"CVE-2022-31623",
"CVE-2021-46659",
"CVE-2021-46661",
"CVE-2021-46663",
"CVE-2021-46664",
"CVE-2021-46665",
"CVE-2021-46668"
],
"summary": "Moderate: mariadb:10.5 security, bug fix, and enhancement update"
}
alsa-2022:5948
Vulnerability from osv_almalinux
MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL. The following packages have been upgraded to a later upstream version: galera (26.4.11), mariadb (10.5.16), mysql-selinux (1.0.5). Security Fix(es): * mariadb: MariaDB through 10.5.9 allows attackers to trigger a convert_const_to_int use-after-free when the BIGINT data type is used (CVE-2021-46669) * mariadb: lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer (CVE-2022-24048) * mariadb: lack of validating the existence of an object prior to performing operations on the object (CVE-2022-24050) * mariadb: lack of proper validation of a user-supplied string before using it as a format specifier (CVE-2022-24051) * mariadb: CONNECT Storage Engine Heap-based Buffer Overflow Privilege Escalation Vulnerability (CVE-2022-24052) * mariadb: assertion failure in Item_args::walk_arg (CVE-2022-27376) * mariadb: use-after-poison when complex conversion is involved in blob (CVE-2022-27377) * mariadb: server crash in create_tmp_table::finalize (CVE-2022-27378) * mariadb: server crash in component arg_comparator::compare_real_fixed (CVE-2022-27379) * mariadb: server crash at my_decimal::operator= (CVE-2022-27380) * mariadb: server crash at Field::set_default via specially crafted SQL statements (CVE-2022-27381) * mariadb: assertion failure via component Item_field::used_tables/update_depend_map_for_order (CVE-2022-27382) * mariadb: use-after-poison in my_strcasecmp_8bit() of ctype-simple.c (CVE-2022-27383) * mariadb: crash via component Item_subselect::init_expr_cache_tracker (CVE-2022-27384) * mariadb: server crashes in query_arena::set_query_arena upon SELECT from view (CVE-2022-27386) * mariadb: assertion failures in decimal_bin_size (CVE-2022-27387) * mariadb: crash when using HAVING with NOT EXIST predicate in an equality (CVE-2022-27444) * mariadb: assertion failure in compare_order_elements (CVE-2022-27445) * mariadb: crash when using HAVING with IS NULL predicate in an equality (CVE-2022-27446) * mariadb: use-after-poison in Binary_string::free_buffer (CVE-2022-27447) * mariadb: crash in multi-update and implicit grouping (CVE-2022-27448) * mariadb: assertion failure in sql/item_func.cc (CVE-2022-27449) * mariadb: crash via window function in expression in ORDER BY (CVE-2022-27451) * mariadb: assertion failure in sql/item_cmpfunc.cc (CVE-2022-27452) * mariadb: use-after-free when WHERE has subquery with an outer reference in HAVING (CVE-2022-27455) * mariadb: assertion failure in VDec::VDec at /sql/sql_type.cc (CVE-2022-27456) * mariadb: incorrect key in "dup value" error after long unique (CVE-2022-27457) * mariadb: use-after-poison in Binary_string::free_buffer (CVE-2022-27458) * mariadb: improper locking due to the unreleased lock in extra/mariabackup/ds_compress.cc (CVE-2022-31622) * mariadb: improper locking due to the unreleased lock in extra/mariabackup/ds_compress.cc (CVE-2022-31623) * mariadb: Crash executing query with VIEW, aggregate and subquery (CVE-2021-46659) * mariadb: MariaDB allows an application crash in find_field_in_tables and find_order_in_list via an unused common table expression (CTE) (CVE-2021-46661) * mariadb: MariaDB through 10.5.13 allows a ha_maria::extra application crash via certain SELECT statements (CVE-2021-46663) * mariadb: MariaDB through 10.5.9 allows an application crash in sub_select_postjoin_aggr for a NULL value of aggr (CVE-2021-46664) * mariadb: MariaDB through 10.5.9 allows a sql_parse.cc application crash because of incorrect used_tables expectations (CVE-2021-46665) * mariadb: MariaDB through 10.5.9 allows an application crash via certain long SELECT DISTINCT statements (CVE-2021-46668) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
| URL | Type | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
{
"affected": [
{
"package": {
"ecosystem": "AlmaLinux:9",
"name": "mariadb"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "3:10.5.16-2.el9_0"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:9",
"name": "mariadb-backup"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "3:10.5.16-2.el9_0"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:9",
"name": "mariadb-common"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "3:10.5.16-2.el9_0"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:9",
"name": "mariadb-devel"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "3:10.5.16-2.el9_0"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:9",
"name": "mariadb-embedded"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "3:10.5.16-2.el9_0"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:9",
"name": "mariadb-embedded-devel"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "3:10.5.16-2.el9_0"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:9",
"name": "mariadb-errmsg"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "3:10.5.16-2.el9_0"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:9",
"name": "mariadb-gssapi-server"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "3:10.5.16-2.el9_0"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:9",
"name": "mariadb-oqgraph-engine"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "3:10.5.16-2.el9_0"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:9",
"name": "mariadb-pam"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "3:10.5.16-2.el9_0"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:9",
"name": "mariadb-server"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "3:10.5.16-2.el9_0"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:9",
"name": "mariadb-server-galera"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "3:10.5.16-2.el9_0"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:9",
"name": "mariadb-server-utils"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "3:10.5.16-2.el9_0"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:9",
"name": "mariadb-test"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "3:10.5.16-2.el9_0"
}
],
"type": "ECOSYSTEM"
}
]
}
],
"details": "MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL. \nThe following packages have been upgraded to a later upstream version: galera (26.4.11), mariadb (10.5.16), mysql-selinux (1.0.5).\nSecurity Fix(es):\n* mariadb: MariaDB through 10.5.9 allows attackers to trigger a convert_const_to_int use-after-free when the BIGINT data type is used (CVE-2021-46669)\n* mariadb: lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer (CVE-2022-24048)\n* mariadb: lack of validating the existence of an object prior to performing operations on the object (CVE-2022-24050)\n* mariadb: lack of proper validation of a user-supplied string before using it as a format specifier (CVE-2022-24051)\n* mariadb: CONNECT Storage Engine Heap-based Buffer Overflow Privilege Escalation Vulnerability (CVE-2022-24052)\n* mariadb: assertion failure in Item_args::walk_arg (CVE-2022-27376)\n* mariadb: use-after-poison when complex conversion is involved in blob (CVE-2022-27377)\n* mariadb: server crash in create_tmp_table::finalize (CVE-2022-27378)\n* mariadb: server crash in component arg_comparator::compare_real_fixed (CVE-2022-27379)\n* mariadb: server crash at my_decimal::operator= (CVE-2022-27380)\n* mariadb: server crash at Field::set_default via specially crafted SQL statements (CVE-2022-27381)\n* mariadb: assertion failure via component Item_field::used_tables/update_depend_map_for_order (CVE-2022-27382)\n* mariadb: use-after-poison in my_strcasecmp_8bit() of ctype-simple.c (CVE-2022-27383)\n* mariadb: crash via component Item_subselect::init_expr_cache_tracker (CVE-2022-27384)\n* mariadb: server crashes in query_arena::set_query_arena upon SELECT from view (CVE-2022-27386)\n* mariadb: assertion failures in decimal_bin_size (CVE-2022-27387)\n* mariadb: crash when using HAVING with NOT EXIST predicate in an equality (CVE-2022-27444)\n* mariadb: assertion failure in compare_order_elements (CVE-2022-27445)\n* mariadb: crash when using HAVING with IS NULL predicate in an equality (CVE-2022-27446)\n* mariadb: use-after-poison in Binary_string::free_buffer (CVE-2022-27447)\n* mariadb: crash in multi-update and implicit grouping (CVE-2022-27448)\n* mariadb: assertion failure in sql/item_func.cc (CVE-2022-27449)\n* mariadb: crash via window function in expression in ORDER BY (CVE-2022-27451)\n* mariadb: assertion failure in sql/item_cmpfunc.cc (CVE-2022-27452)\n* mariadb: use-after-free when WHERE has subquery with an outer reference in HAVING (CVE-2022-27455)\n* mariadb: assertion failure in VDec::VDec at /sql/sql_type.cc (CVE-2022-27456)\n* mariadb: incorrect key in \"dup value\" error after long unique (CVE-2022-27457)\n* mariadb: use-after-poison in Binary_string::free_buffer (CVE-2022-27458)\n* mariadb: improper locking due to the unreleased lock in extra/mariabackup/ds_compress.cc (CVE-2022-31622)\n* mariadb: improper locking due to the unreleased lock in extra/mariabackup/ds_compress.cc (CVE-2022-31623)\n* mariadb: Crash executing query with VIEW, aggregate and subquery (CVE-2021-46659)\n* mariadb: MariaDB allows an application crash in find_field_in_tables and find_order_in_list via an unused common table expression (CTE) (CVE-2021-46661)\n* mariadb: MariaDB through 10.5.13 allows a ha_maria::extra application crash via certain SELECT statements (CVE-2021-46663)\n* mariadb: MariaDB through 10.5.9 allows an application crash in sub_select_postjoin_aggr for a NULL value of aggr (CVE-2021-46664)\n* mariadb: MariaDB through 10.5.9 allows a sql_parse.cc application crash because of incorrect used_tables expectations (CVE-2021-46665)\n* mariadb: MariaDB through 10.5.9 allows an application crash via certain long SELECT DISTINCT statements (CVE-2021-46668)\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"id": "ALSA-2022:5948",
"modified": "2022-08-10T07:03:13Z",
"published": "2022-08-09T00:00:00Z",
"references": [
{
"type": "ADVISORY",
"url": "https://access.redhat.com/errata/RHSA-2022:5948"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2021-46659"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2021-46661"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2021-46663"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2021-46664"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2021-46665"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2021-46668"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2021-46669"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2022-24048"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2022-24050"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2022-24051"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2022-24052"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2022-27376"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2022-27377"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2022-27378"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2022-27379"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2022-27380"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2022-27381"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2022-27382"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2022-27383"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2022-27384"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2022-27386"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2022-27387"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2022-27444"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2022-27445"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2022-27446"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2022-27447"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2022-27448"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2022-27449"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2022-27451"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2022-27452"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2022-27455"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2022-27456"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2022-27457"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2022-27458"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2022-31622"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2022-31623"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2049302"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2050017"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2050022"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2050024"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2050026"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2050032"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2050034"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2068211"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2068233"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2068234"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2069833"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2074817"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2074947"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2074949"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2074951"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2074966"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2074981"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2074987"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2074996"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2074999"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2075005"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2075006"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2075691"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2075692"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2075693"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2075694"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2075695"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2075696"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2075697"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2075699"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2075700"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2075701"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2076144"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2076145"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2092354"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2092360"
},
{
"type": "ADVISORY",
"url": "https://errata.almalinux.org/9/ALSA-2022-5948.html"
}
],
"related": [
"CVE-2021-46669",
"CVE-2022-24048",
"CVE-2022-24050",
"CVE-2022-24051",
"CVE-2022-24052",
"CVE-2022-27376",
"CVE-2022-27377",
"CVE-2022-27378",
"CVE-2022-27379",
"CVE-2022-27380",
"CVE-2022-27381",
"CVE-2022-27382",
"CVE-2022-27383",
"CVE-2022-27384",
"CVE-2022-27386",
"CVE-2022-27387",
"CVE-2022-27444",
"CVE-2022-27445",
"CVE-2022-27446",
"CVE-2022-27447",
"CVE-2022-27448",
"CVE-2022-27449",
"CVE-2022-27451",
"CVE-2022-27452",
"CVE-2022-27455",
"CVE-2022-27456",
"CVE-2022-27457",
"CVE-2022-27458",
"CVE-2022-31622",
"CVE-2022-31623",
"CVE-2021-46659",
"CVE-2021-46661",
"CVE-2021-46663",
"CVE-2021-46664",
"CVE-2021-46665",
"CVE-2021-46668"
],
"summary": "Moderate: galera, mariadb, and mysql-selinux security, bug fix, and enhancement update"
}
alsa-2022:6443
Vulnerability from osv_almalinux
MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL.
The following packages have been upgraded to a later upstream version: mariadb (10.3.35), galera (25.3.35).
Security Fix(es):
- mariadb: MariaDB through 10.5.9 allows attackers to trigger a convert_const_to_int use-after-free when the BIGINT data type is used (CVE-2021-46669)
- mysql: Server: FTS unspecified vulnerability (CPU Apr 2022) (CVE-2022-21427)
- mariadb: lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer (CVE-2022-24048)
- mariadb: lack of validating the existence of an object prior to performing operations on the object (CVE-2022-24050)
- mariadb: lack of proper validation of a user-supplied string before using it as a format specifier (CVE-2022-24051)
- mariadb: CONNECT storage engine heap-based buffer overflow (CVE-2022-24052)
- mariadb: assertion failure in Item_args::walk_arg (CVE-2022-27376)
- mariadb: use-after-poison when complex conversion is involved in blob (CVE-2022-27377)
- mariadb: server crash in create_tmp_table::finalize (CVE-2022-27378)
- mariadb: server crash in component arg_comparator::compare_real_fixed (CVE-2022-27379)
- mariadb: server crash at my_decimal::operator= (CVE-2022-27380)
- mariadb: server crash at Field::set_default via specially crafted SQL statements (CVE-2022-27381)
- mariadb: use-after-poison in my_strcasecmp_8bit() of ctype-simple.c (CVE-2022-27383)
- mariadb: crash via component Item_subselect::init_expr_cache_tracker (CVE-2022-27384)
- mariadb: server crashes in query_arena::set_query_arena upon SELECT from view (CVE-2022-27386)
- mariadb: assertion failures in decimal_bin_size (CVE-2022-27387)
- mariadb: assertion failure in compare_order_elements (CVE-2022-27445)
- mariadb: use-after-poison in Binary_string::free_buffer (CVE-2022-27447)
- mariadb: crash in multi-update and implicit grouping (CVE-2022-27448)
- mariadb: assertion failure in sql/item_func.cc (CVE-2022-27449)
- mariadb: assertion failure in sql/item_cmpfunc.cc (CVE-2022-27452)
- mariadb: assertion failure in VDec::VDec at /sql/sql_type.cc (CVE-2022-27456)
- mariadb: use-after-poison in Binary_string::free_buffer (CVE-2022-27458)
- mariadb: improper locking due to the unreleased lock in extra/mariabackup/ds_compress.cc (CVE-2022-31622)
- mariadb: improper locking due to the unreleased lock in extra/mariabackup/ds_compress.cc (CVE-2022-31623)
- mariadb: server crash at Item_subselect::init_expr_cache_tracker (CVE-2022-32083)
- mariadb: server crash in Item_func_in::cleanup/Item::cleanup_processor (CVE-2022-32085)
- mariadb: server crash in Item_args::walk_args (CVE-2022-32087)
- mariadb: segmentation fault in Exec_time_tracker::get_loops/Filesort_tracker::report_use/filesort (CVE-2022-32088)
- mariadb: Crash executing query with VIEW, aggregate and subquery (CVE-2021-46659)
- mariadb: MariaDB allows an application crash in find_field_in_tables and find_order_in_list via an unused common table expression (CTE) (CVE-2021-46661)
- mariadb: MariaDB through 10.5.13 allows a ha_maria::extra application crash via certain SELECT statements (CVE-2021-46663)
- mariadb: MariaDB through 10.5.9 allows an application crash in sub_select_postjoin_aggr for a NULL value of aggr (CVE-2021-46664)
- mariadb: MariaDB through 10.5.9 allows a sql_parse.cc application crash because of incorrect used_tables expectations (CVE-2021-46665)
- mariadb: MariaDB through 10.5.9 allows an application crash via certain long SELECT DISTINCT statements (CVE-2021-46668)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Bug Fix(es):
- [Tracker] Rebase to Galera 25.3.35 for MariaDB-10.3 (BZ#2107075)
| URL | Type | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
{
"affected": [
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "Judy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1.0.5-18.module_el8.6.0+3139+3c630e87"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "Judy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1.0.5-18.module_el8.6.0+3072+3c630e87"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "galera"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "25.3.35-1.module_el8.6.0+3265+230ed96b"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "mariadb"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "3:10.3.35-1.module_el8.6.0+3265+230ed96b"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "mariadb-backup"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "3:10.3.35-1.module_el8.6.0+3265+230ed96b"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "mariadb-common"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "3:10.3.35-1.module_el8.6.0+3265+230ed96b"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "mariadb-devel"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "3:10.3.35-1.module_el8.6.0+3265+230ed96b"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "mariadb-embedded"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "3:10.3.35-1.module_el8.6.0+3265+230ed96b"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "mariadb-embedded-devel"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "3:10.3.35-1.module_el8.6.0+3265+230ed96b"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "mariadb-errmsg"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "3:10.3.35-1.module_el8.6.0+3265+230ed96b"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "mariadb-gssapi-server"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "3:10.3.35-1.module_el8.6.0+3265+230ed96b"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "mariadb-oqgraph-engine"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "3:10.3.35-1.module_el8.6.0+3265+230ed96b"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "mariadb-server"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "3:10.3.35-1.module_el8.6.0+3265+230ed96b"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "mariadb-server-galera"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "3:10.3.35-1.module_el8.6.0+3265+230ed96b"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "mariadb-server-utils"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "3:10.3.35-1.module_el8.6.0+3265+230ed96b"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "AlmaLinux:8",
"name": "mariadb-test"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "3:10.3.35-1.module_el8.6.0+3265+230ed96b"
}
],
"type": "ECOSYSTEM"
}
]
}
],
"details": "MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL. \n\nThe following packages have been upgraded to a later upstream version: mariadb (10.3.35), galera (25.3.35).\n\nSecurity Fix(es):\n\n* mariadb: MariaDB through 10.5.9 allows attackers to trigger a convert_const_to_int use-after-free when the BIGINT data type is used (CVE-2021-46669)\n* mysql: Server: FTS unspecified vulnerability (CPU Apr 2022) (CVE-2022-21427)\n* mariadb: lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer (CVE-2022-24048)\n* mariadb: lack of validating the existence of an object prior to performing operations on the object (CVE-2022-24050)\n* mariadb: lack of proper validation of a user-supplied string before using it as a format specifier (CVE-2022-24051)\n* mariadb: CONNECT storage engine heap-based buffer overflow (CVE-2022-24052)\n* mariadb: assertion failure in Item_args::walk_arg (CVE-2022-27376)\n* mariadb: use-after-poison when complex conversion is involved in blob (CVE-2022-27377)\n* mariadb: server crash in create_tmp_table::finalize (CVE-2022-27378)\n* mariadb: server crash in component arg_comparator::compare_real_fixed (CVE-2022-27379)\n* mariadb: server crash at my_decimal::operator= (CVE-2022-27380)\n* mariadb: server crash at Field::set_default via specially crafted SQL statements (CVE-2022-27381)\n* mariadb: use-after-poison in my_strcasecmp_8bit() of ctype-simple.c (CVE-2022-27383)\n* mariadb: crash via component Item_subselect::init_expr_cache_tracker (CVE-2022-27384)\n* mariadb: server crashes in query_arena::set_query_arena upon SELECT from view (CVE-2022-27386)\n* mariadb: assertion failures in decimal_bin_size (CVE-2022-27387)\n* mariadb: assertion failure in compare_order_elements (CVE-2022-27445)\n* mariadb: use-after-poison in Binary_string::free_buffer (CVE-2022-27447)\n* mariadb: crash in multi-update and implicit grouping (CVE-2022-27448)\n* mariadb: assertion failure in sql/item_func.cc (CVE-2022-27449)\n* mariadb: assertion failure in sql/item_cmpfunc.cc (CVE-2022-27452)\n* mariadb: assertion failure in VDec::VDec at /sql/sql_type.cc (CVE-2022-27456)\n* mariadb: use-after-poison in Binary_string::free_buffer (CVE-2022-27458)\n* mariadb: improper locking due to the unreleased lock in extra/mariabackup/ds_compress.cc (CVE-2022-31622)\n* mariadb: improper locking due to the unreleased lock in extra/mariabackup/ds_compress.cc (CVE-2022-31623)\n* mariadb: server crash at Item_subselect::init_expr_cache_tracker (CVE-2022-32083)\n* mariadb: server crash in Item_func_in::cleanup/Item::cleanup_processor (CVE-2022-32085)\n* mariadb: server crash in Item_args::walk_args (CVE-2022-32087)\n* mariadb: segmentation fault in Exec_time_tracker::get_loops/Filesort_tracker::report_use/filesort (CVE-2022-32088)\n* mariadb: Crash executing query with VIEW, aggregate and subquery (CVE-2021-46659)\n* mariadb: MariaDB allows an application crash in find_field_in_tables and find_order_in_list via an unused common table expression (CTE) (CVE-2021-46661)\n* mariadb: MariaDB through 10.5.13 allows a ha_maria::extra application crash via certain SELECT statements (CVE-2021-46663)\n* mariadb: MariaDB through 10.5.9 allows an application crash in sub_select_postjoin_aggr for a NULL value of aggr (CVE-2021-46664)\n* mariadb: MariaDB through 10.5.9 allows a sql_parse.cc application crash because of incorrect used_tables expectations (CVE-2021-46665)\n* mariadb: MariaDB through 10.5.9 allows an application crash via certain long SELECT DISTINCT statements (CVE-2021-46668)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nBug Fix(es):\n\n* [Tracker] Rebase to Galera 25.3.35 for MariaDB-10.3 (BZ#2107075)",
"id": "ALSA-2022:6443",
"modified": "2022-10-14T07:41:44Z",
"published": "2022-09-13T00:00:00Z",
"references": [
{
"type": "ADVISORY",
"url": "https://access.redhat.com/errata/RHSA-2022:6443"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2021-46659"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2021-46661"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2021-46663"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2021-46664"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2021-46665"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2021-46668"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2021-46669"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2022-21427"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2022-24048"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2022-24050"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2022-24051"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2022-24052"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2022-27376"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2022-27377"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2022-27378"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2022-27379"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2022-27380"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2022-27381"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2022-27383"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2022-27384"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2022-27386"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2022-27387"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2022-27445"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2022-27447"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2022-27448"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2022-27449"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2022-27452"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2022-27456"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2022-27458"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2022-31622"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2022-31623"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2022-32083"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2022-32085"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2022-32087"
},
{
"type": "REPORT",
"url": "https://access.redhat.com/security/cve/CVE-2022-32088"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2049302"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2050017"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2050022"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2050024"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2050026"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2050032"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2050034"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2068211"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2068233"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2068234"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2069833"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2074817"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2074947"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2074949"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2074951"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2074966"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2074981"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2074996"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2074999"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2075005"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2075006"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2075691"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2075693"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2075694"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2075695"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2075697"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2075700"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2076145"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2082644"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2092354"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2092360"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2104425"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2104431"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2104434"
},
{
"type": "REPORT",
"url": "https://bugzilla.redhat.com/2106008"
},
{
"type": "ADVISORY",
"url": "https://errata.almalinux.org/8/ALSA-2022-6443.html"
}
],
"related": [
"CVE-2021-46669",
"CVE-2022-21427",
"CVE-2022-24048",
"CVE-2022-24050",
"CVE-2022-24051",
"CVE-2022-24052",
"CVE-2022-27376",
"CVE-2022-27377",
"CVE-2022-27378",
"CVE-2022-27379",
"CVE-2022-27380",
"CVE-2022-27381",
"CVE-2022-27383",
"CVE-2022-27384",
"CVE-2022-27386",
"CVE-2022-27387",
"CVE-2022-27445",
"CVE-2022-27447",
"CVE-2022-27448",
"CVE-2022-27449",
"CVE-2022-27452",
"CVE-2022-27456",
"CVE-2022-27458",
"CVE-2022-31622",
"CVE-2022-31623",
"CVE-2022-32083",
"CVE-2022-32085",
"CVE-2022-32087",
"CVE-2022-32088",
"CVE-2021-46659",
"CVE-2021-46661",
"CVE-2021-46663",
"CVE-2021-46664",
"CVE-2021-46665",
"CVE-2021-46668"
],
"summary": "Moderate: mariadb:10.3 security and bug fix update"
}
BDU:2022-01074
Vulnerability from fstec - Published: 16.02.2022{
"CVSS 2.0": "AV:L/AC:L/Au:S/C:N/I:N/A:C",
"CVSS 3.0": "AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"CVSS 4.0": null,
"remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
"remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
"\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f, \u041e\u041e\u041e \u00ab\u0420\u0435\u0434 \u0421\u043e\u0444\u0442\u00bb, \u041e\u041e\u041e \u00ab\u0420\u0443\u0441\u0411\u0418\u0422\u0435\u0445-\u0410\u0441\u0442\u0440\u0430\u00bb, MariaDB Foundation, \u0410\u041e \u00ab\u0418\u0412\u041a\u00bb, \u0410\u041e \"\u041d\u041f\u041f\u041a\u0422\", \u0410\u041e \u00ab\u041d\u0422\u0426 \u0418\u0422 \u0420\u041e\u0421\u0410\u00bb",
"\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "10 (Debian GNU/Linux), 11 (Debian GNU/Linux), 7.3 (\u0420\u0415\u0414 \u041e\u0421), 1.7 (Astra Linux Special Edition), \u043e\u0442 10.2.0 \u0434\u043e 10.8.0 (MariaDB), - (\u0410\u043b\u044c\u0442 8 \u0421\u041f), 4.7 (Astra Linux Special Edition), \u0434\u043e 2.5 (\u041e\u0421\u041e\u041d \u041e\u0421\u043d\u043e\u0432\u0430 \u041enyx), 12.4 (\u0420\u041e\u0421\u0410 \u0425\u0420\u041e\u041c)",
"\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\n\u0414\u043b\u044f \u0420\u0435\u0434\u041e\u0421:\nhttp://repo.red-soft.ru/redos/7.3c/x86_64/updates/\n\n\u0414\u043b\u044f MariaDB:\nhttps://jira.mariadb.org/browse/MDEV-25631\n\n\u0414\u043b\u044f Debian:\n\u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f: https://security-tracker.debian.org/tracker/CVE-2021-46659\n\n\u0414\u043b\u044f \u041e\u0421 Astra Linux:\n\u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f: https://wiki.astralinux.ru/astra-linux-se17-bulletin-2022-0819SE17\n\n\u0414\u043b\u044f \u041e\u0421\u041e\u041d \u041e\u0441\u043d\u043e\u0432\u0430:\n\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f mariadb-10.3 \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 1:10.3.34+repack-0+deb10u1.osnova1\n\n\u0414\u043b\u044f Astra Linux Special Edition 4.7 (\u0434\u043b\u044f \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b ARM):\n\u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f: https://wiki.astralinux.ru/astra-linux-se47-bulletin-2022-0926SE47\n\n\u0414\u043b\u044f \u041e\u0421 \u0410\u043b\u044c\u0442 8 \u0421\u041f: \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0438\u0437 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u0433\u043e \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430\n\n\u0414\u043b\u044f \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0420\u041e\u0421\u0410 \u0425\u0420\u041e\u041c: https://abf.rosalinux.ru/advisories/ROSA-SA-2023-2252",
"\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "16.02.2022",
"\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "09.11.2023",
"\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "04.03.2022",
"\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2022-01074",
"\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2021-46659",
"\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
"\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0430",
"\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux, \u0420\u0415\u0414 \u041e\u0421 (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u21163751), Astra Linux Special Edition (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u2116369), MariaDB, \u0410\u043b\u044c\u0442 8 \u0421\u041f (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u21164305), \u041e\u0421\u041e\u041d \u041e\u0421\u043d\u043e\u0432\u0430 \u041enyx (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u21165913), \u0420\u041e\u0421\u0410 \u0425\u0420\u041e\u041c (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u21161607)",
"\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Debian GNU/Linux 10 , \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Debian GNU/Linux 11 , \u041e\u041e\u041e \u00ab\u0420\u0435\u0434 \u0421\u043e\u0444\u0442\u00bb \u0420\u0415\u0414 \u041e\u0421 7.3 (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u21163751), \u041e\u041e\u041e \u00ab\u0420\u0443\u0441\u0411\u0418\u0422\u0435\u0445-\u0410\u0441\u0442\u0440\u0430\u00bb Astra Linux Special Edition 1.7 (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u2116369), \u0410\u041e \u00ab\u0418\u0412\u041a\u00bb \u0410\u043b\u044c\u0442 8 \u0421\u041f - (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u21164305), \u041e\u041e\u041e \u00ab\u0420\u0443\u0441\u0411\u0418\u0422\u0435\u0445-\u0410\u0441\u0442\u0440\u0430\u00bb Astra Linux Special Edition 4.7 ARM (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u2116369), \u0410\u041e \"\u041d\u041f\u041f\u041a\u0422\" \u041e\u0421\u041e\u041d \u041e\u0421\u043d\u043e\u0432\u0430 \u041enyx \u0434\u043e 2.5 (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u21165913), \u0410\u041e \u00ab\u041d\u0422\u0426 \u0418\u0422 \u0420\u041e\u0421\u0410\u00bb \u0420\u041e\u0421\u0410 \u0425\u0420\u041e\u041c 12.4 (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u21161607)",
"\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430 SELECT_LEX::nest_level \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0430\u0437\u0430\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 MariaDB, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438",
"\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0421\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435",
"\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041e\u0448\u0438\u0431\u043a\u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u043c (CWE-399)",
"\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430 SELECT_LEX::nest_level \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0430\u0437\u0430\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 MariaDB \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043e\u0448\u0438\u0431\u043a\u0430\u043c\u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438",
"\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
"\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
"\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
"\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
"\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u0418\u0441\u0447\u0435\u0440\u043f\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432",
"\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://redos.red-soft.ru/support/secure/\nhttps://www.cybersecurity-help.cz/vdb/SB2022021201\nhttps://jira.mariadb.org/browse/MDEV-25631\nhttps://security-tracker.debian.org/tracker/CVE-2021-46659\nhttps://wiki.astralinux.ru/astra-linux-se17-bulletin-2022-0819SE17\nhttps://\u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430.\u043d\u043f\u043f\u043a\u0442.\u0440\u0444/bin/view/\u041e\u0421\u043d\u043e\u0432\u0430/\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f/2.5/\nhttps://wiki.astralinux.ru/astra-linux-se47-bulletin-2022-0926SE47\nhttps://altsp.su/obnovleniya-bezopasnosti/\nhttps://abf.rosalinux.ru/advisories/ROSA-SA-2023-2252",
"\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
"\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430, \u0421\u0423\u0411\u0414",
"\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-399",
"\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 4,6)\n\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 5,5)"
}
bit-mariadb-2021-46659
Vulnerability from bitnami_vulndb
MariaDB before 10.7.2 allows an application crash because it does not recognize that SELECT_LEX::nest_level is local to each VIEW.
{
"affected": [
{
"package": {
"ecosystem": "Bitnami",
"name": "mariadb",
"purl": "pkg:bitnami/mariadb"
},
"ranges": [
{
"events": [
{
"introduced": "5.5.0"
},
{
"fixed": "10.2.42"
},
{
"introduced": "10.3.0"
},
{
"fixed": "10.3.33"
},
{
"introduced": "10.4.0"
},
{
"fixed": "10.4.23"
},
{
"introduced": "10.5.0"
},
{
"fixed": "10.5.14"
},
{
"introduced": "10.6.0"
},
{
"fixed": "10.6.6"
},
{
"introduced": "10.7.0"
},
{
"fixed": "10.7.2"
}
],
"type": "SEMVER"
}
],
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
}
]
}
],
"aliases": [
"CVE-2021-46659"
],
"database_specific": {
"cpes": [
"cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*"
],
"severity": "Medium"
},
"details": "MariaDB before 10.7.2 allows an application crash because it does not recognize that SELECT_LEX::nest_level is local to each VIEW.",
"id": "BIT-mariadb-2021-46659",
"modified": "2025-04-03T14:40:37.652Z",
"published": "2024-03-06T11:05:17.293Z",
"references": [
{
"type": "WEB",
"url": "https://jira.mariadb.org/browse/MDEV-25631"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DKJRBYJAQCOPHSED43A3HUPNKQLDTFGD/"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EZFZVMJL5UDTOZMARLXQIMG3BTG6UNYW/"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NJ4KDAGF3H4D4BDTHRAM6ZEAJJWWMRUO/"
},
{
"type": "WEB",
"url": "https://mariadb.com/kb/en/security/"
},
{
"type": "WEB",
"url": "https://security.netapp.com/advisory/ntap-20220311-0003/"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2021-46659"
}
],
"schema_version": "1.5.0"
}
FKIE_CVE-2021-46659
Vulnerability from fkie_nvd - Published: 2022-01-29 23:15 - Updated: 2024-11-21 06:34| URL | Tags | ||
|---|---|---|---|
| cve@mitre.org | https://jira.mariadb.org/browse/MDEV-25631 | Exploit, Vendor Advisory | |
| cve@mitre.org | https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DKJRBYJAQCOPHSED43A3HUPNKQLDTFGD/ | ||
| cve@mitre.org | https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EZFZVMJL5UDTOZMARLXQIMG3BTG6UNYW/ | ||
| cve@mitre.org | https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NJ4KDAGF3H4D4BDTHRAM6ZEAJJWWMRUO/ | ||
| cve@mitre.org | https://mariadb.com/kb/en/security/ | Release Notes, Vendor Advisory | |
| cve@mitre.org | https://security.netapp.com/advisory/ntap-20220311-0003/ | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://jira.mariadb.org/browse/MDEV-25631 | Exploit, Vendor Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DKJRBYJAQCOPHSED43A3HUPNKQLDTFGD/ | ||
| af854a3a-2127-422b-91ae-364da2661108 | https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EZFZVMJL5UDTOZMARLXQIMG3BTG6UNYW/ | ||
| af854a3a-2127-422b-91ae-364da2661108 | https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NJ4KDAGF3H4D4BDTHRAM6ZEAJJWWMRUO/ | ||
| af854a3a-2127-422b-91ae-364da2661108 | https://mariadb.com/kb/en/security/ | Release Notes, Vendor Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://security.netapp.com/advisory/ntap-20220311-0003/ | Third Party Advisory |
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
"matchCriteriaId": "5E1E48C3-3784-44D7-9CEB-26920418F9FB",
"versionEndExcluding": "10.2.42",
"versionStartIncluding": "5.5.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
"matchCriteriaId": "F8EB13E9-AFD7-4E82-A471-61201460CAC4",
"versionEndExcluding": "10.3.33",
"versionStartIncluding": "10.3.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
"matchCriteriaId": "3EFE42EF-DB07-4DD4-A40C-6DD6A7D1E6DC",
"versionEndExcluding": "10.4.23",
"versionStartIncluding": "10.4.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
"matchCriteriaId": "E3C63CE6-6B86-4C48-8D30-DC74CA83C5EC",
"versionEndExcluding": "10.5.14",
"versionStartIncluding": "10.5.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
"matchCriteriaId": "09ADA35C-125F-4970-ACB7-36A9CC3516BF",
"versionEndExcluding": "10.6.6",
"versionStartIncluding": "10.6.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
"matchCriteriaId": "E0435104-B0F9-4997-A769-36821689DF45",
"versionEndExcluding": "10.7.2",
"versionStartIncluding": "10.7.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
"matchCriteriaId": "A930E247-0B43-43CB-98FF-6CE7B8189835",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*",
"matchCriteriaId": "80E516C0-98A4-4ADE-B69F-66A772E2BAAA",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*",
"matchCriteriaId": "5C675112-476C-4D7C-BCB9-A2FB2D0BC9FD",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "MariaDB before 10.7.2 allows an application crash because it does not recognize that SELECT_LEX::nest_level is local to each VIEW."
},
{
"lang": "es",
"value": "MariaDB versiones anteriores a 10.7.2 permite un bloqueo de la aplicaci\u00f3n porque no reconoce que SELECT_LEX::nest_level es local a cada VIEW"
}
],
"id": "CVE-2021-46659",
"lastModified": "2024-11-21T06:34:32.617",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "LOW",
"cvssData": {
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 2.1,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:L/AC:L/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"exploitabilityScore": 3.9,
"impactScore": 2.9,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": false
}
],
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6,
"source": "nvd@nist.gov",
"type": "Primary"
}
]
},
"published": "2022-01-29T23:15:07.457",
"references": [
{
"source": "cve@mitre.org",
"tags": [
"Exploit",
"Vendor Advisory"
],
"url": "https://jira.mariadb.org/browse/MDEV-25631"
},
{
"source": "cve@mitre.org",
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DKJRBYJAQCOPHSED43A3HUPNKQLDTFGD/"
},
{
"source": "cve@mitre.org",
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EZFZVMJL5UDTOZMARLXQIMG3BTG6UNYW/"
},
{
"source": "cve@mitre.org",
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NJ4KDAGF3H4D4BDTHRAM6ZEAJJWWMRUO/"
},
{
"source": "cve@mitre.org",
"tags": [
"Release Notes",
"Vendor Advisory"
],
"url": "https://mariadb.com/kb/en/security/"
},
{
"source": "cve@mitre.org",
"tags": [
"Third Party Advisory"
],
"url": "https://security.netapp.com/advisory/ntap-20220311-0003/"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Exploit",
"Vendor Advisory"
],
"url": "https://jira.mariadb.org/browse/MDEV-25631"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DKJRBYJAQCOPHSED43A3HUPNKQLDTFGD/"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EZFZVMJL5UDTOZMARLXQIMG3BTG6UNYW/"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NJ4KDAGF3H4D4BDTHRAM6ZEAJJWWMRUO/"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Release Notes",
"Vendor Advisory"
],
"url": "https://mariadb.com/kb/en/security/"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "https://security.netapp.com/advisory/ntap-20220311-0003/"
}
],
"sourceIdentifier": "cve@mitre.org",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
GHSA-HPGH-P2HM-XRPR
Vulnerability from github – Published: 2022-01-31 00:00 – Updated: 2022-03-17 00:06MariaDB before 10.7.2 allows an application crash because it does not recognize that SELECT_LEX::nest_level is local to each VIEW.
{
"affected": [],
"aliases": [
"CVE-2021-46659"
],
"database_specific": {
"cwe_ids": [],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2022-01-29T23:15:00Z",
"severity": "MODERATE"
},
"details": "MariaDB before 10.7.2 allows an application crash because it does not recognize that SELECT_LEX::nest_level is local to each VIEW.",
"id": "GHSA-hpgh-p2hm-xrpr",
"modified": "2022-03-17T00:06:07Z",
"published": "2022-01-31T00:00:23Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2021-46659"
},
{
"type": "WEB",
"url": "https://jira.mariadb.org/browse/MDEV-25631"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DKJRBYJAQCOPHSED43A3HUPNKQLDTFGD"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EZFZVMJL5UDTOZMARLXQIMG3BTG6UNYW"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NJ4KDAGF3H4D4BDTHRAM6ZEAJJWWMRUO"
},
{
"type": "WEB",
"url": "https://mariadb.com/kb/en/security"
},
{
"type": "WEB",
"url": "https://security.netapp.com/advisory/ntap-20220311-0003"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
}
]
}
GSD-2021-46659
Vulnerability from gsd - Updated: 2023-12-13 01:23{
"GSD": {
"alias": "CVE-2021-46659",
"description": "MariaDB before 10.7.2 allows an application crash because it does not recognize that SELECT_LEX::nest_level is local to each VIEW.",
"id": "GSD-2021-46659",
"references": [
"https://www.suse.com/security/cve/CVE-2021-46659.html",
"https://ubuntu.com/security/CVE-2021-46659",
"https://advisories.mageia.org/CVE-2021-46659.html",
"https://access.redhat.com/errata/RHSA-2022:5759",
"https://access.redhat.com/errata/RHSA-2022:5826",
"https://access.redhat.com/errata/RHSA-2022:5948",
"https://access.redhat.com/errata/RHSA-2022:6306",
"https://access.redhat.com/errata/RHSA-2022:6443"
]
},
"gsd": {
"metadata": {
"exploitCode": "unknown",
"remediation": "unknown",
"reportConfidence": "confirmed",
"type": "vulnerability"
},
"osvSchema": {
"aliases": [
"CVE-2021-46659"
],
"details": "MariaDB before 10.7.2 allows an application crash because it does not recognize that SELECT_LEX::nest_level is local to each VIEW.",
"id": "GSD-2021-46659",
"modified": "2023-12-13T01:23:32.626605Z",
"schema_version": "1.4.0"
}
},
"namespaces": {
"cve.org": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2021-46659",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "MariaDB before 10.7.2 allows an application crash because it does not recognize that SELECT_LEX::nest_level is local to each VIEW."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://jira.mariadb.org/browse/MDEV-25631",
"refsource": "MISC",
"url": "https://jira.mariadb.org/browse/MDEV-25631"
},
{
"name": "https://security.netapp.com/advisory/ntap-20220311-0003/",
"refsource": "CONFIRM",
"url": "https://security.netapp.com/advisory/ntap-20220311-0003/"
},
{
"name": "https://mariadb.com/kb/en/security/",
"refsource": "CONFIRM",
"url": "https://mariadb.com/kb/en/security/"
},
{
"name": "FEDORA-2022-263f7cc483",
"refsource": "FEDORA",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NJ4KDAGF3H4D4BDTHRAM6ZEAJJWWMRUO/"
},
{
"name": "FEDORA-2022-03350936ee",
"refsource": "FEDORA",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DKJRBYJAQCOPHSED43A3HUPNKQLDTFGD/"
},
{
"name": "FEDORA-2022-5cfe372ab7",
"refsource": "FEDORA",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EZFZVMJL5UDTOZMARLXQIMG3BTG6UNYW/"
}
]
}
},
"nvd.nist.gov": {
"configurations": {
"CVE_data_version": "4.0",
"nodes": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "10.2.42",
"versionStartIncluding": "5.5.0",
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "10.3.33",
"versionStartIncluding": "10.3.0",
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "10.4.23",
"versionStartIncluding": "10.4.0",
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "10.5.14",
"versionStartIncluding": "10.5.0",
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "10.7.2",
"versionStartIncluding": "10.7.0",
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "10.6.6",
"versionStartIncluding": "10.6.0",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
}
]
},
"cve": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2021-46659"
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "en",
"value": "MariaDB before 10.7.2 allows an application crash because it does not recognize that SELECT_LEX::nest_level is local to each VIEW."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://jira.mariadb.org/browse/MDEV-25631",
"refsource": "MISC",
"tags": [
"Exploit",
"Vendor Advisory"
],
"url": "https://jira.mariadb.org/browse/MDEV-25631"
},
{
"name": "https://security.netapp.com/advisory/ntap-20220311-0003/",
"refsource": "CONFIRM",
"tags": [
"Third Party Advisory"
],
"url": "https://security.netapp.com/advisory/ntap-20220311-0003/"
},
{
"name": "https://mariadb.com/kb/en/security/",
"refsource": "CONFIRM",
"tags": [
"Release Notes",
"Vendor Advisory"
],
"url": "https://mariadb.com/kb/en/security/"
},
{
"name": "FEDORA-2022-263f7cc483",
"refsource": "FEDORA",
"tags": [
"Mailing List",
"Patch",
"Third Party Advisory"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NJ4KDAGF3H4D4BDTHRAM6ZEAJJWWMRUO/"
},
{
"name": "FEDORA-2022-03350936ee",
"refsource": "FEDORA",
"tags": [
"Mailing List",
"Patch",
"Third Party Advisory"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DKJRBYJAQCOPHSED43A3HUPNKQLDTFGD/"
},
{
"name": "FEDORA-2022-5cfe372ab7",
"refsource": "FEDORA",
"tags": [
"Mailing List",
"Patch",
"Third Party Advisory"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EZFZVMJL5UDTOZMARLXQIMG3BTG6UNYW/"
}
]
}
},
"impact": {
"baseMetricV2": {
"acInsufInfo": false,
"cvssV2": {
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 2.1,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:L/AC:L/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"exploitabilityScore": 3.9,
"impactScore": 2.9,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"severity": "LOW",
"userInteractionRequired": false
},
"baseMetricV3": {
"cvssV3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
},
"lastModifiedDate": "2022-06-30T20:31Z",
"publishedDate": "2022-01-29T23:15Z"
}
}
}
MSRC_CVE-2021-46659
Vulnerability from csaf_microsoft - Published: 2022-01-02 00:00 - Updated: 2022-02-05 00:00| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 18785-16820 | — | ||
| Unresolved product id: 18786-17086 | — |
| URL | Category |
|---|---|
| https://msrc.microsoft.com/csaf/vex/2022/msrc_cve… | self |
| https://support.microsoft.com/lifecycle | external |
| https://www.first.org/cvss | external |
| https://msrc.microsoft.com/csaf/vex/2022/msrc_cve… | self |
{
"document": {
"category": "csaf_vex",
"csaf_version": "2.0",
"distribution": {
"text": "Public",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en-US",
"notes": [
{
"category": "general",
"text": "To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle",
"title": "Additional Resources"
},
{
"category": "legal_disclaimer",
"text": "The information provided in the Microsoft Knowledge Base is provided \\\"as is\\\" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.",
"title": "Disclaimer"
}
],
"publisher": {
"category": "vendor",
"contact_details": "secure@microsoft.com",
"name": "Microsoft Security Response Center",
"namespace": "https://msrc.microsoft.com"
},
"references": [
{
"category": "self",
"summary": "CVE-2021-46659 MariaDB before 10.7.2 allows an application crash because it does not recognize that SELECT_LEX::nest_level is local to each VIEW. - VEX",
"url": "https://msrc.microsoft.com/csaf/vex/2022/msrc_cve-2021-46659.json"
},
{
"category": "external",
"summary": "Microsoft Support Lifecycle",
"url": "https://support.microsoft.com/lifecycle"
},
{
"category": "external",
"summary": "Common Vulnerability Scoring System",
"url": "https://www.first.org/cvss"
}
],
"title": "MariaDB before 10.7.2 allows an application crash because it does not recognize that SELECT_LEX::nest_level is local to each VIEW.",
"tracking": {
"current_release_date": "2022-02-05T00:00:00.000Z",
"generator": {
"date": "2025-10-19T23:13:23.036Z",
"engine": {
"name": "MSRC Generator",
"version": "1.0"
}
},
"id": "msrc_CVE-2021-46659",
"initial_release_date": "2022-01-02T00:00:00.000Z",
"revision_history": [
{
"date": "2022-02-05T00:00:00.000Z",
"legacy_version": "1",
"number": "1",
"summary": "Information published."
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "1.0",
"product": {
"name": "CBL Mariner 1.0",
"product_id": "16820"
}
},
{
"category": "product_version",
"name": "2.0",
"product": {
"name": "CBL Mariner 2.0",
"product_id": "17086"
}
}
],
"category": "product_name",
"name": "Azure Linux"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003ccm1 mariadb 10.3.34-1",
"product": {
"name": "\u003ccm1 mariadb 10.3.34-1",
"product_id": "2"
}
},
{
"category": "product_version",
"name": "cm1 mariadb 10.3.34-1",
"product": {
"name": "cm1 mariadb 10.3.34-1",
"product_id": "18785"
}
},
{
"category": "product_version_range",
"name": "\u003ccbl2 mariadb 10.6.7-1",
"product": {
"name": "\u003ccbl2 mariadb 10.6.7-1",
"product_id": "1"
}
},
{
"category": "product_version",
"name": "cbl2 mariadb 10.6.7-1",
"product": {
"name": "cbl2 mariadb 10.6.7-1",
"product_id": "18786"
}
}
],
"category": "product_name",
"name": "mariadb"
}
],
"category": "vendor",
"name": "Microsoft"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "\u003ccm1 mariadb 10.3.34-1 as a component of CBL Mariner 1.0",
"product_id": "16820-2"
},
"product_reference": "2",
"relates_to_product_reference": "16820"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cm1 mariadb 10.3.34-1 as a component of CBL Mariner 1.0",
"product_id": "18785-16820"
},
"product_reference": "18785",
"relates_to_product_reference": "16820"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "\u003ccbl2 mariadb 10.6.7-1 as a component of CBL Mariner 2.0",
"product_id": "17086-1"
},
"product_reference": "1",
"relates_to_product_reference": "17086"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cbl2 mariadb 10.6.7-1 as a component of CBL Mariner 2.0",
"product_id": "18786-17086"
},
"product_reference": "18786",
"relates_to_product_reference": "17086"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2021-46659",
"notes": [
{
"category": "general",
"text": "mitre",
"title": "Assigning CNA"
}
],
"product_status": {
"fixed": [
"18785-16820",
"18786-17086"
],
"known_affected": [
"16820-2",
"17086-1"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2021-46659 MariaDB before 10.7.2 allows an application crash because it does not recognize that SELECT_LEX::nest_level is local to each VIEW. - VEX",
"url": "https://msrc.microsoft.com/csaf/vex/2022/msrc_cve-2021-46659.json"
}
],
"remediations": [
{
"category": "vendor_fix",
"date": "2022-02-05T00:00:00.000Z",
"details": "10.3.34-1:Security Update:https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade",
"product_ids": [
"16820-2"
],
"url": "https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"
},
{
"category": "vendor_fix",
"date": "2022-02-05T00:00:00.000Z",
"details": "10.6.7-1:Security Update:https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade",
"product_ids": [
"17086-1"
],
"url": "https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"environmentalsScore": 0.0,
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"temporalScore": 5.5,
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"16820-2",
"17086-1"
]
}
],
"title": "MariaDB before 10.7.2 allows an application crash because it does not recognize that SELECT_LEX::nest_level is local to each VIEW."
}
]
}
OPENSUSE-SU-2022:0731-1
Vulnerability from csaf_opensuse - Published: 2022-03-04 13:47 - Updated: 2022-03-04 13:47| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-errormessages-10.5.15-150300.3.15.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-errormessages-10.5.15-150300.3.15.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-errormessages-10.5.15-150300.3.15.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-errormessages-10.5.15-150300.3.15.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-errormessages-10.5.15-150300.3.15.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-errormessages-10.5.15-150300.3.15.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-errormessages-10.5.15-150300.3.15.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-errormessages-10.5.15-150300.3.15.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-errormessages-10.5.15-150300.3.15.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-errormessages-10.5.15-150300.3.15.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-errormessages-10.5.15-150300.3.15.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-errormessages-10.5.15-150300.3.15.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.x86_64 | — |
Vendor Fix
|
| URL | Category |
|---|---|
| https://www.suse.com/support/security/rating/ | external |
| https://ftp.suse.com/pub/projects/security/csaf/o… | self |
| https://lists.opensuse.org/archives/list/security… | self |
| https://lists.opensuse.org/archives/list/security… | self |
| https://bugzilla.suse.com/1195325 | self |
| https://bugzilla.suse.com/1195334 | self |
| https://bugzilla.suse.com/1195339 | self |
| https://bugzilla.suse.com/1196016 | self |
| https://www.suse.com/security/cve/CVE-2021-46657/ | self |
| https://www.suse.com/security/cve/CVE-2021-46658/ | self |
| https://www.suse.com/security/cve/CVE-2021-46659/ | self |
| https://www.suse.com/security/cve/CVE-2021-46661/ | self |
| https://www.suse.com/security/cve/CVE-2021-46663/ | self |
| https://www.suse.com/security/cve/CVE-2021-46664/ | self |
| https://www.suse.com/security/cve/CVE-2021-46665/ | self |
| https://www.suse.com/security/cve/CVE-2021-46668/ | self |
| https://www.suse.com/security/cve/CVE-2022-24048/ | self |
| https://www.suse.com/security/cve/CVE-2022-24050/ | self |
| https://www.suse.com/security/cve/CVE-2022-24051/ | self |
| https://www.suse.com/security/cve/CVE-2022-24052/ | self |
| https://www.suse.com/security/cve/CVE-2021-46657 | external |
| https://bugzilla.suse.com/1195325 | external |
| https://bugzilla.suse.com/1199955 | external |
| https://www.suse.com/security/cve/CVE-2021-46658 | external |
| https://bugzilla.suse.com/1195334 | external |
| https://www.suse.com/security/cve/CVE-2021-46659 | external |
| https://bugzilla.suse.com/1195339 | external |
| https://www.suse.com/security/cve/CVE-2021-46661 | external |
| https://bugzilla.suse.com/1196016 | external |
| https://www.suse.com/security/cve/CVE-2021-46663 | external |
| https://bugzilla.suse.com/1196016 | external |
| https://www.suse.com/security/cve/CVE-2021-46664 | external |
| https://bugzilla.suse.com/1196016 | external |
| https://www.suse.com/security/cve/CVE-2021-46665 | external |
| https://bugzilla.suse.com/1196016 | external |
| https://www.suse.com/security/cve/CVE-2021-46668 | external |
| https://bugzilla.suse.com/1196016 | external |
| https://www.suse.com/security/cve/CVE-2022-24048 | external |
| https://bugzilla.suse.com/1196016 | external |
| https://www.suse.com/security/cve/CVE-2022-24050 | external |
| https://bugzilla.suse.com/1196016 | external |
| https://www.suse.com/security/cve/CVE-2022-24051 | external |
| https://bugzilla.suse.com/1196016 | external |
| https://www.suse.com/security/cve/CVE-2022-24052 | external |
| https://bugzilla.suse.com/1196016 | external |
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for mariadb",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for mariadb fixes the following issues:\n\n- Update to 10.5.15 (bsc#1196016):\n * 10.5.15: CVE-2021-46665\n CVE-2021-46664\n CVE-2021-46661\n CVE-2021-46668\n CVE-2021-46663\n * 10.5.14: CVE-2022-24052\n CVE-2022-24051\n CVE-2022-24050\n CVE-2022-24048\n CVE-2021-46659, bsc#1195339\n\t \n- The following issues have already been fixed in this package but weren\u0027t\n previously mentioned in the changes file:\n CVE-2021-46658, bsc#1195334\n CVE-2021-46657, bsc#1195325\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-SLE-15.3-2022-731",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2022_0731-1.json"
},
{
"category": "self",
"summary": "URL for openSUSE-SU-2022:0731-1",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/WSVJFTHRT3VK44P5TR7J6I6W3UVNZEBD/"
},
{
"category": "self",
"summary": "E-Mail link for openSUSE-SU-2022:0731-1",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/WSVJFTHRT3VK44P5TR7J6I6W3UVNZEBD/"
},
{
"category": "self",
"summary": "SUSE Bug 1195325",
"url": "https://bugzilla.suse.com/1195325"
},
{
"category": "self",
"summary": "SUSE Bug 1195334",
"url": "https://bugzilla.suse.com/1195334"
},
{
"category": "self",
"summary": "SUSE Bug 1195339",
"url": "https://bugzilla.suse.com/1195339"
},
{
"category": "self",
"summary": "SUSE Bug 1196016",
"url": "https://bugzilla.suse.com/1196016"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-46657 page",
"url": "https://www.suse.com/security/cve/CVE-2021-46657/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-46658 page",
"url": "https://www.suse.com/security/cve/CVE-2021-46658/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-46659 page",
"url": "https://www.suse.com/security/cve/CVE-2021-46659/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-46661 page",
"url": "https://www.suse.com/security/cve/CVE-2021-46661/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-46663 page",
"url": "https://www.suse.com/security/cve/CVE-2021-46663/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-46664 page",
"url": "https://www.suse.com/security/cve/CVE-2021-46664/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-46665 page",
"url": "https://www.suse.com/security/cve/CVE-2021-46665/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-46668 page",
"url": "https://www.suse.com/security/cve/CVE-2021-46668/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-24048 page",
"url": "https://www.suse.com/security/cve/CVE-2022-24048/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-24050 page",
"url": "https://www.suse.com/security/cve/CVE-2022-24050/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-24051 page",
"url": "https://www.suse.com/security/cve/CVE-2022-24051/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-24052 page",
"url": "https://www.suse.com/security/cve/CVE-2022-24052/"
}
],
"title": "Security update for mariadb",
"tracking": {
"current_release_date": "2022-03-04T13:47:22Z",
"generator": {
"date": "2022-03-04T13:47:22Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2022:0731-1",
"initial_release_date": "2022-03-04T13:47:22Z",
"revision_history": [
{
"date": "2022-03-04T13:47:22Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "libmariadbd-devel-10.5.15-150300.3.15.1.aarch64",
"product": {
"name": "libmariadbd-devel-10.5.15-150300.3.15.1.aarch64",
"product_id": "libmariadbd-devel-10.5.15-150300.3.15.1.aarch64"
}
},
{
"category": "product_version",
"name": "libmariadbd19-10.5.15-150300.3.15.1.aarch64",
"product": {
"name": "libmariadbd19-10.5.15-150300.3.15.1.aarch64",
"product_id": "libmariadbd19-10.5.15-150300.3.15.1.aarch64"
}
},
{
"category": "product_version",
"name": "mariadb-10.5.15-150300.3.15.1.aarch64",
"product": {
"name": "mariadb-10.5.15-150300.3.15.1.aarch64",
"product_id": "mariadb-10.5.15-150300.3.15.1.aarch64"
}
},
{
"category": "product_version",
"name": "mariadb-bench-10.5.15-150300.3.15.1.aarch64",
"product": {
"name": "mariadb-bench-10.5.15-150300.3.15.1.aarch64",
"product_id": "mariadb-bench-10.5.15-150300.3.15.1.aarch64"
}
},
{
"category": "product_version",
"name": "mariadb-client-10.5.15-150300.3.15.1.aarch64",
"product": {
"name": "mariadb-client-10.5.15-150300.3.15.1.aarch64",
"product_id": "mariadb-client-10.5.15-150300.3.15.1.aarch64"
}
},
{
"category": "product_version",
"name": "mariadb-rpm-macros-10.5.15-150300.3.15.1.aarch64",
"product": {
"name": "mariadb-rpm-macros-10.5.15-150300.3.15.1.aarch64",
"product_id": "mariadb-rpm-macros-10.5.15-150300.3.15.1.aarch64"
}
},
{
"category": "product_version",
"name": "mariadb-test-10.5.15-150300.3.15.1.aarch64",
"product": {
"name": "mariadb-test-10.5.15-150300.3.15.1.aarch64",
"product_id": "mariadb-test-10.5.15-150300.3.15.1.aarch64"
}
},
{
"category": "product_version",
"name": "mariadb-tools-10.5.15-150300.3.15.1.aarch64",
"product": {
"name": "mariadb-tools-10.5.15-150300.3.15.1.aarch64",
"product_id": "mariadb-tools-10.5.15-150300.3.15.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "mariadb-errormessages-10.5.15-150300.3.15.1.noarch",
"product": {
"name": "mariadb-errormessages-10.5.15-150300.3.15.1.noarch",
"product_id": "mariadb-errormessages-10.5.15-150300.3.15.1.noarch"
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "libmariadbd-devel-10.5.15-150300.3.15.1.ppc64le",
"product": {
"name": "libmariadbd-devel-10.5.15-150300.3.15.1.ppc64le",
"product_id": "libmariadbd-devel-10.5.15-150300.3.15.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libmariadbd19-10.5.15-150300.3.15.1.ppc64le",
"product": {
"name": "libmariadbd19-10.5.15-150300.3.15.1.ppc64le",
"product_id": "libmariadbd19-10.5.15-150300.3.15.1.ppc64le"
}
},
{
"category": "product_version",
"name": "mariadb-10.5.15-150300.3.15.1.ppc64le",
"product": {
"name": "mariadb-10.5.15-150300.3.15.1.ppc64le",
"product_id": "mariadb-10.5.15-150300.3.15.1.ppc64le"
}
},
{
"category": "product_version",
"name": "mariadb-bench-10.5.15-150300.3.15.1.ppc64le",
"product": {
"name": "mariadb-bench-10.5.15-150300.3.15.1.ppc64le",
"product_id": "mariadb-bench-10.5.15-150300.3.15.1.ppc64le"
}
},
{
"category": "product_version",
"name": "mariadb-client-10.5.15-150300.3.15.1.ppc64le",
"product": {
"name": "mariadb-client-10.5.15-150300.3.15.1.ppc64le",
"product_id": "mariadb-client-10.5.15-150300.3.15.1.ppc64le"
}
},
{
"category": "product_version",
"name": "mariadb-rpm-macros-10.5.15-150300.3.15.1.ppc64le",
"product": {
"name": "mariadb-rpm-macros-10.5.15-150300.3.15.1.ppc64le",
"product_id": "mariadb-rpm-macros-10.5.15-150300.3.15.1.ppc64le"
}
},
{
"category": "product_version",
"name": "mariadb-test-10.5.15-150300.3.15.1.ppc64le",
"product": {
"name": "mariadb-test-10.5.15-150300.3.15.1.ppc64le",
"product_id": "mariadb-test-10.5.15-150300.3.15.1.ppc64le"
}
},
{
"category": "product_version",
"name": "mariadb-tools-10.5.15-150300.3.15.1.ppc64le",
"product": {
"name": "mariadb-tools-10.5.15-150300.3.15.1.ppc64le",
"product_id": "mariadb-tools-10.5.15-150300.3.15.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "libmariadbd-devel-10.5.15-150300.3.15.1.s390x",
"product": {
"name": "libmariadbd-devel-10.5.15-150300.3.15.1.s390x",
"product_id": "libmariadbd-devel-10.5.15-150300.3.15.1.s390x"
}
},
{
"category": "product_version",
"name": "libmariadbd19-10.5.15-150300.3.15.1.s390x",
"product": {
"name": "libmariadbd19-10.5.15-150300.3.15.1.s390x",
"product_id": "libmariadbd19-10.5.15-150300.3.15.1.s390x"
}
},
{
"category": "product_version",
"name": "mariadb-10.5.15-150300.3.15.1.s390x",
"product": {
"name": "mariadb-10.5.15-150300.3.15.1.s390x",
"product_id": "mariadb-10.5.15-150300.3.15.1.s390x"
}
},
{
"category": "product_version",
"name": "mariadb-bench-10.5.15-150300.3.15.1.s390x",
"product": {
"name": "mariadb-bench-10.5.15-150300.3.15.1.s390x",
"product_id": "mariadb-bench-10.5.15-150300.3.15.1.s390x"
}
},
{
"category": "product_version",
"name": "mariadb-client-10.5.15-150300.3.15.1.s390x",
"product": {
"name": "mariadb-client-10.5.15-150300.3.15.1.s390x",
"product_id": "mariadb-client-10.5.15-150300.3.15.1.s390x"
}
},
{
"category": "product_version",
"name": "mariadb-rpm-macros-10.5.15-150300.3.15.1.s390x",
"product": {
"name": "mariadb-rpm-macros-10.5.15-150300.3.15.1.s390x",
"product_id": "mariadb-rpm-macros-10.5.15-150300.3.15.1.s390x"
}
},
{
"category": "product_version",
"name": "mariadb-test-10.5.15-150300.3.15.1.s390x",
"product": {
"name": "mariadb-test-10.5.15-150300.3.15.1.s390x",
"product_id": "mariadb-test-10.5.15-150300.3.15.1.s390x"
}
},
{
"category": "product_version",
"name": "mariadb-tools-10.5.15-150300.3.15.1.s390x",
"product": {
"name": "mariadb-tools-10.5.15-150300.3.15.1.s390x",
"product_id": "mariadb-tools-10.5.15-150300.3.15.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "libmariadbd-devel-10.5.15-150300.3.15.1.x86_64",
"product": {
"name": "libmariadbd-devel-10.5.15-150300.3.15.1.x86_64",
"product_id": "libmariadbd-devel-10.5.15-150300.3.15.1.x86_64"
}
},
{
"category": "product_version",
"name": "libmariadbd19-10.5.15-150300.3.15.1.x86_64",
"product": {
"name": "libmariadbd19-10.5.15-150300.3.15.1.x86_64",
"product_id": "libmariadbd19-10.5.15-150300.3.15.1.x86_64"
}
},
{
"category": "product_version",
"name": "mariadb-10.5.15-150300.3.15.1.x86_64",
"product": {
"name": "mariadb-10.5.15-150300.3.15.1.x86_64",
"product_id": "mariadb-10.5.15-150300.3.15.1.x86_64"
}
},
{
"category": "product_version",
"name": "mariadb-bench-10.5.15-150300.3.15.1.x86_64",
"product": {
"name": "mariadb-bench-10.5.15-150300.3.15.1.x86_64",
"product_id": "mariadb-bench-10.5.15-150300.3.15.1.x86_64"
}
},
{
"category": "product_version",
"name": "mariadb-client-10.5.15-150300.3.15.1.x86_64",
"product": {
"name": "mariadb-client-10.5.15-150300.3.15.1.x86_64",
"product_id": "mariadb-client-10.5.15-150300.3.15.1.x86_64"
}
},
{
"category": "product_version",
"name": "mariadb-rpm-macros-10.5.15-150300.3.15.1.x86_64",
"product": {
"name": "mariadb-rpm-macros-10.5.15-150300.3.15.1.x86_64",
"product_id": "mariadb-rpm-macros-10.5.15-150300.3.15.1.x86_64"
}
},
{
"category": "product_version",
"name": "mariadb-test-10.5.15-150300.3.15.1.x86_64",
"product": {
"name": "mariadb-test-10.5.15-150300.3.15.1.x86_64",
"product_id": "mariadb-test-10.5.15-150300.3.15.1.x86_64"
}
},
{
"category": "product_version",
"name": "mariadb-tools-10.5.15-150300.3.15.1.x86_64",
"product": {
"name": "mariadb-tools-10.5.15-150300.3.15.1.x86_64",
"product_id": "mariadb-tools-10.5.15-150300.3.15.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Leap 15.3",
"product": {
"name": "openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:leap:15.3"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "libmariadbd-devel-10.5.15-150300.3.15.1.aarch64 as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.aarch64"
},
"product_reference": "libmariadbd-devel-10.5.15-150300.3.15.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libmariadbd-devel-10.5.15-150300.3.15.1.ppc64le as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.ppc64le"
},
"product_reference": "libmariadbd-devel-10.5.15-150300.3.15.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libmariadbd-devel-10.5.15-150300.3.15.1.s390x as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.s390x"
},
"product_reference": "libmariadbd-devel-10.5.15-150300.3.15.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libmariadbd-devel-10.5.15-150300.3.15.1.x86_64 as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.x86_64"
},
"product_reference": "libmariadbd-devel-10.5.15-150300.3.15.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libmariadbd19-10.5.15-150300.3.15.1.aarch64 as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.aarch64"
},
"product_reference": "libmariadbd19-10.5.15-150300.3.15.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libmariadbd19-10.5.15-150300.3.15.1.ppc64le as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.ppc64le"
},
"product_reference": "libmariadbd19-10.5.15-150300.3.15.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libmariadbd19-10.5.15-150300.3.15.1.s390x as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.s390x"
},
"product_reference": "libmariadbd19-10.5.15-150300.3.15.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libmariadbd19-10.5.15-150300.3.15.1.x86_64 as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.x86_64"
},
"product_reference": "libmariadbd19-10.5.15-150300.3.15.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mariadb-10.5.15-150300.3.15.1.aarch64 as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.aarch64"
},
"product_reference": "mariadb-10.5.15-150300.3.15.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mariadb-10.5.15-150300.3.15.1.ppc64le as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.ppc64le"
},
"product_reference": "mariadb-10.5.15-150300.3.15.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mariadb-10.5.15-150300.3.15.1.s390x as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.s390x"
},
"product_reference": "mariadb-10.5.15-150300.3.15.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mariadb-10.5.15-150300.3.15.1.x86_64 as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.x86_64"
},
"product_reference": "mariadb-10.5.15-150300.3.15.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mariadb-bench-10.5.15-150300.3.15.1.aarch64 as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.aarch64"
},
"product_reference": "mariadb-bench-10.5.15-150300.3.15.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mariadb-bench-10.5.15-150300.3.15.1.ppc64le as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.ppc64le"
},
"product_reference": "mariadb-bench-10.5.15-150300.3.15.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mariadb-bench-10.5.15-150300.3.15.1.s390x as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.s390x"
},
"product_reference": "mariadb-bench-10.5.15-150300.3.15.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mariadb-bench-10.5.15-150300.3.15.1.x86_64 as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.x86_64"
},
"product_reference": "mariadb-bench-10.5.15-150300.3.15.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mariadb-client-10.5.15-150300.3.15.1.aarch64 as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.aarch64"
},
"product_reference": "mariadb-client-10.5.15-150300.3.15.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mariadb-client-10.5.15-150300.3.15.1.ppc64le as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.ppc64le"
},
"product_reference": "mariadb-client-10.5.15-150300.3.15.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mariadb-client-10.5.15-150300.3.15.1.s390x as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.s390x"
},
"product_reference": "mariadb-client-10.5.15-150300.3.15.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mariadb-client-10.5.15-150300.3.15.1.x86_64 as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.x86_64"
},
"product_reference": "mariadb-client-10.5.15-150300.3.15.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mariadb-errormessages-10.5.15-150300.3.15.1.noarch as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:mariadb-errormessages-10.5.15-150300.3.15.1.noarch"
},
"product_reference": "mariadb-errormessages-10.5.15-150300.3.15.1.noarch",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mariadb-rpm-macros-10.5.15-150300.3.15.1.aarch64 as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.aarch64"
},
"product_reference": "mariadb-rpm-macros-10.5.15-150300.3.15.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mariadb-rpm-macros-10.5.15-150300.3.15.1.ppc64le as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.ppc64le"
},
"product_reference": "mariadb-rpm-macros-10.5.15-150300.3.15.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mariadb-rpm-macros-10.5.15-150300.3.15.1.s390x as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.s390x"
},
"product_reference": "mariadb-rpm-macros-10.5.15-150300.3.15.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mariadb-rpm-macros-10.5.15-150300.3.15.1.x86_64 as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.x86_64"
},
"product_reference": "mariadb-rpm-macros-10.5.15-150300.3.15.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mariadb-test-10.5.15-150300.3.15.1.aarch64 as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.aarch64"
},
"product_reference": "mariadb-test-10.5.15-150300.3.15.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mariadb-test-10.5.15-150300.3.15.1.ppc64le as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.ppc64le"
},
"product_reference": "mariadb-test-10.5.15-150300.3.15.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mariadb-test-10.5.15-150300.3.15.1.s390x as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.s390x"
},
"product_reference": "mariadb-test-10.5.15-150300.3.15.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mariadb-test-10.5.15-150300.3.15.1.x86_64 as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.x86_64"
},
"product_reference": "mariadb-test-10.5.15-150300.3.15.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mariadb-tools-10.5.15-150300.3.15.1.aarch64 as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.aarch64"
},
"product_reference": "mariadb-tools-10.5.15-150300.3.15.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mariadb-tools-10.5.15-150300.3.15.1.ppc64le as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.ppc64le"
},
"product_reference": "mariadb-tools-10.5.15-150300.3.15.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mariadb-tools-10.5.15-150300.3.15.1.s390x as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.s390x"
},
"product_reference": "mariadb-tools-10.5.15-150300.3.15.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mariadb-tools-10.5.15-150300.3.15.1.x86_64 as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.x86_64"
},
"product_reference": "mariadb-tools-10.5.15-150300.3.15.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.3"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2021-46657",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-46657"
}
],
"notes": [
{
"category": "general",
"text": "get_sort_by_table in MariaDB before 10.6.2 allows an application crash via certain subquery uses of ORDER BY.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-errormessages-10.5.15-150300.3.15.1.noarch",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-46657",
"url": "https://www.suse.com/security/cve/CVE-2021-46657"
},
{
"category": "external",
"summary": "SUSE Bug 1195325 for CVE-2021-46657",
"url": "https://bugzilla.suse.com/1195325"
},
{
"category": "external",
"summary": "SUSE Bug 1199955 for CVE-2021-46657",
"url": "https://bugzilla.suse.com/1199955"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-errormessages-10.5.15-150300.3.15.1.noarch",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-errormessages-10.5.15-150300.3.15.1.noarch",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-03-04T13:47:22Z",
"details": "low"
}
],
"title": "CVE-2021-46657"
},
{
"cve": "CVE-2021-46658",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-46658"
}
],
"notes": [
{
"category": "general",
"text": "save_window_function_values in MariaDB before 10.6.3 allows an application crash because of incorrect handling of with_window_func=true for a subquery.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-errormessages-10.5.15-150300.3.15.1.noarch",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-46658",
"url": "https://www.suse.com/security/cve/CVE-2021-46658"
},
{
"category": "external",
"summary": "SUSE Bug 1195334 for CVE-2021-46658",
"url": "https://bugzilla.suse.com/1195334"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-errormessages-10.5.15-150300.3.15.1.noarch",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-errormessages-10.5.15-150300.3.15.1.noarch",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-03-04T13:47:22Z",
"details": "low"
}
],
"title": "CVE-2021-46658"
},
{
"cve": "CVE-2021-46659",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-46659"
}
],
"notes": [
{
"category": "general",
"text": "MariaDB before 10.7.2 allows an application crash because it does not recognize that SELECT_LEX::nest_level is local to each VIEW.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-errormessages-10.5.15-150300.3.15.1.noarch",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-46659",
"url": "https://www.suse.com/security/cve/CVE-2021-46659"
},
{
"category": "external",
"summary": "SUSE Bug 1195339 for CVE-2021-46659",
"url": "https://bugzilla.suse.com/1195339"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-errormessages-10.5.15-150300.3.15.1.noarch",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-errormessages-10.5.15-150300.3.15.1.noarch",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-03-04T13:47:22Z",
"details": "low"
}
],
"title": "CVE-2021-46659"
},
{
"cve": "CVE-2021-46661",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-46661"
}
],
"notes": [
{
"category": "general",
"text": "MariaDB through 10.5.9 allows an application crash in find_field_in_tables and find_order_in_list via an unused common table expression (CTE).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-errormessages-10.5.15-150300.3.15.1.noarch",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-46661",
"url": "https://www.suse.com/security/cve/CVE-2021-46661"
},
{
"category": "external",
"summary": "SUSE Bug 1196016 for CVE-2021-46661",
"url": "https://bugzilla.suse.com/1196016"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-errormessages-10.5.15-150300.3.15.1.noarch",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-errormessages-10.5.15-150300.3.15.1.noarch",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-03-04T13:47:22Z",
"details": "important"
}
],
"title": "CVE-2021-46661"
},
{
"cve": "CVE-2021-46663",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-46663"
}
],
"notes": [
{
"category": "general",
"text": "MariaDB through 10.5.13 allows a ha_maria::extra application crash via certain SELECT statements.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-errormessages-10.5.15-150300.3.15.1.noarch",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-46663",
"url": "https://www.suse.com/security/cve/CVE-2021-46663"
},
{
"category": "external",
"summary": "SUSE Bug 1196016 for CVE-2021-46663",
"url": "https://bugzilla.suse.com/1196016"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-errormessages-10.5.15-150300.3.15.1.noarch",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-errormessages-10.5.15-150300.3.15.1.noarch",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-03-04T13:47:22Z",
"details": "important"
}
],
"title": "CVE-2021-46663"
},
{
"cve": "CVE-2021-46664",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-46664"
}
],
"notes": [
{
"category": "general",
"text": "MariaDB through 10.5.9 allows an application crash in sub_select_postjoin_aggr for a NULL value of aggr.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-errormessages-10.5.15-150300.3.15.1.noarch",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-46664",
"url": "https://www.suse.com/security/cve/CVE-2021-46664"
},
{
"category": "external",
"summary": "SUSE Bug 1196016 for CVE-2021-46664",
"url": "https://bugzilla.suse.com/1196016"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-errormessages-10.5.15-150300.3.15.1.noarch",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-errormessages-10.5.15-150300.3.15.1.noarch",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-03-04T13:47:22Z",
"details": "moderate"
}
],
"title": "CVE-2021-46664"
},
{
"cve": "CVE-2021-46665",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-46665"
}
],
"notes": [
{
"category": "general",
"text": "MariaDB through 10.5.9 allows a sql_parse.cc application crash because of incorrect used_tables expectations.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-errormessages-10.5.15-150300.3.15.1.noarch",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-46665",
"url": "https://www.suse.com/security/cve/CVE-2021-46665"
},
{
"category": "external",
"summary": "SUSE Bug 1196016 for CVE-2021-46665",
"url": "https://bugzilla.suse.com/1196016"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-errormessages-10.5.15-150300.3.15.1.noarch",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-errormessages-10.5.15-150300.3.15.1.noarch",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-03-04T13:47:22Z",
"details": "moderate"
}
],
"title": "CVE-2021-46665"
},
{
"cve": "CVE-2021-46668",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-46668"
}
],
"notes": [
{
"category": "general",
"text": "MariaDB through 10.5.9 allows an application crash via certain long SELECT DISTINCT statements that improperly interact with storage-engine resource limitations for temporary data structures.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-errormessages-10.5.15-150300.3.15.1.noarch",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-46668",
"url": "https://www.suse.com/security/cve/CVE-2021-46668"
},
{
"category": "external",
"summary": "SUSE Bug 1196016 for CVE-2021-46668",
"url": "https://bugzilla.suse.com/1196016"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-errormessages-10.5.15-150300.3.15.1.noarch",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-errormessages-10.5.15-150300.3.15.1.noarch",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-03-04T13:47:22Z",
"details": "moderate"
}
],
"title": "CVE-2021-46668"
},
{
"cve": "CVE-2022-24048",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-24048"
}
],
"notes": [
{
"category": "general",
"text": "MariaDB CONNECT Storage Engine Stack-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL queries. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the service account. Was ZDI-CAN-16191.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-errormessages-10.5.15-150300.3.15.1.noarch",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-24048",
"url": "https://www.suse.com/security/cve/CVE-2022-24048"
},
{
"category": "external",
"summary": "SUSE Bug 1196016 for CVE-2022-24048",
"url": "https://bugzilla.suse.com/1196016"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-errormessages-10.5.15-150300.3.15.1.noarch",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-errormessages-10.5.15-150300.3.15.1.noarch",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-03-04T13:47:22Z",
"details": "important"
}
],
"title": "CVE-2022-24048"
},
{
"cve": "CVE-2022-24050",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-24050"
}
],
"notes": [
{
"category": "general",
"text": "MariaDB CONNECT Storage Engine Use-After-Free Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL queries. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the service account. Was ZDI-CAN-16207.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-errormessages-10.5.15-150300.3.15.1.noarch",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-24050",
"url": "https://www.suse.com/security/cve/CVE-2022-24050"
},
{
"category": "external",
"summary": "SUSE Bug 1196016 for CVE-2022-24050",
"url": "https://bugzilla.suse.com/1196016"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-errormessages-10.5.15-150300.3.15.1.noarch",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-errormessages-10.5.15-150300.3.15.1.noarch",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-03-04T13:47:22Z",
"details": "important"
}
],
"title": "CVE-2022-24050"
},
{
"cve": "CVE-2022-24051",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-24051"
}
],
"notes": [
{
"category": "general",
"text": "MariaDB CONNECT Storage Engine Format String Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL queries. The issue results from the lack of proper validation of a user-supplied string before using it as a format specifier. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the service account. Was ZDI-CAN-16193.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-errormessages-10.5.15-150300.3.15.1.noarch",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-24051",
"url": "https://www.suse.com/security/cve/CVE-2022-24051"
},
{
"category": "external",
"summary": "SUSE Bug 1196016 for CVE-2022-24051",
"url": "https://bugzilla.suse.com/1196016"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-errormessages-10.5.15-150300.3.15.1.noarch",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-errormessages-10.5.15-150300.3.15.1.noarch",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-03-04T13:47:22Z",
"details": "important"
}
],
"title": "CVE-2022-24051"
},
{
"cve": "CVE-2022-24052",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-24052"
}
],
"notes": [
{
"category": "general",
"text": "MariaDB CONNECT Storage Engine Heap-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL queries. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the service account. Was ZDI-CAN-16190.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-errormessages-10.5.15-150300.3.15.1.noarch",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-24052",
"url": "https://www.suse.com/security/cve/CVE-2022-24052"
},
{
"category": "external",
"summary": "SUSE Bug 1196016 for CVE-2022-24052",
"url": "https://bugzilla.suse.com/1196016"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-errormessages-10.5.15-150300.3.15.1.noarch",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:libmariadbd-devel-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:libmariadbd19-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-bench-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-client-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-errormessages-10.5.15-150300.3.15.1.noarch",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-rpm-macros-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-test-10.5.15-150300.3.15.1.x86_64",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.aarch64",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.ppc64le",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.s390x",
"openSUSE Leap 15.3:mariadb-tools-10.5.15-150300.3.15.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-03-04T13:47:22Z",
"details": "important"
}
],
"title": "CVE-2022-24052"
}
]
}
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.