ALT-BU-2023-6910-2
Branch p10 update bulletin.
Closed vulnerabilities
Modified: 2025-03-05
BDU:2023-03856
Уязвимость функции spider_db_mbase::print_warnings() СУБД MariaDB, позволяющая нарушителю вызвать отказ в обслуживании
Modified: 2025-04-03
CVE-2022-47015
MariaDB Server before 10.3.34 thru 10.9.3 is vulnerable to Denial of Service. It is possible for function spider_db_mbase::print_warnings to dereference a null pointer.
- https://github.com/MariaDB/server/commit/be0a46b3d52b58956fd0d47d040b9f4514406954
- https://lists.debian.org/debian-lts-announce/2023/06/msg00005.html
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O22PO3Q6TRSNJI2A2WTJH3VVCHEKBF6C/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SUQ33SPQCZQD63TWAM3XKFNVNFRGPFYU/
- https://security.netapp.com/advisory/ntap-20230309-0009/
- https://github.com/MariaDB/server/commit/be0a46b3d52b58956fd0d47d040b9f4514406954
- https://lists.debian.org/debian-lts-announce/2023/06/msg00005.html
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O22PO3Q6TRSNJI2A2WTJH3VVCHEKBF6C/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SUQ33SPQCZQD63TWAM3XKFNVNFRGPFYU/
- https://security.netapp.com/advisory/ntap-20230309-0009/
Closed vulnerabilities
Modified: 2023-12-21
BDU:2023-08093
Уязвимость файла proxy_request.c программного средства кэширования данных memcached, позволяющая нарушителю выполнить произвольный код
Modified: 2025-03-05
BDU:2023-08094
Уязвимость функции proxy_run_coroutine() (proto_proxy.c) программного средства кэширования данных memcached, позволяющая нарушителю вызвать отказ в обслуживании
Modified: 2024-11-21
CVE-2023-46852
In Memcached before 1.6.22, a buffer overflow exists when processing multiget requests in proxy mode, if there are many spaces after the "get" substring.
Modified: 2024-11-21
CVE-2023-46853
In Memcached before 1.6.22, an off-by-one error exists when processing proxy requests in proxy mode, if \n is used instead of \r\n.