2023-11-10
ALT-BU-2023-7102-1
Branch c9f2 update bulletin.
Closed vulnerabilities
Published: 2022-09-28
BDU:2023-03856
Уязвимость функции spider_db_mbase::print_warnings() СУБД MariaDB, позволяющая нарушителю вызвать отказ в обслуживании
Severity: MEDIUM (6.5)
Vector: AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
References:
Published: 2023-01-20
Modified: 2025-04-03
Modified: 2025-04-03
CVE-2022-47015
MariaDB Server before 10.3.34 thru 10.9.3 is vulnerable to Denial of Service. It is possible for function spider_db_mbase::print_warnings to dereference a null pointer.
Severity: MEDIUM (6.5)
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
References:
- https://github.com/MariaDB/server/commit/be0a46b3d52b58956fd0d47d040b9f4514406954
- https://github.com/MariaDB/server/commit/be0a46b3d52b58956fd0d47d040b9f4514406954
- [debian-lts-announce] 20230604 [SECURITY] [DLA 3444-1] mariadb-10.3 security update
- [debian-lts-announce] 20230604 [SECURITY] [DLA 3444-1] mariadb-10.3 security update
- FEDORA-2023-381f23a0ae
- FEDORA-2023-381f23a0ae
- FEDORA-2023-b4ff407364
- FEDORA-2023-b4ff407364
- https://security.netapp.com/advisory/ntap-20230309-0009/
- https://security.netapp.com/advisory/ntap-20230309-0009/