Skip to content
OpenAdvisories
High ALAS2023-2023-037 52 CVEs

Important: mariadb105 security update (Amazon Linux 2023)

Published Feb 17, 2023 · Updated Feb 22, 2023

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2022-32089: MariaDB v10.5 to v10.7 was discovered to contain a segmentation fault via the component st_select_lex_unit::exclude_level. CVE-2022-32088: MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component Exec_time_tracker::get_loops/Filesort_tracker::report_use/filesort. CVE-2022-32087: MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component Item_args::walk_args. CVE-2022-32086: MariaDB v10.4 to v10.8 was discovered to contain a segmentation fault via the component Item_field::fix_outer_field. CVE-2022-32085: MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component Item_func_in::cleanup/Item::cleanup_processor. CVE-2022-32084: MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component sub_select. CVE-2022-32083: MariaDB v10.2 to v10.6.1 was discovered to contain a segmentation fault via the component Item_subselect::init_expr_cache_tracker. CVE-2022-32082: MariaDB v10.5 to v10.7 was discovered to contain an assertion failure at table->get_ref_count() == 0 in dict0dict.cc. CVE-2022-32081: MariaDB v10.4 to v10.7 was discovered to contain an use-after-poison in prepare_inplace_add_virtual at /storage/innobase/handler/handler0alter.cc. CVE-2022-31624: MariaDB Server before 10.7 is vulnerable to Denial of Service. While executing the plugin/server_audit/server_audit.c method log_statement_ex, the held lock lock_bigbuffer is not released correctly, which allows local users to trigger a denial of service due to the deadlock. CVE-2022-27458: MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component Binary_string::free_buffer() at /sql/sql_string.h. CVE-2022-27457: MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component my_mb_wc_latin1 at /strings/ctype-latin1.c. CVE-2022-27456: MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component VDec::VDec at /sql/sql_type.cc. CVE-2022-27455: MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component my_wildcmp_8bit_impl at /strings/ctype-simple.c. CVE-2022-27452: MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/item_cmpfunc.cc. CVE-2022-27451: MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/field_conv.cc. CVE-2022-27449: MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/item_func.cc:148. CVE-2022-27448: There is an Assertion failure in MariaDB Server v10.9 and below via 'node->pcur->rel_pos == BTR_PCUR_ON' at /row/row0mysql.cc. CVE-2022-27447: MariaDB Server v10.9 and below was discovered to contain a use-after-free via the component Binary_string::free_buffer() at /sql/sql_string.h. CVE-2022-27446: MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/item_cmpfunc.h. CVE-2022-27445: MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/sql_window.cc. CVE-2022-27444: MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/item_subselect.cc. CVE-2022-27387: MariaDB Server v10.7 and below was discovered to contain a global buffer overflow in the component decimal_bin_size, which is exploited via specially crafted SQL statements. CVE-2022-27386: MariaDB Server v10.7 and below was discovered to contain a segmentation fault via the component sql/sql_class.cc. CVE-2022-27385: An issue in the component Used_tables_and_const_cache::used_tables_and_const_cache_join of MariaDB Server v10.7 and below was discovered to allow attackers to cause a Denial of Service (DoS) via specially crafted SQL statements. CVE-2022-27384: An issue in the component Item_subselect::init_expr_cache_tracker of MariaDB Server v10.6 and below was discovered to allow attackers to cause a Denial of Service (DoS) via specially crafted SQL statements. CVE-2022-27383: MariaDB Server v10.6 and below was discovered to contain an use-after-free in the component my_strcasecmp_8bit, which is exploited via specially crafted SQL statements. CVE-2022-27382: MariaDB Server v10.7 and below was discovered to contain a segmentation fault via the component Item_field::used_tables/update_depend_map_for_order. CVE-2022-27381: An issue in the component Field::set_default of MariaDB Server v10.6 and below was discovered to allow attackers to cause a Denial of Service (DoS) via specially crafted SQL statements. CVE-2022-27380: An issue in the component my_decimal::operator= of MariaDB Server v10.6.3 and below was discovered to allow attackers to cause a Denial of Service (DoS) via specially crafted SQL statements. CVE-2022-27379: An issue in the component Arg_comparator::compare_real_fixed of MariaDB Server v10.6.2 and below was discovered to allow attackers to cause a Denial of Service (DoS) via specially crafted SQL statements. CVE-2022-27378: An issue in the component Create_tmp_table::finalize of MariaDB Server v10.7 and below was discovered to allow attackers to cause a Denial of Service (DoS) via specially crafted SQL statements. CVE-2022-27377: MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component Item_func_in::cleanup(), which is exploited via specially crafted SQL statements. CVE-2022-27376: MariaDB Server v10.6.5 and below was discovered to contain an use-after-free in the component Item_args::walk_arg, which is exploited via specially crafted SQL statements. CVE-2022-24052: A flaw was found in MariaDB. Lack of input validation leads to a heap buffer overflow. This flaw allows an authenticated, local attacker with at least a low level of privileges to submit a crafted SQL query to MariaDB and escalate their privileges

Fixed packages 28

ReleasePackageFixed in
Amazon Linux · 2023 mariadb105 3:10.5.16-1.amzn2023.0.7
Amazon Linux · 2023 mariadb105-backup 3:10.5.16-1.amzn2023.0.7
Amazon Linux · 2023 mariadb105-backup-debuginfo 3:10.5.16-1.amzn2023.0.7
Amazon Linux · 2023 mariadb105-common 3:10.5.16-1.amzn2023.0.7
Amazon Linux · 2023 mariadb105-connect-engine 3:10.5.16-1.amzn2023.0.7
Amazon Linux · 2023 mariadb105-connect-engine-debuginfo 3:10.5.16-1.amzn2023.0.7
Amazon Linux · 2023 mariadb105-cracklib-password-check 3:10.5.16-1.amzn2023.0.7
Amazon Linux · 2023 mariadb105-cracklib-password-check-debuginfo 3:10.5.16-1.amzn2023.0.7
Amazon Linux · 2023 mariadb105-debuginfo 3:10.5.16-1.amzn2023.0.7
Amazon Linux · 2023 mariadb105-debugsource 3:10.5.16-1.amzn2023.0.7
Amazon Linux · 2023 mariadb105-devel 3:10.5.16-1.amzn2023.0.7
Amazon Linux · 2023 mariadb105-errmsg 3:10.5.16-1.amzn2023.0.7
Amazon Linux · 2023 mariadb105-gssapi-server 3:10.5.16-1.amzn2023.0.7
Amazon Linux · 2023 mariadb105-gssapi-server-debuginfo 3:10.5.16-1.amzn2023.0.7
Amazon Linux · 2023 mariadb105-oqgraph-engine 3:10.5.16-1.amzn2023.0.7
Amazon Linux · 2023 mariadb105-oqgraph-engine-debuginfo 3:10.5.16-1.amzn2023.0.7
Amazon Linux · 2023 mariadb105-pam 3:10.5.16-1.amzn2023.0.7
Amazon Linux · 2023 mariadb105-pam-debuginfo 3:10.5.16-1.amzn2023.0.7
Amazon Linux · 2023 mariadb105-rocksdb-engine 3:10.5.16-1.amzn2023.0.7
Amazon Linux · 2023 mariadb105-rocksdb-engine-debuginfo 3:10.5.16-1.amzn2023.0.7
Amazon Linux · 2023 mariadb105-server 3:10.5.16-1.amzn2023.0.7
Amazon Linux · 2023 mariadb105-server-debuginfo 3:10.5.16-1.amzn2023.0.7
Amazon Linux · 2023 mariadb105-server-utils 3:10.5.16-1.amzn2023.0.7
Amazon Linux · 2023 mariadb105-server-utils-debuginfo 3:10.5.16-1.amzn2023.0.7
Amazon Linux · 2023 mariadb105-sphinx-engine 3:10.5.16-1.amzn2023.0.7
Amazon Linux · 2023 mariadb105-sphinx-engine-debuginfo 3:10.5.16-1.amzn2023.0.7
Amazon Linux · 2023 mariadb105-test 3:10.5.16-1.amzn2023.0.7
Amazon Linux · 2023 mariadb105-test-debuginfo 3:10.5.16-1.amzn2023.0.7

Vulnerabilities 52

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2021-2372.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2021-2389.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2021-35604.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2021-46658.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2021-46659.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2021-46661.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2021-46662.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2021-46663.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2021-46664.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2021-46665.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2021-46667.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2021-46668.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2021-46669.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2022-0778.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2022-24048.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2022-24050.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2022-24051.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2022-24052.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2022-27376.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2022-27377.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2022-27378.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2022-27379.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2022-27380.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2022-27381.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2022-27382.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2022-27383.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2022-27384.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2022-27385.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2022-27386.html
  • web
    https://alas.aws.amazon.com/cve/html/CVE-2022-27387.html