Skip to content
OpenAdvisories

Package · Azure Linux

mariadb

58 known vulnerabilities.

3 results · Clear filters · Feed

  • Critical 9.8

    Compress::Raw::Zlib versions through 2.219 for Perl use potentially insecure versions of zlib

    Compress::Raw::Zlib versions through 2.219 for Perl use potentially insecure versions of zlib. Compress::Raw::Zlib includes a copy of the zlib library. Compress::Raw::Zlib version 2.220 includes zlib 1.3.2, which addresses findings fron the 7ASecurity audit o…

  • Critical 10.0

    Buffer overread in domain name matching

    In function MatchDomainName(), input param str is treated as a NULL terminated string despite being user provided and unchecked. Specifically, the function X509_check_host() takes in a pointer and length to check against, with no requirements that it be NULL …

  • Critical 9.1

    TLS 1.3 client issue handling malicious server when not including a KSE and PSK extension

    If a TLS 1.3 client gets neither a PSK (pre shared key) extension nor a KSE (key share extension) when connecting to a malicious server, a default predictable buffer gets used for the IKM (Input Keying Material) value when generating the session master secret…