mariadb

10 results · Clear filters · Feed

• Medium 6.3
  CVE-2026-89133

  NameConstraints not enforced across unconstrained intermediate CA

  wolfSSL versions 5.9.2 and earlier contain a flaw in the X.509 certificate validation logic where it fails to properly enforce NameConstraints extensions when there is an unconstrained CA tier between a name-constrained intermediate CA and the leaf certificat…

  wolfSSL wolfSSL wolfssl wolfssl Debian Ubuntu Azure Linux Alpine
  Sep 27, 2026
• Medium 6.3
  CVE-2026-89135

  Failed X509_verify_cert leaves unverified CA in shared CertManager

  A failed X509_verify_cert call permanently plants an unverified attacker CA in the shared CertManager, bypassing certificate validation in every type-blind sibling consumer (native TLS, OCSP, CRL, direct CM verify). This affects version 5.8.4 through 5.9.2 of…

  wolfSSL wolfSSL wolfssl wolfssl Debian Ubuntu Azure Linux Alpine
  Sep 27, 2026
• Medium 6.3
  CVE-2026-93304

  (D)TLS 1.2 client accepts early ChangeCipherSpec before ClientKeyExchange

  A (D)TLS 1.2 client can accept a ChangeCipherSpec message before it has sent its ClientKeyExchange. No master secret has been derived at that point, so the client installs read keys derived from a known (deterministic) key and checks the server's Finished aga…

  wolfSSL wolfSSL wolfssl wolfssl Debian Ubuntu Azure Linux Alpine
  Sep 27, 2026
• Medium 4.3
  CVE-2026-3494 Public exploit

  MariaDB Server Audit Plugin Comment Handling Bypass

  In MariaDB server version through 11.8.5, when server audit plugin is enabled with server_audit_events variable configured with QUERY_DCL, QUERY_DDL, or QUERY_DML filtering, if an authenticated database user invokes a SQL statement prefixed with double-hyphen…

  amazon MariaDB MariaDB Server RDS for MySQL Debian Ubuntu Azure Linux Alpine Wolfi
  Mar 3, 2026
• Medium 4.9
  CVE-2023-52970

  MariaDB Server 10.4 through 10.5.*, 10.6 through 10.6.*, 10.7 through 10.11.*, 11.0 through 11.0.*, and 11.1 through 11…

  MariaDB MariaDB mariadb-10.6 mariadb Debian Ubuntu Azure Linux Wolfi
  Mar 8, 2025
• Medium 4.9
  CVE-2023-52971

  MariaDB Server 10.10 through 10.11.* and 11.0 through 11.4.* crashes in JOIN::fix_all_splittings_in_plan.

  MariaDB MariaDB mariadb mariadb Debian Ubuntu Azure Linux Wolfi
  Mar 8, 2025
• Medium 4.9
  CVE-2023-52969

  MariaDB Server 10.4 through 10.5.*, 10.6 through 10.6.*, 10.7 through 10.11.*, and 11.0 through 11.0.* can sometimes cr…

  MariaDB MariaDB mariadb-10.6 mariadb Debian Ubuntu Azure Linux Wolfi
  Mar 8, 2025
• Medium 4.9
  CVE-2025-21490

  Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Debian Ubuntu Azure Linux Alpine Wolfi
  Jan 21, 2025
• Medium 4.9
  CVE-2024-21096

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Client: mysqldump). Supported versions that are a…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Debian Ubuntu Azure Linux Alpine
  Apr 16, 2024
• Medium 6.5
  CVE-2022-47015

  MariaDB Server before 10.3.34 thru 10.9.3 is vulnerable to Denial of Service. It is possible for function spider_db_mba…

  mariadb-10.3 mariadb-10.6 mariadb mariadb Debian Ubuntu Azure Linux Alpine
  Jan 20, 2023