https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T18:38:51.562399+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2022:5826 ALSA-2022:5826 — Moderate: mariadb:10.5 security, bug fix, and enhancement update 2026-10-02T18:38:52.052538+00:00

Affected: AlmaLinux:8: Judy, AlmaLinux:8: galera, AlmaLinux:8: mariadb, AlmaLinux:8: mariadb-backup, AlmaLinux:8: mariadb-common, AlmaLinux:8: mariadb-devel, AlmaLinux:8: mariadb-embedded, AlmaLinux:8: mariadb-embedded-devel, AlmaLinux:8: mariadb-errmsg, AlmaLinux:8: mariadb-gssapi-server and 6 more

MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL. The following packages have been upgraded to a later upstream version: galera (26.4.11), mariadb (10.5.16). Security Fix(es): * mariadb: MariaDB through 10.5.9 allows attackers to trigger a convert_const_to_int use-after-free when the BIGINT data type is used (CVE-2021-46669) * mariadb: lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer (CVE-2022-24048) * mariadb: lack of validating the existence of an object prior to performing operations on the object (CVE-2022-24050) * mariadb: lack of proper validation of a user-supplied string before using it as a format specifier (CVE-2022-24051) * mariadb: CONNECT Storage Engine Heap-based Buffer Overflow Privilege Escalation Vulnerability (CVE-2022-24052) * mariadb: assertion failure in Item_args::walk_arg (CVE-2022-27376) * mariadb: use-after-poison when complex conversion is involved in blob (CVE-2022-27377) * mariadb: crash in create_tmp_table::finalize (CVE-2022-27378) * mariadb: crash in component arg_comparator::compare_real_fixed (CVE-2022-27379) * mariadb: crash at my_decimal::operator= (CVE-2022-27380) * mariadb: crash at Field::set_default via specially crafted SQL statements (CVE-2022-27381) * mariadb: assertion failure via component Item_field::used_tables/update_depend_map_for_order (CVE-2022-27382) * mariadb: use-after-poison in my_strcasecmp_8bit() of ctyp…

 https://cve.radiocsirt.org/vuln/bdu:2022-00883 bdu:2022-00883 2026-10-02T18:38:52.052688+00:00 bdu:2022-00883 https://cve.radiocsirt.org/vuln/bell-cve-2022-24052 Withdrawn: BELL-CVE-2022-24052 — CVE-2022-24052 does not affect BellSoft software 2026-10-02T18:38:52.052709+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/bit-mariadb-2022-24052 BIT-mariadb-2022-24052 2026-10-02T18:38:52.052726+00:00

Affected: Bitnami: mariadb

MariaDB CONNECT Storage Engine Heap-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL queries. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the service account. Was ZDI-CAN-16190.

 https://cve.radiocsirt.org/vuln/euvd-2026-13994 EUVD-2026-13994 2026-10-02T18:38:52.052750+00:00 EUVD-2026-13994 https://cve.radiocsirt.org/vuln/fkie_cve-2022-24052 fkie_cve-2022-24052 2026-10-02T18:38:52.052761+00:00

MariaDB CONNECT Storage Engine Heap-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL queries. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the service account. Was ZDI-CAN-16190.

 https://cve.radiocsirt.org/vuln/ghsa-pfvf-3927-r9fx GHSA-pfvf-3927-r9fx 2026-10-02T18:38:52.052785+00:00

This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL queries. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the service account. Was ZDI-CAN-16190.

 https://cve.radiocsirt.org/vuln/gsd-2022-24052 gsd-2022-24052 2026-10-02T18:38:52.052801+00:00 gsd-2022-24052 https://cve.radiocsirt.org/vuln/msrc_cve-2022-24052 msrc_CVE-2022-24052 — MariaDB CONNECT Storage Engine Heap-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows… 2026-10-02T18:38:52.052812+00:00 msrc_CVE-2022-24052 https://cve.radiocsirt.org/vuln/oesa-2022-1619 OESA-2022-1619 — mariadb security update 2026-10-02T18:38:52.052831+00:00

Affected: openEuler:20.03-LTS-SP1: mariadb, openEuler:20.03-LTS-SP2: mariadb, openEuler:20.03-LTS-SP3: mariadb, openEuler:22.03-LTS: mariadb

MariaDB is a community developed fork from MySQL - a multi-user, multi-threaded SQL database server. It is a client/server implementation consisting of a server daemon (mariadbd) and many different client programs and libraries. The base package contains the standard MariaDB/MySQL client programs and utilities. Security Fix(es): MariaDB CONNECT Storage Engine Heap-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL queries. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the service account. Was ZDI-CAN-16190.(CVE-2022-24052)

 https://cve.radiocsirt.org/vuln/opensuse-su-2022:0731-1 openSUSE-SU-2022:0731-1 — Security update for mariadb 2026-10-02T18:38:52.052861+00:00

Security update for mariadb

 https://cve.radiocsirt.org/vuln/rhsa-2022:5759 RHSA-2022:5759 — Red Hat Security Advisory: rh-mariadb105-galera and rh-mariadb105-mariadb security and bugfix update 2026-10-02T18:38:52.052884+00:00

mariadb: Crash executing query with VIEW, aggregate and subquery mariadb: MariaDB allows an application crash in find_field_in_tables and find_order_in_list via an unused common table expression (CTE) mariadb: MariaDB through 10.5.13 allows a ha_maria::extra application crash via certain SELECT statements mariadb: MariaDB through 10.5.9 allows an application crash in sub_select_postjoin_aggr for a NULL value of aggr mariadb: MariaDB through 10.5.9 allows a sql_parse.cc application crash because of incorrect used_tables expectations mariadb: MariaDB through 10.5.9 allows an application crash via certain long SELECT DISTINCT statements mariadb: MariaDB through 10.5.9 allows attackers to trigger a convert_const_to_int use-after-free when the BIGINT data type is used mysql: C API unspecified vulnerability (CPU Oct 2022) mariadb: lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer mariadb: lack of validating the existence of an object prior to performing operations on the object mariadb: lack of proper validation of a user-supplied string before using it as a format specifier mariadb: CONNECT storage engine heap-based buffer overflow mariadb: assertion failure in Item_args::walk_arg mariadb: use-after-poison when complex conversion is involved in blob mariadb: server crash in create_tmp_table::finalize mariadb: server crash in component arg_comparator::compare_real_fixed mariadb: server crash at my_decimal::operat…

 https://cve.radiocsirt.org/vuln/suse-ru-2023:3956-1 SUSE-RU-2023:3956-1 — Recommended update for mariadb104 2026-10-02T18:38:52.052965+00:00

Recommended update for mariadb104

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-24052 UBUNTU-CVE-2022-24052 2026-10-02T18:38:52.053093+00:00

Affected: Ubuntu:16.04:LTS: mariadb-10.0, Ubuntu:18.04:LTS: mariadb-10.1, Ubuntu:20.04:LTS: mariadb-10.3

MariaDB CONNECT Storage Engine Heap-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL queries. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the service account. Was ZDI-CAN-16190.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0844 WID-SEC-W-2022-0844 — MariaDB: Schwachstellen ermöglichen nicht spezifizierten Angriff 2026-10-02T18:38:52.053119+00:00

Ein Angreifer kann mehrere Schwachstellen in MariaDB ausnutzen, um nicht näher spezifizierte Angriffe durchzuführen.