https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T09:45:19.899604+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2023:5259 ALSA-2023:5259 — Moderate: mariadb:10.3 security, bug fix, and enhancement update 2026-10-02T09:45:20.039643+00:00

Affected: AlmaLinux:8: Judy, AlmaLinux:8: galera, AlmaLinux:8: mariadb, AlmaLinux:8: mariadb-backup, AlmaLinux:8: mariadb-common, AlmaLinux:8: mariadb-devel, AlmaLinux:8: mariadb-embedded, AlmaLinux:8: mariadb-embedded-devel, AlmaLinux:8: mariadb-errmsg, AlmaLinux:8: mariadb-gssapi-server and 5 more

MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL.

The following packages have been upgraded to a later upstream version: mariadb (10.3). (BZ#2223572, BZ#2223574, BZ#2223962, BZ#2223965)

Security Fix(es):

* mariadb: segmentation fault via the component sub_select (CVE-2022-32084) * mariadb: server crash in JOIN_CACHE::free or in copy_fields (CVE-2022-32091) * mariadb: compress_write() fails to release mutex on failure (CVE-2022-38791) * mariadb: NULL pointer dereference in spider_db_mbase::print_warnings() (CVE-2022-47015)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

* [MariaDB 10.3.32] socat: E Failed to set SNI host "" (SST failure) (BZ#2223961)

 https://cve.radiocsirt.org/vuln/bdu:2022-04078 bdu:2022-04078 2026-10-02T09:45:20.039753+00:00 bdu:2022-04078 https://cve.radiocsirt.org/vuln/bell-cve-2022-32084 Withdrawn: BELL-CVE-2022-32084 — CVE-2022-32084 does not affect BellSoft software 2026-10-02T09:45:20.039772+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/bit-mariadb-2022-32084 BIT-mariadb-2022-32084 2026-10-02T09:45:20.039788+00:00

Affected: Bitnami: mariadb

MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component sub_select.

 https://cve.radiocsirt.org/vuln/cnvd-2022-51598 cnvd-2022-51598 2026-10-02T09:45:20.039809+00:00 cnvd-2022-51598 https://cve.radiocsirt.org/vuln/euvd-2026-17189 EUVD-2026-17189 2026-10-02T09:45:20.039822+00:00 EUVD-2026-17189 https://cve.radiocsirt.org/vuln/fkie_cve-2022-32084 fkie_cve-2022-32084 2026-10-02T09:45:20.039833+00:00

MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component sub_select.

 https://cve.radiocsirt.org/vuln/fsa-202302 FSA-202302 — Festo: Several vulnerabilities in FactoryViews 2026-10-02T09:45:20.039852+00:00

FactoryViews bundles many third-party applications which are used in background processes to provide the software's features. From time to time, vulnerabilities in these bundled applications are discovered. These are typically fixed in newer versions of FactoryViews by updating the bundled applications.

FactoryViews versions up to and including 1.5.2 contain around 200 such vulnerabilities listed in this advisory.Version 1.6.0 is a security rollup release which includes updates to all bundled applications and fixes these vulnerabilities.

At this time, FactoryViews Lite cannot be updated beyond version 1.1. FactoryViews 1.7 unifies the non-Lite and Lite versions and fixes these vulnerabilities for users of FactoryViews Lite.

 https://cve.radiocsirt.org/vuln/ghsa-qcx8-8xph-pfh5 GHSA-qcx8-8xph-pfh5 2026-10-02T09:45:20.039964+00:00

MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component sub_select.

 https://cve.radiocsirt.org/vuln/gsd-2022-32084 gsd-2022-32084 2026-10-02T09:45:20.039979+00:00 gsd-2022-32084 https://cve.radiocsirt.org/vuln/icsa-26-027-02 ICSA-26-027-02 — Festo Didactic SE MES PC 2026-10-02T09:45:20.039990+00:00

MES PCs shipped with Windows 10 come pre-installed with XAMPP. XAMPP is a bundle of third-party open-source applications including the Apache HTTP Server, the MariaDB database and more. From time to time, vulnerabilities in these applications are discovered. These are fixed in newer versions of XAMPP by updating the bundled applications.

MES PCs shipped with Windows 10 include a copy of XAMPP which contains around 140 such vulnerabilities listed in this advisory. They can be fixed by replacing XAMPP with Festo Didactic's Factory Control Panel application.

 https://cve.radiocsirt.org/vuln/opensuse-su-2024:12360-1 openSUSE-SU-2024:12360-1 — libmariadbd-devel-10.9.3-1.1 on GA media 2026-10-02T09:45:20.040088+00:00

libmariadbd-devel-10.9.3-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2023:5259 RHSA-2023:5259 — Red Hat Security Advisory: mariadb:10.3 security, bug fix, and enhancement update 2026-10-02T09:45:20.040116+00:00

mariadb: segmentation fault via the component sub_select mariadb: server crash in JOIN_CACHE::free or in copy_fields mariadb: compress_write() fails to release mutex on failure mariadb: NULL pointer dereference in spider_db_mbase::print_warnings() mariadb: node crashes with Transport endpoint is not connected mysqld got signal 6

 https://cve.radiocsirt.org/vuln/suse-ru-2023:3956-1 SUSE-RU-2023:3956-1 — Recommended update for mariadb104 2026-10-02T09:45:20.040140+00:00

Recommended update for mariadb104

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-32084 UBUNTU-CVE-2022-32084 2026-10-02T09:45:20.040275+00:00

Affected: Ubuntu:16.04:LTS: mariadb-10.0, Ubuntu:18.04:LTS: mariadb-10.1, Ubuntu:20.04:LTS: mariadb-10.3, Ubuntu:22.04:LTS: mariadb-10.6

MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component sub_select.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0641 WID-SEC-W-2022-0641 — MariaDB: Mehrere Schwachstellen ermöglichen Denial of Service 2026-10-02T09:45:20.040299+00:00

Ein Angreifer kann mehrere Schwachstellen in MariaDB ausnutzen, um einen Denial of Service Angriff durchzuführen.