mariadb (SUSE:Linux Enterprise Real Time 15 SP2) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Linux Enterprise Real Time 15 SP2 package mariadb, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (12)

• CVE-2022-24048 — CVSS 7.8 (high): MariaDB CONNECT Storage Engine Stack-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to…
• CVE-2022-24050 — CVSS 7.8 (high): MariaDB CONNECT Storage Engine Use-After-Free Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate…
• CVE-2022-24051 — CVSS 7.8 (high): MariaDB CONNECT Storage Engine Format String Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate…
• CVE-2022-24052 — CVSS 7.8 (high): MariaDB CONNECT Storage Engine Heap-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to…
• CVE-2021-46663 — CVSS 5.5 (medium): MariaDB through 10.5.13 allows a ha_maria::extra application crash via certain SELECT statements.
• CVE-2021-46664 — CVSS 5.5 (medium): MariaDB through 10.5.9 allows an application crash in sub_select_postjoin_aggr for a NULL value of aggr.
• CVE-2021-46657 — CVSS 5.5 (medium): get_sort_by_table in MariaDB before 10.6.2 allows an application crash via certain subquery uses of ORDER BY.
• CVE-2021-46668 — CVSS 5.5 (medium): MariaDB through 10.5.9 allows an application crash via certain long SELECT DISTINCT statements that improperly interact with storage-engine…
• CVE-2021-46665 — CVSS 5.5 (medium): MariaDB through 10.5.9 allows a sql_parse.cc application crash because of incorrect used_tables expectations.
• CVE-2021-46658 — CVSS 5.5 (medium): save_window_function_values in MariaDB before 10.6.3 allows an application crash because of incorrect handling of with_window_func=true for…
• CVE-2021-46659 — CVSS 5.5 (medium): MariaDB before 10.7.2 allows an application crash because it does not recognize that SELECT_LEX::nest_level is local to each VIEW.
• CVE-2021-46661 — CVSS 5.5 (medium): MariaDB through 10.5.9 allows an application crash in find_field_in_tables and find_order_in_list via an unused common table expression…