SB2022031911 - openEuler update for mariadb

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2022031911

SB2022031911 - openEuler update for mariadb

Published: March 19, 2022

Security Bulletin ID SB2022031911
CSH Severity
Medium
Patch available
YES
Number of vulnerabilities 10
Exploitation vector Remote access
Highest impact Denial of service

Breakdown by Severity

Medium 40% Low 60%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 10 vulnerabilities.


1) Use-after-free (CVE-ID: CVE-2021-46669)

CWE-ID: CWE-416 - Use After Free

CVSSv4: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green


The vulnerability allows a remote attacker to perform a denial of service attack.

The vulnerability exists due to a use-after-free error in the convert_const_to_int() function when processing BIGINT data type. A remote attacker can trigger use-after-free error and perform a denial of service attack.


2) Input validation error (CVE-ID: CVE-2021-46661)

CWE-ID: CWE-20 - Improper input validation

CVSSv4: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/U:Green


The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to application crash in find_field_in_tables and find_order_in_list via an unused common table expression (CTE). A remote attacker can pass specially crafted input to the application and perform a denial of service (DoS) attack.


3) Integer overflow (CVE-ID: CVE-2021-46667)

CWE-ID: CWE-190 - Integer overflow

CVSSv4: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear


The vulnerability allows a local user to perform a denial of service attack.

The vulnerability exists due to integer overflow in the sql_lex.cc. A local user can pass specially crafted data to the application, trigger integer overflow and perform a denial of service attack.


4) Reachable Assertion (CVE-ID: CVE-2021-46666)

CWE-ID: CWE-617 - Reachable Assertion

CVSSv4: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear


The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to mishandling of a pushdown from a HAVING clause to a WHERE clause. A local user can perform a denial of service (DoS) attack.


5) Input validation error (CVE-ID: CVE-2021-46662)

CWE-ID: CWE-20 - Improper input validation

CVSSv4: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear


The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to set_var.cc application crash in certain uses of an UPDATE statement in conjunction with a nested subquery. A local user can pass specially crafted input to the application and perform a denial of service (DoS) attack.


6) Input validation error (CVE-ID: CVE-2021-46663)

CWE-ID: CWE-20 - Improper input validation

CVSSv4: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/U:Green


The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to ha_maria::extra application crash via certain SELECT statements. A remote attacker can pass specially crafted input to the application and perform a denial of service (DoS) attack.


7) Input validation error (CVE-ID: CVE-2021-46665)

CWE-ID: CWE-20 - Improper input validation

CVSSv4: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear


The vulnerability allows a remote user to perform a denial of service (DoS) attack.

The vulnerability exists due to incorrect used_tables expectations in the sql_parse.cc. A remote user can pass specially crafted input to the application and perform a denial of service (DoS) attack.


8) NULL pointer dereference (CVE-ID: CVE-2021-46664)

CWE-ID: CWE-476 - NULL Pointer Dereference

CVSSv4: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear


The vulnerability allows a remote user to perform a denial of service (DoS) attack.

The vulnerability exists due to a NULL pointer dereference error in the sub_select_postjoin_aggr() function. A remote user can pass specially crafted data to the application and perform a denial of service (DoS) attack.


9) Resource management error (CVE-ID: CVE-2021-46659)

CWE-ID: CWE-399 - Resource Management Errors

CVSSv4: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green


The vulnerability allows a remote user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper management of internal resources. The database does not recognize that SELECT_LEX::nest_level is local to each VIEW. A remote user execute a specially crafted statements and perform a denial of service (DoS) attack.


10) Resource exhaustion (CVE-ID: CVE-2021-46657)

CWE-ID: CWE-400 - Resource exhaustion

CVSSv4: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear


The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to application does not properly control consumption of internal resources when processing certain subquery uses of ORDER BY. A remote attacker can trigger resource exhaustion and perform a denial of service (DoS) attack.


Remediation

Install update from vendor's website.

References