Known vulnerabilities in mariadb (Red Hat package)

Vendor: Red Hat Inc.
Software: mariadb (Red Hat package)
Software CPE: cpe:2.3:o:red_hat:mariadb_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 71
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting mariadb (Red Hat package) mariadb (Red Hat package) is affected by 71 known vulnerabilities: 2 high, 29 medium, 40 low Critical High Medium Low

Vulnerabilities (71)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU120623 - Insecure Automated Optimizations
CVE-2023-52970		 CWE-1038 Low
No
No
 10.5.29-2.el9_6 29.12.2025 SB2025122915
SB2025122918
SB2025122926
and 12 more
#VU120622 - Insecure Automated Optimizations
CVE-2023-52969		 CWE-1038 Low
No
No
 10.5.29-2.el9_6 29.12.2025 SB2025122915
SB2025122918
SB2025122920
and 16 more
#VU118851 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-13699		 CWE-22 High
No
No
 5.5.68-1.el7_9.1, 10.5.22-1.el9_0.1, 10.5.22-2.el9_2, 10.5.29-3.el9_6, 10.5.29-3.el9_7 01.12.2025 SB2025120126
SB2025121762
SB2025121943
and 31 more
#VU107533 - Improper input validation
CVE-2025-30722		 CWE-20 Medium
No
No
 10.5.29-2.el9_6 16.04.2025 SB20250416139
SB20250416141
SB2025042536
and 18 more
#VU107534 - Improper input validation
CVE-2025-30693		 CWE-20 Medium
No
No
 10.5.29-2.el9_6 16.04.2025 SB20250416139
SB20250416141
SB2025042536
and 18 more
#VU103188 - Improper input validation
CVE-2025-21490		 CWE-20 Medium
No
No
 10.5.29-2.el9_6 21.01.2025 SB2025012217
SB2025013052
SB2025020602
and 21 more
#VU88696 - Improper input validation
CVE-2024-21096		 CWE-20 Low
No
No
 10.5.27-1.el9_5 17.04.2024 SB2024041799
SB2024051083
SB2024051084
and 40 more
#VU82154 - Improper input validation
CVE-2023-22084		 CWE-20 Medium
No
No
 10.5.27-1.el9_5 17.10.2023 SB20231017100
SB2023110151
SB2023111466
and 31 more
#VU81995 - Resource exhaustion
CVE-2023-5157		 CWE-400 Medium
No
No
 10.5.22-1.el9_0, 10.5.22-1.el9_2 13.10.2023 SB2023101315
SB2023101320
SB2023101609
and 8 more
#VU77142 - NULL Pointer Dereference
CVE-2022-47015		 CWE-476 Medium
No
No
 10.5.22-1.el9_2 11.06.2023 SB2023061103
SB2023061107
SB2023061108
and 19 more
#VU67656 - Resource Management Errors
CVE-2022-38791		 CWE-399 Low
No
No
 10.5.22-1.el9_2 26.09.2022 SB2022092649
SB2022092659
SB2023030643
and 27 more
#VU66552 - Reachable Assertion
CVE-2022-32082		 CWE-617 Medium
No
No
 10.5.22-1.el9_2 16.08.2022 SB2022081648
SB2022081650
SB2022090743
and 27 more
#VU66024 - Memory corruption
CVE-2022-32084		 CWE-119 Low
No
No
 10.5.22-1.el9_2 03.08.2022 SB2022080403
SB2022080424
SB2022081650
and 35 more
#VU65822 - Memory corruption
CVE-2022-32089		 CWE-119 Low
No
No
 10.5.22-1.el9_2 27.07.2022 SB2022081650
SB2022090743
SB2022090922
and 27 more
#VU65821 - Memory corruption
CVE-2022-32091		 CWE-119 Low
No
No
 10.5.22-1.el9_2 27.07.2022 SB2022072739
SB2022081650
SB2022090743
and 32 more
#VU65754 - Memory corruption
CVE-2022-32081		 CWE-119 Medium
No
No
 10.5.22-1.el9_2 25.07.2022 SB2022081650
SB2022090743
SB2022090922
and 27 more
#VU63719 - Improper input validation
CVE-2021-46665		 CWE-20 Low
No
No
 10.5.16-2.el9_0 26.05.2022 SB2022022815
SB2022072731
SB2022080150
and 28 more
#VU63672 - Improper input validation
CVE-2021-46661		 CWE-20 Medium
No
No
 10.5.16-2.el9_0 25.05.2022 SB2022022815
SB2022072731
SB2022080150
and 28 more
#VU63671 - Improper input validation
CVE-2021-46663		 CWE-20 Medium
No
No
 10.5.16-2.el9_0 25.05.2022 SB2022022815
SB2022072731
SB2022080150
and 28 more
#VU60557 - Resource exhaustion
CVE-2021-46668		 CWE-400 Medium
No
No
 10.5.16-2.el9_0 12.02.2022 SB2022022815
SB2022072731
SB2022080150
and 28 more


Showing elements 1 - 20 out of 71