822759 – <dev-db/mariadb-{10.2.41,10.3.32,10.4.22,10.5.13}: server compromise

Bug 822759 - <dev-db/mariadb-{10.2.41,10.3.32,10.4.22,10.5.13}: server compromise

Summary: <dev-db/mariadb-{10.2.41,10.3.32,10.4.22,10.5.13}: server compromise

Status:	IN_PROGRESS

Alias:	None

Product:	Gentoo Security
Classification:	Unclassified
Component:	Vulnerabilities (show other bugs)
Hardware:	All Linux

Importance:	Normal minor (vote)
Assignee:	Gentoo Security

URL:
Whiteboard:	B3 [glsa]
Keywords:

Depends on:	829392
Blocks:	822756
	Show dependency tree

Reported:	2021-11-09 23:18 UTC by John Helmert III
Modified:	2024-03-24 07:58 UTC (History)
CC List:	2 users (show)

See Also:	CVE-2022-27376, CVE-2022-27377, CVE-2022-27378, CVE-2022-27379, CVE-2022-27380, CVE-2022-27381, CVE-2022-27382, CVE-2022-27383, CVE-2022-27384, CVE-2022-27385, CVE-2022-27386, CVE-2022-27444, CVE-2022-27445, CVE-2022-27446, CVE-2022-27447, CVE-2022-27448, CVE-2022-27449, CVE-2022-27451, CVE-2022-27452, CVE-2022-27455, CVE-2022-27456, CVE-2022-27457, CVE-2022-27458, CVE-2022-32083, CVE-2022-32085, CVE-2022-32086, CVE-2022-32089, CVE-2022-32091
Package list:
Runtime testing required:	---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description John Helmert III archtester

2021-11-09 23:18:14 UTC

CVE-2021-35604:

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 5.7.35 and prior and 8.0.26 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.1 Base Score 5.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H). 

Fixed in MariaDB 10.2.41, 10.3.32, 10.4.22, 10.5.13. Please bump.

Comment 1 Tomáš Mózes 2021-12-10 10:15:04 UTC

In tree, we should stabilize.

Comment 2 John Helmert III archtester

2021-12-10 16:56:57 UTC

We should also tag security bugs when fixing them ;)

Maintainers: please stabilize.