mariadb:10.5/galera vulnerabilities

Known vulnerabilities in the mariadb:10.5/galera package. This does not include vulnerabilities belonging to this package’s dependencies.

Vulnerability	Vulnerable Version
M CVE-2024-21096	<0:26.4.20-1.module_el8.10.0+3947+ac422511
M CVE-2023-22084	<0:26.4.20-1.module_el8.10.0+3947+ac422511
H CVE-2023-5157	<0:26.4.14-1.module_el8.8.0+3620+5d452900
H CVE-2022-32089	<0:26.4.14-1.module_el8.8.0+3620+5d452900
H Reachable Assertion	<0:26.4.14-1.module_el8.8.0+3620+5d452900
H Use After Free	<0:26.4.14-1.module_el8.8.0+3620+5d452900
H NULL Pointer Dereference	<0:26.4.14-1.module_el8.8.0+3620+5d452900
H Improper Locking	<0:26.4.14-1.module_el8.8.0+3620+5d452900
H Use After Free	<0:26.4.14-1.module_el8.8.0+3620+5d452900
H CVE-2022-32084	<0:26.4.14-1.module_el8.8.0+3620+5d452900
M SQL Injection	<0:26.4.9-4.module_el8.5.0+2637+d11efe18
M Use After Free	<0:26.4.11-1.module_el8.6.0+3072+3c630e87
M Use After Free	<0:26.4.11-1.module_el8.6.0+3072+3c630e87
M CVE-2022-27451	<0:26.4.11-1.module_el8.6.0+3072+3c630e87
M CVE-2022-27446	<0:26.4.11-1.module_el8.6.0+3072+3c630e87
M CVE-2022-27444	<0:26.4.11-1.module_el8.6.0+3072+3c630e87
M Reachable Assertion	<0:26.4.11-1.module_el8.6.0+3072+3c630e87
M CVE-2022-21451	<0:26.4.9-4.module_el8.5.0+2637+d11efe18
M Integer Overflow or Wraparound	<0:26.4.9-4.module_el8.5.0+2637+d11efe18
M Reachable Assertion	<0:26.4.9-4.module_el8.5.0+2637+d11efe18
M CVE-2021-46662	<0:26.4.9-4.module_el8.5.0+2637+d11efe18
M CVE-2021-46658	<0:26.4.9-4.module_el8.5.0+2637+d11efe18
M CVE-2021-46657	<0:26.4.9-4.module_el8.5.0+2637+d11efe18
M CVE-2021-35604	<0:26.4.9-4.module_el8.5.0+2637+d11efe18
M CVE-2021-2389	<0:26.4.9-4.module_el8.5.0+2637+d11efe18
M CVE-2021-2372	<0:26.4.9-4.module_el8.5.0+2637+d11efe18
M CVE-2021-2166	<0:26.4.9-4.module_el8.5.0+2637+d11efe18
M CVE-2021-2154	<0:26.4.9-4.module_el8.5.0+2637+d11efe18
M CVE-2022-32088	<0:25.3.35-1.module_el8.6.0+3265+230ed96b
M CVE-2022-32087	<0:25.3.35-1.module_el8.6.0+3265+230ed96b
M CVE-2022-32085	<0:25.3.35-1.module_el8.6.0+3265+230ed96b
M CVE-2022-32083	<0:25.3.35-1.module_el8.6.0+3265+230ed96b
M Improper Locking	<0:25.3.35-1.module_el8.6.0+3265+230ed96b
M Improper Locking	<0:25.3.35-1.module_el8.6.0+3265+230ed96b
M Use After Free	<0:25.3.35-1.module_el8.6.0+3265+230ed96b
M Use After Free	<0:25.3.35-1.module_el8.6.0+3265+230ed96b
M CVE-2022-27452	<0:25.3.35-1.module_el8.6.0+3265+230ed96b
M CVE-2022-27449	<0:25.3.35-1.module_el8.6.0+3265+230ed96b
M Reachable Assertion	<0:25.3.35-1.module_el8.6.0+3265+230ed96b
M Use After Free	<0:25.3.35-1.module_el8.6.0+3265+230ed96b
M CVE-2022-27445	<0:25.3.35-1.module_el8.6.0+3265+230ed96b
M Buffer Overflow	<0:25.3.35-1.module_el8.6.0+3265+230ed96b
M SQL Injection	<0:25.3.35-1.module_el8.6.0+3265+230ed96b
M SQL Injection	<0:25.3.35-1.module_el8.6.0+3265+230ed96b
M Use After Free	<0:25.3.35-1.module_el8.6.0+3265+230ed96b
M SQL Injection	<0:25.3.35-1.module_el8.6.0+3265+230ed96b
M SQL Injection	<0:25.3.35-1.module_el8.6.0+3265+230ed96b
M SQL Injection	<0:25.3.35-1.module_el8.6.0+3265+230ed96b
M SQL Injection	<0:25.3.35-1.module_el8.6.0+3265+230ed96b
M Use After Free	<0:25.3.35-1.module_el8.6.0+3265+230ed96b
M Use After Free	<0:25.3.35-1.module_el8.6.0+3265+230ed96b
M Heap-based Buffer Overflow	<0:25.3.35-1.module_el8.6.0+3265+230ed96b
M Use of Externally-Controlled Format String	<0:25.3.35-1.module_el8.6.0+3265+230ed96b
M Use After Free	<0:25.3.35-1.module_el8.6.0+3265+230ed96b
M Stack-based Buffer Overflow	<0:25.3.35-1.module_el8.6.0+3265+230ed96b
M CVE-2022-21427	<0:25.3.35-1.module_el8.6.0+3265+230ed96b
M Use After Free	<0:25.3.35-1.module_el8.6.0+3265+230ed96b
M Resource Exhaustion	<0:25.3.35-1.module_el8.6.0+3265+230ed96b
M CVE-2021-46665	<0:25.3.35-1.module_el8.6.0+3265+230ed96b
M NULL Pointer Dereference	<0:25.3.35-1.module_el8.6.0+3265+230ed96b
M CVE-2021-46663	<0:25.3.35-1.module_el8.6.0+3265+230ed96b
M CVE-2021-46661	<0:25.3.35-1.module_el8.6.0+3265+230ed96b
M CVE-2021-46659	<0:25.3.35-1.module_el8.6.0+3265+230ed96b

Vulnerability

Vulnerable Version

CVE-2024-21096

<0:26.4.20-1.module_el8.10.0+3947+ac422511

CVE-2023-22084

<0:26.4.20-1.module_el8.10.0+3947+ac422511

CVE-2023-5157

<0:26.4.14-1.module_el8.8.0+3620+5d452900

CVE-2022-32089

<0:26.4.14-1.module_el8.8.0+3620+5d452900

Reachable Assertion

<0:26.4.14-1.module_el8.8.0+3620+5d452900

Use After Free

<0:26.4.14-1.module_el8.8.0+3620+5d452900

NULL Pointer Dereference

<0:26.4.14-1.module_el8.8.0+3620+5d452900

Improper Locking

<0:26.4.14-1.module_el8.8.0+3620+5d452900

Use After Free

<0:26.4.14-1.module_el8.8.0+3620+5d452900

CVE-2022-32084

<0:26.4.14-1.module_el8.8.0+3620+5d452900

SQL Injection

<0:26.4.9-4.module_el8.5.0+2637+d11efe18

Use After Free

<0:26.4.11-1.module_el8.6.0+3072+3c630e87

Use After Free

<0:26.4.11-1.module_el8.6.0+3072+3c630e87

CVE-2022-27451

<0:26.4.11-1.module_el8.6.0+3072+3c630e87

CVE-2022-27446

<0:26.4.11-1.module_el8.6.0+3072+3c630e87

CVE-2022-27444

<0:26.4.11-1.module_el8.6.0+3072+3c630e87

Reachable Assertion

<0:26.4.11-1.module_el8.6.0+3072+3c630e87

CVE-2022-21451

<0:26.4.9-4.module_el8.5.0+2637+d11efe18

Integer Overflow or Wraparound

<0:26.4.9-4.module_el8.5.0+2637+d11efe18

Reachable Assertion

<0:26.4.9-4.module_el8.5.0+2637+d11efe18

CVE-2021-46662

<0:26.4.9-4.module_el8.5.0+2637+d11efe18

CVE-2021-46658

<0:26.4.9-4.module_el8.5.0+2637+d11efe18

CVE-2021-46657

<0:26.4.9-4.module_el8.5.0+2637+d11efe18

CVE-2021-35604

<0:26.4.9-4.module_el8.5.0+2637+d11efe18

CVE-2021-2389

<0:26.4.9-4.module_el8.5.0+2637+d11efe18

CVE-2021-2372

<0:26.4.9-4.module_el8.5.0+2637+d11efe18

CVE-2021-2166

<0:26.4.9-4.module_el8.5.0+2637+d11efe18

CVE-2021-2154

<0:26.4.9-4.module_el8.5.0+2637+d11efe18

CVE-2022-32088