6.5 MEDIUM
- CVSS version: 3.1
- Attack vector (AV): NETWORK
- Attack complexity (AC): LOW
- Privileges required (PR): LOW
- User interaction (UI): NONE
- Scope (S): UNCHANGED
- Confidentiality impact (C): NONE
- Integrity impact (I): NONE
- Availability impact (A): HIGH
by @LeSuisse Activity log
- Created automatic suggestion
- @LeSuisse removed package libmysqlclient
- @LeSuisse removed package mariadb-galera
- @LeSuisse removed package mariadb-embedded
- @LeSuisse removed package libmysqlclient_3_1
- @LeSuisse removed package libmysqlclient_3_2
- @LeSuisse removed package libmysqlclient_3_3
- @LeSuisse removed package mariadb-connector-c
- @LeSuisse removed package ocamlPackages.mariadb
- @LeSuisse removed package mariadb-connector-java
- @LeSuisse removed package mariadb-connector-c_3_1
- @LeSuisse removed package mariadb-connector-c_3_2
- @LeSuisse removed package mariadb-connector-c_3_3
- @LeSuisse removed package perlPackages.DBDMariaDB
- @LeSuisse removed package unixODBCDrivers.mariadb
- @LeSuisse removed package unixodbcDrivers.mariadb
- @LeSuisse removed package perl5Packages.DBDMariaDB
- @LeSuisse removed package python312Packages.mariadb
- @LeSuisse removed package python313Packages.mariadb
- @LeSuisse removed package python314Packages.mariadb
- @LeSuisse removed package perl538Packages.DBDMariaDB
- @LeSuisse removed package perl540Packages.DBDMariaDB
- @LeSuisse removed package ocamlPackages_latest.mariadb
- @LeSuisse removed package ocamlPackages.caqti-driver-mariadb
- @LeSuisse removed package ocamlPackages_latest.caqti-driver-mariadb
- @LeSuisse accepted
- @LeSuisse published on GitHub
An issue was discovered in MariaDB Server before 11.4.10, 11.5.x …
An issue was discovered in MariaDB Server before 11.4.10, 11.5.x through 11.8.x before 11.8.6, and 12.x before 12.2.2. If the caching_sha2_password authentication plugin is installed, and some user accounts are configured to use it, a large packet can crash the server because sha256_crypt_r uses alloca.
References
Affected products
- <12.2.2
- <11.4.10
- <11.8.6
Matching in nixpkgs
pkgs.mariadb
Enhanced, drop-in replacement for MySQL
pkgs.mariadb_106
Enhanced, drop-in replacement for MySQL
pkgs.mariadb_114
Enhanced, drop-in replacement for MySQL
pkgs.mariadb_118
Enhanced, drop-in replacement for MySQL
Ignored packages (24)
pkgs.libmysqlclient
Client library that can be used to connect to MySQL or MariaDB
pkgs.mariadb-galera
Galera 3 wsrep provider library
pkgs.libmysqlclient_3_1
Client library that can be used to connect to MySQL or MariaDB
pkgs.libmysqlclient_3_2
Client library that can be used to connect to MySQL or MariaDB
pkgs.libmysqlclient_3_3
Client library that can be used to connect to MySQL or MariaDB
pkgs.mariadb-connector-c
Client library that can be used to connect to MySQL or MariaDB
pkgs.ocamlPackages.mariadb
OCaml bindings for MariaDB
pkgs.mariadb-connector-java
MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases
pkgs.mariadb-connector-c_3_1
Client library that can be used to connect to MySQL or MariaDB
pkgs.mariadb-connector-c_3_2
Client library that can be used to connect to MySQL or MariaDB
pkgs.mariadb-connector-c_3_3
Client library that can be used to connect to MySQL or MariaDB
pkgs.perlPackages.DBDMariaDB
MariaDB and MySQL driver for the Perl5 Database Interface (DBI)
pkgs.unixODBCDrivers.mariadb
MariaDB ODBC database driver
pkgs.unixodbcDrivers.mariadb
MariaDB ODBC database driver
pkgs.perl5Packages.DBDMariaDB
MariaDB and MySQL driver for the Perl5 Database Interface (DBI)
pkgs.python312Packages.mariadb
MariaDB Connector/Python
pkgs.python313Packages.mariadb
MariaDB Connector/Python
pkgs.python314Packages.mariadb
MariaDB Connector/Python
pkgs.perl538Packages.DBDMariaDB
MariaDB and MySQL driver for the Perl5 Database Interface (DBI)
pkgs.perl540Packages.DBDMariaDB
MariaDB and MySQL driver for the Perl5 Database Interface (DBI)
pkgs.ocamlPackages_latest.mariadb
OCaml bindings for MariaDB
pkgs.ocamlPackages.caqti-driver-mariadb
MariaDB driver for Caqti using C bindings
pkgs.ocamlPackages_latest.caqti-driver-mariadb
MariaDB driver for Caqti using C bindings
Package maintainers
-
@Conni2461 Simon Hauser <simon-hauser@outlook.com>
-
@dasJ Janne Heß <janne@hess.ooo>
-
@thoughtpolice Austin Seipp <aseipp@pobox.com>
-
@helsinki-Jo Joachim Ernst <joachim.ernst@helsinki-systems.de>