10.3.24

DATE	CVE	VULNERABILITY TITLE	RISK
2022-05-25	CVE-2022-31622	Improper Locking vulnerability in Mariadb MariaDB Server before 10.7 is vulnerable to Denial of Service. local low complexity mariadb CWE-667	5.5
2022-05-25	CVE-2022-31623	Improper Locking vulnerability in Mariadb MariaDB Server before 10.7 is vulnerable to Denial of Service. local low complexity mariadb CWE-667	5.5
2022-05-25	CVE-2022-31624	Improper Locking vulnerability in Mariadb MariaDB Server before 10.7 is vulnerable to Denial of Service. local low complexity mariadb CWE-667	5.5
2022-04-19	CVE-2022-21427	Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: FTS). network low complexity oracle netapp mariadb debian	4.9
2022-04-19	CVE-2022-21451	Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). network high complexity oracle netapp mariadb	2.1
2022-04-14	CVE-2022-27445	MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/sql_window.cc. network low complexity mariadb debian	7.5
2022-04-14	CVE-2022-27447	Use After Free vulnerability in multiple products MariaDB Server v10.9 and below was discovered to contain a use-after-free via the component Binary_string::free_buffer() at /sql/sql_string.h. network low complexity mariadb debian CWE-416	7.5
2022-04-14	CVE-2022-27448	Reachable Assertion vulnerability in multiple products There is an Assertion failure in MariaDB Server v10.9 and below via 'node->pcur->rel_pos == BTR_PCUR_ON' at /row/row0mysql.cc. network low complexity mariadb debian CWE-617	7.5
2022-04-14	CVE-2022-27449	MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/item_func.cc:148. network low complexity mariadb debian	7.5
2022-04-14	CVE-2022-27452	MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/item_cmpfunc.cc. network low complexity mariadb debian	7.5