PT-2009-6213 · Mariadb+1 · Mariadb104+1

Sergei Golubchik · Publicado 2009-11-30 · Atualizado 2024-06-15 · CVE-2009-4030

Positive Technologies (AI Summary)

CVSS v2.0

4.4

Média

Vetor base

AV:L/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions mariadb104 (affected versions not specified)

Description The issue concerns security fixes in the mariadb104 package, including the implementation of version 10.4 of MariaDB, which allows for multiple authentication plugins per user account and stores user accounts, passwords, and global privileges in the mysql.global priv table. It also includes support for User Password Expiry, faster privilege checks, and fixes for issues such as MariaDB ignoring the 'open files limit' parameter. Additionally, updates to mysql-systemd-helper and support for lz4 compression in 'INNODB' are included.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Link Following

Enumeração de Fraquezas

CWE-59

Identificadores relacionados

CVE-2009-4030

DSA-1997-1

OPENSUSE-SU-2024:10153-1

RHSA-2010:0109

RHSA-2010:0110

RHSA-2010_0109

RHSA-2010_0110

SUSE-RU-2023:3956-1

SUSE-RU-2023:4991-1

Produtos afetados

Red Hat

Mariadb104

Referências · 457

• https://bugzilla.suse.com/1198603 · Nota
• https://bugzilla.suse.com/525325 · Nota
• https://suse.com/security/cve/CVE-2022-24050 · Nota
• https://bugzilla.suse.com/1127027 · Nota
• https://bugzilla.suse.com/1112404 · Nota
• https://suse.com/security/cve/CVE-2017-3653 · Nota
• https://bugzilla.suse.com/1183770 · Nota
• https://suse.com/security/cve/CVE-2021-46657 · Nota
• https://suse.com/security/cve/CVE-2021-2154 · Nota
• https://suse.com/security/cve/CVE-2018-2766 · Nota
• https://suse.com/security/cve/CVE-2022-32089 · Nota
• https://suse.com/security/cve/CVE-2015-4861 · Nota
• https://suse.com/security/cve/CVE-2018-3284 · Nota
• https://suse.com/security/cve/CVE-2019-2614 · Nota
• https://bugzilla.suse.com/1185870 · Nota