MariaDB 10.1

Status EOLSupport 2015-10 – 2020-10Latest 10.1.48Vulnerabilities 146← All MariaDB versions
Critical 9.8
2016-09-20< 10.1.17

mysql: general_log can write to configuration files, leading to privilege escalation (CPU Oct 2016)

CVE
Critical 9.8
2017-05-23< 10.1.37

zlib: Big-endian out-of-bounds pointer

CVE
Critical 9.0
2021-05-27< 10.1.47

mariadb: Insufficient SST method name check leading to code injection in mysql-wsrep

CVE
High 8.8
2018-01-25< 10.1.30

mariadb: Replication in sql/event_data_objects.cc occurs before ACL checks

CVE
High 8.1
2016-07-21< 10.1.15

mysql: unspecified vulnerability in subcomponent: Server: Parser (CPU July 2016)

CVE
High 7.7
2017-04-24< 10.1.23

mysql: Server: DML unspecified vulnerability (CPU Apr 2017)

CVE
High 7.7
2017-04-24< 10.1.23

mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2017)

CVE
High 7.7
2018-04-19< 10.1.33

mysql: Server: Replication unspecified vulnerability (CPU Apr 2018)

CVE
High 7.5
2016-07-21< 10.1.9

mysql: unspecified vulnerability in subcomponent: Server: Option (CPU July 2016)

CVE
High 7.5
2017-02-12≤ 10.1.21

mysql: prepared statement handle use-after-free after disconnect

CVE
High 7.2
2016-01-21< 10.1.10

mysql: unspecified vulnerability in subcomponent: Client (CPU January 2016)

CVE
High 7.2
2015-10-21< 10.1.8

mysql: unspecified vulnerability related to Client programs (CPU October 2015)

CVE
High 7.2
2021-04-22< 10.1.42

mysql: Server: Parser unspecified vulnerability (CPU Apr 2021)

CVE
High 7.1
2018-01-18< 10.1.31

mysql: Server: Partition unspecified vulnerability (CPU Jan 2018)

CVE
High 7.1
2018-07-18< 10.1.35

mysql: InnoDB unspecified vulnerability (CPU Jul 2018)

CVE
High 7.0
2016-12-13< 10.1.18

mysql: race condition while setting stats during MyISAM table repair (CPU Oct 2016)

CVE
High 7.0
2016-12-13< 10.1.21

mysql: insecure error log file handling in mysqld_safe (CPU Oct 2016)

CVE
High 7.0
2020-12-24< 10.1.48

mariadb: Named pipe permission issue on Windows

CVE
Medium 6.8
2016-01-21< 10.1.10

mysql: unspecified vulnerability in subcomponent: Server: Options (CPU January 2016)

CVE
Medium 6.7
2017-01-27< 10.1.21

mysql: insecure error log file handling in mysqld_safe, incomplete CVE-2016-6664 fix (CPU Jan 2017)

CVE
Medium 6.6
2017-04-24< 10.1.19

mysql: Incorrect input validation allowing code execution via mysqldump

CVE
Medium 6.5
2016-10-25< 10.1.18

mysql: unspecified vulnerability in subcomponent: Server: Optimizer (CPU October 2016)

CVE
Medium 6.5
2016-10-25< 10.1.18

mysql: unspecified vulnerability in subcomponent: Server: DML (CPU October 2016)

CVE
Medium 6.5
2016-07-21< 10.1.15

mysql: unspecified vulnerability in subcomponent: Server: Types (CPU July 2016)

CVE
Medium 6.5
2016-10-25< 10.1.18

mysql: unspecified vulnerability in subcomponent: Server: GIS (CPU October 2016)

CVE
Medium 6.5
2017-04-24< 10.1.23

mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2017)

CVE
Medium 6.5
2017-01-27< 10.1.21

mysql: Server: InnoDB unspecified vulnerability (CPU Jan 2017)

CVE
Medium 6.5
2017-01-27< 10.1.21

mysql: Server: DML unspecified vulnerability (CPU Jan 2017)

CVE
Medium 6.5
2017-01-27< 10.1.21

mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2017)

CVE
Medium 6.5
2017-01-27< 10.1.21

mysql: Server: DDL unspecified vulnerability (CPU Jan 2017)

CVE
Medium 6.5
2017-10-19< 10.1.26

mysql: Client programs unspecified vulnerability (CPU Oct 2017)

CVE
Medium 6.5
2017-10-19< 10.1.26

mysql: Server: DDL unspecified vulnerability (CPU Oct 2017)

CVE
Medium 6.5
2017-10-19< 10.1.29

mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2017)

CVE
Medium 6.5
2018-04-19< 10.1.33

mysql: InnoDB unspecified vulnerability (CPU Apr 2018)

CVE
Medium 6.5
2018-01-18< 10.1.31

mysql: Server: DDL unspecified vulnerability (CPU Jan 2018)

CVE
Medium 6.5
2018-04-19< 10.1.33

mysql: Server: DDL unspecified vulnerability (CPU Apr 2018)

CVE
Medium 6.5
2018-04-19< 10.1.33

mysql: InnoDB unspecified vulnerability (CPU Apr 2018)

CVE
Medium 6.5
2018-01-18< 10.1.31

mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2018)

CVE
Medium 6.5
2018-01-18< 10.1.31

mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2018)

CVE
Medium 6.5
2018-01-18< 10.1.31

mysql: InnoDB unspecified vulnerability (CPU Jan 2018)

CVE
Medium 6.5
2018-04-19< 10.1.33

mysql: InnoDB unspecified vulnerability (CPU Apr 2018)

CVE
Medium 6.5
2018-01-18< 10.1.31

mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2018)

CVE
Medium 6.5
2018-10-17< 10.1.30

mysql: Server: Parser unspecified vulnerability (CPU Oct 2018)

CVE
Medium 6.5
2019-01-16< 10.1.38

mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2019)

CVE
Medium 6.5
2018-10-17< 10.1.37

mysql: InnoDB unspecified vulnerability (CPU Oct 2018)

CVE
Medium 6.5
2019-01-16< 10.1.33

mysql: Server: Parser unspecified vulnerability (CPU Jan 2019)

CVE
Medium 6.5
2018-10-17< 10.1.37

mysql: InnoDB unspecified vulnerability (CPU Oct 2018)

CVE
Medium 6.5
2018-10-17< 10.1.37

mysql: InnoDB unspecified vulnerability (CPU Oct 2018)

CVE
Medium 6.5
2019-07-23< 10.1.41

mysql: Server: XML unspecified vulnerability (CPU Jul 2019)

CVE
Medium 6.5
2019-07-23< 10.1.41

mysql: Server: Parser unspecified vulnerability (CPU Jul 2019)

CVE
Medium 6.5
2019-10-16< 10.1.42

mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2019)

CVE
Medium 6.5
2020-04-15< 10.1.42

mysql: Server: DML unspecified vulnerability (CPU Apr 2020)

CVE
Medium 6.5
2020-10-21< 10.1.48

mysql: Server: FTS unspecified vulnerability (CPU Oct 2020)

CVE
Medium 6.4
2019-01-16< 10.1.36

mysql: Server: Connection Handling unspecified vulnerability (CPU Jan 2019)

CVE
Medium 6.3
2017-01-27< 10.1.21

mysql: unrestricted mysqld_safe's ledir (CPU Jan 2017)

CVE
Medium 6.1
2016-04-21< 10.1.12

mysql: unspecified vulnerability in subcomponent: Server: DML (CPU April 2016)

CVE
Medium 5.9
2016-01-22< 10.1.9

wolfSSL: insufficient hardening of RSA-CRT implementation (Oracle MySQL CPU Jan 2016)

CVE
Medium 5.9
2016-01-27< 10.1.10

mysql: ssl-validate-cert incorrect hostname check

CVE
Medium 5.9
2018-04-19< 10.1.33

mysql: Client programs unspecified vulnerability (CPU Apr 2018)

CVE
Medium 5.9
2020-01-15< 10.1.44

mysql: C API unspecified vulnerability (CPU Jan 2020)

CVE
Medium 5.9
2021-01-20< 10.1.33

mysql: C API unspecified vulnerability (CPU Jan 2021)

CVE
Medium 5.6
2017-01-27< 10.1.21

mysql: unsafe chmod/chown use in init script (CPU Jan 2017)

CVE
Medium 5.5
2016-04-21< 10.1.12

mysql: unspecified vulnerability in subcomponent: Server: DML (CPU April 2016)

CVE
Medium 5.5
2016-04-21< 10.1.14

mysql: unspecified vulnerability in subcomponent: Server: Security: Privileges (CPU April 2016)

CVE
Medium 5.5
2016-04-21< 10.1.12

mysql: unspecified vulnerability in subcomponent: Server: DDL (CPU April 2016)

CVE
Medium 5.5
2016-04-21< 10.1.14

mysql: unspecified vulnerability in subcomponent: Server: PS (CPU April 2016)

CVE
Medium 5.5
2016-04-21< 10.1.14

mysql: unspecified vulnerability in subcomponent: Server: FTS (CPU April 2016)

CVE
Medium 5.5
2016-04-21< 10.1.10

mysql: unspecified vulnerability in subcomponent: Server: Optimizer (CPU April 2016)

CVE
Medium 5.5
2016-04-21< 10.1.12

mysql: unspecified vulnerability in subcomponent: Server: Replication (CPU April 2016)

CVE
Medium 5.5
2016-04-21< 10.1.12

mysql: unspecified vulnerability in subcomponent: Server: PS (CPU April 2016)

CVE
Medium 5.5
2016-12-13< 10.1.19

yaSSL: AES key leak via cache-bank timing side channel attack

CVE
Medium 5.5
2018-04-19< 10.1.33

mysql: InnoDB unspecified vulnerability (CPU Apr 2018)

CVE
Medium 5.3
2016-07-21< 10.1.15

mysql: unspecified vulnerability in subcomponent: Server: DML (CPU July 2016)

CVE
Medium 5.3
2017-08-08< 10.1.26

mysql: Client programs unspecified vulnerability (CPU Jul 2017)

CVE
Medium 5.3
2018-10-17< 10.1.37

mysql: Init script calling kill with root privileges using pid from pidfile owned by mysql user (CPU Oct 2018)

CVE
Medium 5.3
2020-07-15< 10.1.33

mysql: C API unspecified vulnerability (CPU Jul 2020)

CVE
Medium 5.3
2020-04-15< 10.1.45

mysql: C API unspecified vulnerability (CPU Apr 2020)

CVE
Medium 5.1
2016-04-21< 10.1.12

mysql: unspecified vulnerability in subcomponent: Server: MyISAM (CPU April 2016)

CVE
Medium 5.1
2019-07-23< 10.1.41

mysql: Server: Security: Privileges unspecified vulnerability (CPU Jul 2019)

CVE
Medium 5.0
2018-07-18< 10.1.33

mysql: Client programs unspecified vulnerability (CPU Jul 2018)

CVE
Medium 4.9
2016-07-21< 10.1.14

mysql: unspecified vulnerability in subcomponent: Server: InnoDB (CPU July 2016)

CVE
Medium 4.9
2016-10-25< 10.1.18

mysql: unspecified vulnerability in subcomponent: Server: Federated (CPU October 2016)

CVE
Medium 4.9
2016-07-21< 10.1.15

mysql: unspecified vulnerability in subcomponent: Server: RBR (CPU July 2016)

CVE
Medium 4.9
2017-04-24< 10.1.23

mysql: Server: DML unspecified vulnerability (CPU Apr 2017)

CVE
Medium 4.9
2017-08-08< 10.1.26

mysql: Server: DML unspecified vulnerability (CPU Jul 2017)

CVE
Medium 4.9
2018-04-19< 10.1.33

mysql: InnoDB unspecified vulnerability (CPU Apr 2018)

CVE
Medium 4.9
2018-04-19< 10.1.33

mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2018)

CVE
Medium 4.9
2018-10-17< 10.1.37

mysql: Server: Storage Engines unspecified vulnerability (CPU Oct 2018)

CVE
Medium 4.9
2019-01-16< 10.1.38

mysql: Server: DDL unspecified vulnerability (CPU Jan 2019)

CVE
Medium 4.9
2018-07-18< 10.1.35

mysql: Server: Security: Privileges unspecified vulnerability (CPU Jul 2018)

CVE
Medium 4.9
2019-04-23< 10.1.39

mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2019)

CVE
Medium 4.9
2019-07-23< 10.1.41

mysql: Server: Pluggable Auth unspecified vulnerability (CPU Jul 2019)

CVE
Medium 4.9
2020-04-15< 10.1.45

mysql: Server: Stored Procedure unspecified vulnerability (CPU Apr 2020)

CVE
Medium 4.9
2020-04-15< 10.1.45

mysql: InnoDB unspecified vulnerability (CPU Apr 2020)

CVE
Medium 4.9
2020-10-21< 10.1.48

mysql: Server: Locking unspecified vulnerability (CPU Oct 2020)

CVE
Medium 4.7
2016-04-21< 10.1.10

mysql: unspecified vulnerability in subcomponent: Server: Federated (CPU April 2016)

CVE
Medium 4.7
2016-04-21< 10.1.14

mysql: unspecified vulnerability in subcomponent: Server: InnoDB (CPU April 2016)

CVE
Medium 4.7
2017-01-27< 10.1.22

mysql: Server: MyISAM unspecified vulnerability (CPU Jan 2017)

CVE
Medium 4.6
2015-10-21< 10.1.8

mysql: unspecified vulnerability related to Server:DML (CPU October 2015)

CVE
Medium 4.4
2016-10-25< 10.1.19

mysql: unspecified vulnerability in subcomponent: Server: Security: Encryption (CPU October 2016)

CVE
Medium 4.4
2017-01-27< 10.1.21

mysql: Server: Charsets unspecified vulnerability (CPU Jan 2017)

CVE
Medium 4.4
2017-10-19< 10.1.26

mysql: Server: InnoDB unspecified vulnerability (CPU Oct 2017)

CVE
Medium 4.4
2018-04-19< 10.1.33

mysql: Server: Locking unspecified vulnerability (CPU Apr 2018)

CVE
Medium 4.4
2019-04-23< 10.1.39

mysql: Server: Replication unspecified vulnerability (CPU Apr 2019)

CVE
Medium 4.4
2021-01-20< 10.1.46

mysql: InnoDB unspecified vulnerability (CPU Jan 2021)

CVE
Medium 4.3
2016-10-25< 10.1.38

mysql: unspecified vulnerability in subcomponent: Server: Types (CPU October 2016)

CVE
Medium 4.3
2017-04-24< 10.1.23

mysql: Server: DDL unspecified vulnerability (CPU Apr 2017)

CVE
Medium 4.3
2017-08-08< 10.1.19

mysql: Client mysqldump unspecified vulnerability (CPU Jul 2017)

CVE
Medium 4.3
2018-04-19< 10.1.33

mysql: Server: DDL unspecified vulnerability (CPU Apr 2018)

CVE
Medium 4.3
2018-07-18< 10.1.35

mysql: MyISAM unspecified vulnerability (CPU Jul 2018)

CVE
Medium 4.1
2016-04-21< 10.1.12

mysql: unspecified vulnerability in subcomponent: Server: InnoDB (CPU April 2016)

CVE
Medium 4.1
2017-10-19< 10.1.29

mysql: Server: Replication unspecified vulnerability (CPU Oct 2017)

CVE
Medium 4.0
2016-01-21< 10.1.10

mysql: unspecified vulnerability in subcomponent: Server: DML (CPU January 2016)

CVE
Medium 4.0
2016-01-21< 10.1.10

mysql: unspecified vulnerability in subcomponent: Server: Optimizer (CPU January 2016)

CVE
Medium 4.0
2015-10-21< 10.1.8

mysql: unspecified vulnerability related to Server:Security:Privileges (CPU October 2015)

CVE
Medium 4.0
2015-10-21< 10.1.8

mysql: unspecified vulnerability related to Server:DML (CPU October 2015)

CVE
Medium 4.0
2015-10-21< 10.1.8

mysql: unspecified vulnerability related to Server:InnoDB (CPU October 2015)

CVE
Medium 4.0
2015-10-21< 10.1.8

mysql: unspecified vulnerability related to Server:Types (CPU October 2015)

CVE
Medium 4.0
2015-10-21< 10.1.8

mysql: unspecified vulnerability related to Server:Parser (CPU October 2015)

CVE
Medium 4.0
2015-10-21< 10.1.8

mysql: unspecified vulnerability related to Server:InnoDB (CPU October 2015)

CVE
Medium 4.0
2016-01-21< 10.1.10

mysql: unspecified vulnerability in subcomponent: Server: Optimizer (CPU January 2016)

CVE
Medium 4.0
2015-10-21< 10.1.8

mysql: unspecified vulnerability related to Server:DDL (CPU October 2015)

CVE
Medium 4.0
2015-10-21< 10.1.8

mysql: unspecified vulnerability related to Server:Partition (CPU October 2015)

CVE
Medium 4.0
2017-01-27< 10.1.21

mysql: Server: Error Handling unspecified vulnerability (CPU Jan 2017)

CVE
Medium 4.0
2017-01-27< 10.1.21

mysql: Logging unspecified vulnerability (CPU Jan 2017)

CVE
Low 3.7
2016-07-21< 10.1.14

mysql: unspecified vulnerability in subcomponent: Server: Connection (CPU July 2016)

CVE
Low 3.7
2016-07-21< 10.1.14

mysql: unspecified vulnerability in subcomponent: Server: Security: Encryption (CPU July 2016)

CVE
Low 3.7
2020-04-15< 10.1.41

mysql: C API unspecified vulnerability (CPU Apr 2020)

CVE
Low 3.7
2021-01-20< 10.1.41

mysql: C API unspecified vulnerability (CPU Jan 2021)

CVE
Low 3.5
2016-01-21< 10.1.10

mysql: unspecified vulnerability in subcomponent: Server: UDF (CPU January 2016)

CVE
Low 3.5
2015-10-21< 10.1.8

mysql: unspecified vulnerability related to Server:Query Cache (CPU October 2015)

CVE
Low 3.5
2016-01-21< 10.1.10

mysql: unspecified vulnerability in subcomponent: Server: DML (CPU January 2016)

CVE
Low 3.5
2015-10-21< 10.1.8

mysql: unspecified vulnerability related to Server:Security:Privileges (CPU October 2015)

CVE
Low 3.5
2015-10-21< 10.1.8

mysql: unspecified vulnerability related to Server:InnoDB (CPU October 2015)

CVE
Low 3.5
2015-10-21< 10.1.8

mysql: unspecified vulnerability related to Server:InnoDB (CPU October 2015)

CVE
Low 3.5
2015-10-21< 10.1.8

mysql: unspecified vulnerability related to Server:DML (CPU October 2015)

CVE
Low 3.5
2016-01-21< 10.1.10

mysql: unspecified vulnerability in subcomponent: Server: InnoDB (CPU January 2016)

CVE
Low 3.5
2016-01-21< 10.1.9

mysql: unspecified vulnerability in subcomponent: Server: InnoDB (CPU January 2016)

CVE
Low 3.5
2016-01-21< 10.1.10

mysql: unspecified vulnerability in subcomponent: Server: Security: Encryption (CPU January 2016)

CVE
Low 3.3
2016-04-21< 10.1.14

mysql: unspecified vulnerability in subcomponent: Server: DML (CPU April 2016)

CVE
Low 3.3
2018-07-18< 10.1.35

mysql: Server: Options unspecified vulnerability (CPU Jul 2018)

CVE
Low 3.1
2017-08-08< 10.1.26

mysql: Server: DDL unspecified vulnerability (CPU Jul 2017)

CVE
Low 3.1
2018-07-18< 10.1.33

mysql: use of SSL/TLS not enforced in libmysqld (Return of BACKRONYM)

CVE
Low 2.8
2015-10-21< 10.1.8

mysql: unspecified vulnerability related to Server:SP (CPU October 2015)

CVE
Low 1.7
2016-01-21< 10.1.10

mysql: unspecified vulnerability in subcomponent: Server: Security: Privileges (CPU January 2016)

CVE
Low 1.7
2015-10-21< 10.1.8

mysql: unspecified vulnerability related to Server:Partition (CPU October 2015)

CVE