MariaDB 10.2

Status EOLSupport 2017-05 – 2022-05Latest 10.2.44Vulnerabilities 136← All MariaDB versions
Critical 9.8
2017-05-23< 10.2.19

zlib: Big-endian out-of-bounds pointer

CVE
Critical 9.0
2021-05-27< 10.2.34

mariadb: Insufficient SST method name check leading to code injection in mysql-wsrep

CVE
High 8.8
2018-01-25< 10.2.10

mariadb: Replication in sql/event_data_objects.cc occurs before ACL checks

CVE
High 7.8
2022-02-18< 10.2.42

mariadb: lack of validating the existence of an object prior to performing operations on the object

CVE
High 7.8
2022-02-18< 10.2.42

mariadb: lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer

CVE
High 7.8
2022-02-18< 10.2.42

mariadb: lack of proper validation of a user-supplied string before using it as a format specifier

CVE
High 7.8
2022-02-18< 10.2.42

mariadb: CONNECT storage engine heap-based buffer overflow

CVE
High 7.7
2017-04-24< 10.2.6

mysql: Server: DML unspecified vulnerability (CPU Apr 2017)

CVE
High 7.7
2017-04-24< 10.2.6

mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2017)

CVE
High 7.7
2018-04-19< 10.2.15

mysql: Server: Replication unspecified vulnerability (CPU Apr 2018)

CVE
High 7.5
2017-02-12≤ 10.2.3

mysql: prepared statement handle use-after-free after disconnect

CVE
High 7.5
2022-02-01< 10.2.44

mariadb: MariaDB through 10.5.9 allows attackers to trigger a convert_const_to_int use-after-free when the BIGINT data type is used

CVE
High 7.5
2022-04-12< 10.2.44

mariadb: server crashes in query_arena::set_query_arena upon SELECT from view

CVE
High 7.5
2022-04-12< 10.2.44

mariadb: use-after-poison in my_strcasecmp_8bit() of ctype-simple.c

CVE
High 7.5
2022-04-12< 10.2.44

mariadb: crash via component Item_subselect::init_expr_cache_tracker

CVE
High 7.5
2022-04-12< 10.2.44

mariadb: server crash in create_tmp_table::finalize

CVE
High 7.5
2022-04-14< 10.2.44

mariadb: assertion failure in compare_order_elements

CVE
High 7.5
2022-04-12< 10.2.44

mariadb: use-after-poison when complex conversion is involved in blob

CVE
High 7.5
2022-04-12< 10.2.44

mariadb: server crash at Field::set_default via specially crafted SQL statements

CVE
High 7.5
2022-04-12< 10.2.44

mariadb: assertion failures in decimal_bin_size

CVE
High 7.5
2022-04-12< 10.2.44

mariadb: server crash at my_decimal::operator=

CVE
High 7.5
2022-07-01< 10.2.44

mariadb: segmentation fault in Exec_time_tracker::get_loops/Filesort_tracker::report_use/filesort

CVE
High 7.5
2022-07-01< 10.2.44

mariadb: server crash in Item_func_in::cleanup/Item::cleanup_processor

CVE
High 7.5
2022-07-01< 10.2.44

mariadb: server crash at Item_subselect::init_expr_cache_tracker

CVE
High 7.5
2022-03-15< 10.2.42

Infinite loop in BN_mod_sqrt() reachable when parsing certificates

CVE
High 7.2
2021-03-19< 10.2.37

mariadb: writable system variables allows a database user with SUPER privilege to execute arbitrary code as the system mysql user

CVE
High 7.2
2021-04-22< 10.2.28

mysql: Server: Parser unspecified vulnerability (CPU Apr 2021)

CVE
High 7.1
2018-01-18< 10.2.13

mysql: Server: Partition unspecified vulnerability (CPU Jan 2018)

CVE
High 7.1
2018-07-18< 10.2.17

mysql: InnoDB unspecified vulnerability (CPU Jul 2018)

CVE
High 7.0
2020-12-24< 10.2.35

mariadb: Named pipe permission issue on Windows

CVE
Medium 6.5
2017-04-24< 10.2.6

mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2017)

CVE
Medium 6.5
2017-01-27< 10.2.8

mysql: Server: InnoDB unspecified vulnerability (CPU Jan 2017)

CVE
Medium 6.5
2017-10-19< 10.2.8

mysql: Client programs unspecified vulnerability (CPU Oct 2017)

CVE
Medium 6.5
2017-10-19< 10.2.8

mysql: Server: DDL unspecified vulnerability (CPU Oct 2017)

CVE
Medium 6.5
2017-10-19< 10.2.10

mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2017)

CVE
Medium 6.5
2018-04-19< 10.2.15

mysql: InnoDB unspecified vulnerability (CPU Apr 2018)

CVE
Medium 6.5
2018-01-18< 10.2.13

mysql: Server: DDL unspecified vulnerability (CPU Jan 2018)

CVE
Medium 6.5
2018-04-19< 10.2.15

mysql: Server: DDL unspecified vulnerability (CPU Apr 2018)

CVE
Medium 6.5
2018-04-19< 10.2.15

mysql: InnoDB unspecified vulnerability (CPU Apr 2018)

CVE
Medium 6.5
2018-01-18< 10.2.13

mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2018)

CVE
Medium 6.5
2018-01-18< 10.2.13

mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2018)

CVE
Medium 6.5
2018-01-18< 10.2.13

mysql: InnoDB unspecified vulnerability (CPU Jan 2018)

CVE
Medium 6.5
2018-04-19< 10.2.15

mysql: InnoDB unspecified vulnerability (CPU Apr 2018)

CVE
Medium 6.5
2018-01-18< 10.2.13

mysql: Server: Optimizer unspecified vulnerability (CPU Jan 2018)

CVE
Medium 6.5
2018-07-18< 10.2.17

mysql: InnoDB unspecified vulnerability (CPU Jul 2018)

CVE
Medium 6.5
2018-10-17< 10.2.12

mysql: Server: Parser unspecified vulnerability (CPU Oct 2018)

CVE
Medium 6.5
2018-10-17< 10.2.19

mysql: InnoDB unspecified vulnerability (CPU Oct 2018)

CVE
Medium 6.5
2019-01-16< 10.2.15

mysql: Server: Parser unspecified vulnerability (CPU Jan 2019)

CVE
Medium 6.5
2018-10-17< 10.2.19

mysql: InnoDB unspecified vulnerability (CPU Oct 2018)

CVE
Medium 6.5
2018-10-17< 10.2.19

mysql: InnoDB unspecified vulnerability (CPU Oct 2018)

CVE
Medium 6.5
2019-07-23< 10.2.26

mysql: Server: XML unspecified vulnerability (CPU Jul 2019)

CVE
Medium 6.5
2019-07-23< 10.2.26

mysql: Server: Parser unspecified vulnerability (CPU Jul 2019)

CVE
Medium 6.5
2019-10-16< 10.2.28

mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2019)

CVE
Medium 6.5
2020-04-15< 10.2.28

mysql: Server: DML unspecified vulnerability (CPU Apr 2020)

CVE
Medium 6.5
2020-10-21< 10.2.35

mysql: Server: FTS unspecified vulnerability (CPU Oct 2020)

CVE
Medium 6.4
2019-01-16< 10.2.18

mysql: Server: Connection Handling unspecified vulnerability (CPU Jan 2019)

CVE
Medium 5.9
2018-04-19< 10.2.15

mysql: Client programs unspecified vulnerability (CPU Apr 2018)

CVE
Medium 5.9
2020-01-15< 10.2.31

mysql: C API unspecified vulnerability (CPU Jan 2020)

CVE
Medium 5.9
2021-01-20< 10.2.15

mysql: C API unspecified vulnerability (CPU Jan 2021)

CVE
Medium 5.9
2021-07-20< 10.2.40

mysql: InnoDB unspecified vulnerability (CPU Jul 2021)

CVE
Medium 5.5
2018-04-19< 10.2.15

mysql: InnoDB unspecified vulnerability (CPU Apr 2018)

CVE
Medium 5.5
2018-04-19< 10.2.15

mysql: InnoDB unspecified vulnerability (CPU Apr 2018)

CVE
Medium 5.5
2018-10-17< 10.2.19

mysql: InnoDB unspecified vulnerability (CPU Oct 2018)

CVE
Medium 5.5
2019-07-23< 10.2.26

mysql: InnoDB unspecified vulnerability (CPU Jul 2019)

CVE
Medium 5.5
2020-04-15< 10.2.32

mysql: InnoDB unspecified vulnerability (CPU Apr 2020)

CVE
Medium 5.5
2022-01-29< 10.2.42

mariadb: Crash executing query with VIEW, aggregate and subquery

CVE
Medium 5.5
2022-02-01< 10.2.41

mariadb: Integer overflow in sql_lex.cc integer leading to crash

CVE
Medium 5.5
2022-01-29< 10.2.39

mariadb: Crash in get_sort_by_table() in subquery with ORDER BY having outer ref

CVE
Medium 5.5
2022-02-01< 10.2.43

mariadb: MariaDB allows an application crash in find_field_in_tables and find_order_in_list via an unused common table expression (CTE)

CVE
Medium 5.5
2022-02-01< 10.2.39

mariadb: Crash caused by mishandling of a pushdown from a HAVING clause to a WHERE clause

CVE
Medium 5.5
2022-02-01< 10.2.43

mariadb: MariaDB through 10.5.9 allows a sql_parse.cc application crash because of incorrect used_tables expectations

CVE
Medium 5.5
2022-01-29< 10.2.40

mariadb: save_window_function_values triggers an abort during IN subquery

CVE
Medium 5.5
2022-02-01< 10.2.43

mariadb: MariaDB through 10.5.13 allows a ha_maria::extra application crash via certain SELECT statements

CVE
Medium 5.5
2021-10-20< 10.2.41

mysql: InnoDB unspecified vulnerability (CPU Oct 2021)

CVE
Medium 5.5
2022-02-01< 10.2.43

mariadb: MariaDB through 10.5.9 allows an application crash in sub_select_postjoin_aggr for a NULL value of aggr

CVE
Medium 5.5
2022-02-01< 10.2.43

mariadb: MariaDB through 10.5.9 allows an application crash via certain long SELECT DISTINCT statements

CVE
Medium 5.5
2022-05-25< 10.2.41

mariadb: DoS due to improper locking due to unreleased lock in plugin/server_audit/server_audit.c

CVE
Medium 5.5
2022-05-25< 10.2.42

mariadb: improper locking due to the unreleased lock in extra/mariabackup/ds_compress.cc

CVE
Medium 5.5
2022-05-25< 10.2.42

mariadb: improper locking due to the unreleased lock in extra/mariabackup/ds_compress.cc

CVE
Medium 5.3
2017-08-08< 10.2.8

mysql: Client programs unspecified vulnerability (CPU Jul 2017)

CVE
Medium 5.3
2018-10-17< 10.2.19

mysql: Init script calling kill with root privileges using pid from pidfile owned by mysql user (CPU Oct 2018)

CVE
Medium 5.3
2020-07-15< 10.2.15

mysql: C API unspecified vulnerability (CPU Jul 2020)

CVE
Medium 5.3
2020-04-15< 10.2.32

mysql: C API unspecified vulnerability (CPU Apr 2020)

CVE
Medium 5.3
2022-05-25< 10.2.41

mariadb: improper locking due to unreleased lock in the ds_xbstream.cc

CVE
Medium 5.1
2019-07-23< 10.2.26

mysql: Server: Security: Privileges unspecified vulnerability (CPU Jul 2019)

CVE
Medium 5.0
2018-07-18< 10.2.15

mysql: Client programs unspecified vulnerability (CPU Jul 2018)

CVE
Medium 4.9
2017-04-24< 10.2.6

mysql: Server: DML unspecified vulnerability (CPU Apr 2017)

CVE
Medium 4.9
2017-10-19< 10.2.8

mysql: Server: InnoDB unspecified vulnerability (CPU Oct 2017)

CVE
Medium 4.9
2017-08-08< 10.2.8

mysql: Server: DML unspecified vulnerability (CPU Jul 2017)

CVE
Medium 4.9
2018-04-19< 10.2.15

mysql: InnoDB unspecified vulnerability (CPU Apr 2018)

CVE
Medium 4.9
2018-04-19< 10.2.15

mysql: InnoDB unspecified vulnerability (CPU Apr 2018)

CVE
Medium 4.9
2018-04-19< 10.2.15

mysql: InnoDB unspecified vulnerability (CPU Apr 2018)

CVE
Medium 4.9
2018-04-19< 10.2.15

mysql: InnoDB unspecified vulnerability (CPU Apr 2018)

CVE
Medium 4.9
2018-04-19< 10.2.15

mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2018)

CVE
Medium 4.9
2018-10-17< 10.2.19

mysql: Server: Storage Engines unspecified vulnerability (CPU Oct 2018)

CVE
Medium 4.9
2018-10-17< 10.2.19

mysql: InnoDB unspecified vulnerability (CPU Oct 2018)

CVE
Medium 4.9
2019-01-16< 10.2.22

mysql: Server: DDL unspecified vulnerability (CPU Jan 2019)

CVE
Medium 4.9
2018-10-17< 10.2.19

mysql: InnoDB unspecified vulnerability (CPU Oct 2018)

CVE
Medium 4.9
2019-01-16< 10.2.22

mysql: InnoDB unspecified vulnerability (CPU Jan 2019)

CVE
Medium 4.9
2018-10-17< 10.2.19

mysql: InnoDB unspecified vulnerability (CPU Oct 2018)

CVE
Medium 4.9
2018-10-17< 10.2.19

mysql: InnoDB unspecified vulnerability (CPU Oct 2018)

CVE
Medium 4.9
2018-07-18< 10.2.17

mysql: Server: Security: Privileges unspecified vulnerability (CPU Jul 2018)

CVE
Medium 4.9
2019-04-23< 10.2.24

mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2019)

CVE
Medium 4.9
2019-07-23< 10.2.26

mysql: Server: Pluggable Auth unspecified vulnerability (CPU Jul 2019)

CVE
Medium 4.9
2019-04-23< 10.2.24

mysql: InnoDB unspecified vulnerability (CPU Apr 2019)

CVE
Medium 4.9
2020-04-15< 10.2.32

mysql: Server: Stored Procedure unspecified vulnerability (CPU Apr 2020)

CVE
Medium 4.9
2020-04-15< 10.2.32

mysql: InnoDB unspecified vulnerability (CPU Apr 2020)

CVE
Medium 4.9
2020-10-21< 10.2.35

mysql: Server: FTS unspecified vulnerability (CPU Oct 2020)

CVE
Medium 4.9
2020-10-21< 10.2.35

mysql: InnoDB unspecified vulnerability (CPU Oct 2020)

CVE
Medium 4.9
2020-10-21< 10.2.35

mysql: Server: Locking unspecified vulnerability (CPU Oct 2020)

CVE
Medium 4.9
2021-04-22< 10.2.38

mysql: InnoDB unspecified vulnerability (CPU Apr 2021)

CVE
Medium 4.9
2021-04-22< 10.2.35

mysql: InnoDB unspecified vulnerability (CPU Apr 2021)

CVE
Medium 4.9
2021-04-22< 10.2.38

mysql: Server: DML unspecified vulnerability (CPU Apr 2021)

CVE
Medium 4.9
2021-04-22< 10.2.38

mysql: Server: DML unspecified vulnerability (CPU Apr 2021)

CVE
Medium 4.9
2022-04-19< 10.2.44

mysql: Server: FTS unspecified vulnerability (CPU Apr 2022)

CVE
Medium 4.7
2017-01-27< 10.2.5

mysql: Server: MyISAM unspecified vulnerability (CPU Jan 2017)

CVE
Medium 4.4
2017-10-19< 10.2.8

mysql: Server: InnoDB unspecified vulnerability (CPU Oct 2017)

CVE
Medium 4.4
2018-04-19< 10.2.15

mysql: Server: Locking unspecified vulnerability (CPU Apr 2018)

CVE
Medium 4.4
2018-10-17< 10.2.19

mysql: InnoDB unspecified vulnerability (CPU Oct 2018)

CVE
Medium 4.4
2019-04-23< 10.2.24

mysql: Server: Replication unspecified vulnerability (CPU Apr 2019)

CVE
Medium 4.4
2019-10-16< 10.2.28

mysql: InnoDB unspecified vulnerability (CPU Oct 2019)

CVE
Medium 4.4
2021-01-20< 10.2.33

mysql: InnoDB unspecified vulnerability (CPU Jan 2021)

CVE
Medium 4.4
2021-04-22< 10.2.18

mysql: InnoDB unspecified vulnerability (CPU Apr 2021)

CVE
Medium 4.4
2021-07-20< 10.2.40

mysql: InnoDB unspecified vulnerability (CPU Jul 2021)

CVE
Medium 4.4
2022-04-19< 10.2.38

mysql: InnoDB unspecified vulnerability (CPU Apr 2022)

CVE
Medium 4.4
2022-10-18< 10.2.42

mysql: C API unspecified vulnerability (CPU Oct 2022)

CVE
Medium 4.3
2017-04-24< 10.2.6

mysql: Server: DDL unspecified vulnerability (CPU Apr 2017)

CVE
Medium 4.3
2018-04-19< 10.2.15

mysql: Server: DDL unspecified vulnerability (CPU Apr 2018)

CVE
Medium 4.3
2018-07-18< 10.2.17

mysql: MyISAM unspecified vulnerability (CPU Jul 2018)

CVE
Medium 4.1
2017-10-19< 10.2.10

mysql: Server: Replication unspecified vulnerability (CPU Oct 2017)

CVE
Low 3.8
2017-10-19< 10.2.8

mysql: Server: InnoDB unspecified vulnerability (CPU Oct 2017)

CVE
Low 3.7
2020-04-15< 10.2.26

mysql: C API unspecified vulnerability (CPU Apr 2020)

CVE
Low 3.7
2021-01-20< 10.2.26

mysql: C API unspecified vulnerability (CPU Jan 2021)

CVE
Low 3.3
2018-07-18< 10.2.17

mysql: Server: Options unspecified vulnerability (CPU Jul 2018)

CVE
Low 3.1
2017-08-08< 10.2.8

mysql: Server: DDL unspecified vulnerability (CPU Jul 2017)

CVE
Low 3.1
2018-07-18< 10.2.15

mysql: use of SSL/TLS not enforced in libmysqld (Return of BACKRONYM)

CVE