MariaDB 10.3

Status EOLSupport 2018-05 – 2023-05Latest 10.3.39Vulnerabilities 105← All MariaDB versions
Critical 9.8
2017-05-23< 10.3.11

zlib: Big-endian out-of-bounds pointer

CVE
Critical 9.0
2021-05-27< 10.3.25

mariadb: Insufficient SST method name check leading to code injection in mysql-wsrep

CVE
High 7.8
2022-02-18< 10.3.33

mariadb: lack of validating the existence of an object prior to performing operations on the object

CVE
High 7.8
2022-02-18< 10.3.33

mariadb: lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer

CVE
High 7.8
2022-02-18< 10.3.33

mariadb: lack of proper validation of a user-supplied string before using it as a format specifier

CVE
High 7.8
2022-02-18< 10.3.33

mariadb: CONNECT storage engine heap-based buffer overflow

CVE
High 7.5
2022-02-01< 10.3.35

mariadb: MariaDB through 10.5.9 allows attackers to trigger a convert_const_to_int use-after-free when the BIGINT data type is used

CVE
High 7.5
2022-04-12< 10.3.35

mariadb: server crashes in query_arena::set_query_arena upon SELECT from view

CVE
High 7.5
2022-04-14< 10.3.35

mariadb: assertion failure in sql/item_func.cc

CVE
High 7.5
2022-04-14< 10.3.35

mariadb: assertion failure in VDec::VDec at /sql/sql_type.cc

CVE
High 7.5
2022-04-12< 10.3.35

mariadb: use-after-poison in my_strcasecmp_8bit() of ctype-simple.c

CVE
High 7.5
2022-04-12< 10.3.35

mariadb: crash via component Item_subselect::init_expr_cache_tracker

CVE
High 7.5
2022-04-12< 10.3.32

mariadb: crash in Used_tables_and_const_cache::used_tables_and_const_cache_join

CVE
High 7.5
2022-04-12< 10.3.35

mariadb: server crash in create_tmp_table::finalize

CVE
High 7.5
2022-03-25< 10.3.36

zlib: A flaw found in zlib when compressing (not decompressing) certain inputs

CVE
High 7.5
2022-04-14< 10.3.35

mariadb: use-after-poison in Binary_string::free_buffer

CVE
High 7.5
2022-04-14< 10.3.35

mariadb: assertion failure in compare_order_elements

CVE
High 7.5
2022-04-14< 10.3.35

mariadb: assertion failure in sql/item_cmpfunc.cc

CVE
High 7.5
2022-04-14< 10.3.35

mariadb: crash in multi-update and implicit grouping

CVE
High 7.5
2022-04-12< 10.3.35

mariadb: use-after-poison when complex conversion is involved in blob

CVE
High 7.5
2022-04-12< 10.3.35

mariadb: server crash at Field::set_default via specially crafted SQL statements

CVE
High 7.5
2022-04-12< 10.3.35

mariadb: assertion failures in decimal_bin_size

CVE
High 7.5
2022-04-12< 10.3.35

mariadb: server crash at my_decimal::operator=

CVE
High 7.5
2022-04-12< 10.3.35

mariadb: assertion failure in Item_args::walk_arg

CVE
High 7.5
2022-04-12< 10.3.35

mariadb: server crash in component arg_comparator::compare_real_fixed

CVE
High 7.5
2022-07-01< 10.3.36

mariadb: segmentation fault via the component sub_select

CVE
High 7.5
2022-07-01< 10.3.36

mariadb: server crash in JOIN_CACHE::free or in copy_fields

CVE
High 7.5
2022-07-01< 10.3.35

mariadb: server crash in Item_args::walk_args

CVE
High 7.5
2022-07-01< 10.3.35

mariadb: segmentation fault in Exec_time_tracker::get_loops/Filesort_tracker::report_use/filesort

CVE
High 7.5
2022-07-01< 10.3.35

mariadb: server crash in Item_func_in::cleanup/Item::cleanup_processor

CVE
High 7.5
2022-07-01< 10.3.35

mariadb: server crash at Item_subselect::init_expr_cache_tracker

CVE
High 7.5
2023-09-26< 10.3.36

Mariadb: node crashes with transport endpoint is not connected mysqld got signal 6

CVE
High 7.5
2022-03-15< 10.3.33

Infinite loop in BN_mod_sqrt() reachable when parsing certificates

CVE
High 7.2
2021-03-19< 10.3.28

mariadb: writable system variables allows a database user with SUPER privilege to execute arbitrary code as the system mysql user

CVE
High 7.2
2021-04-22< 10.3.19

mysql: Server: Parser unspecified vulnerability (CPU Apr 2021)

CVE
High 7.1
2018-07-18< 10.3.9

mysql: InnoDB unspecified vulnerability (CPU Jul 2018)

CVE
High 7.0
2020-12-24< 10.3.26

mariadb: Named pipe permission issue on Windows

CVE
Medium 6.5
2018-07-18< 10.3.9

mysql: InnoDB unspecified vulnerability (CPU Jul 2018)

CVE
Medium 6.5
2018-10-17< 10.3.11

mysql: InnoDB unspecified vulnerability (CPU Oct 2018)

CVE
Medium 6.5
2018-10-17< 10.3.11

mysql: InnoDB unspecified vulnerability (CPU Oct 2018)

CVE
Medium 6.5
2018-10-17< 10.3.11

mysql: InnoDB unspecified vulnerability (CPU Oct 2018)

CVE
Medium 6.5
2019-07-23< 10.3.17

mysql: Server: XML unspecified vulnerability (CPU Jul 2019)

CVE
Medium 6.5
2019-07-23< 10.3.17

mysql: Server: Parser unspecified vulnerability (CPU Jul 2019)

CVE
Medium 6.5
2019-10-16< 10.3.19

mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2019)

CVE
Medium 6.5
2020-04-15< 10.3.19

mysql: Server: DML unspecified vulnerability (CPU Apr 2020)

CVE
Medium 6.5
2020-10-21< 10.3.26

mysql: Server: FTS unspecified vulnerability (CPU Oct 2020)

CVE
Medium 6.5
2023-01-20< 10.3.39

mariadb: NULL pointer dereference in spider_db_mbase::print_warnings()

CVE
Medium 6.4
2019-01-16< 10.3.10

mysql: Server: Connection Handling unspecified vulnerability (CPU Jan 2019)

CVE
Medium 5.9
2020-01-15< 10.3.22

mysql: C API unspecified vulnerability (CPU Jan 2020)

CVE
Medium 5.9
2021-07-20< 10.3.31

mysql: InnoDB unspecified vulnerability (CPU Jul 2021)

CVE
Medium 5.5
2018-10-17< 10.3.11

mysql: InnoDB unspecified vulnerability (CPU Oct 2018)

CVE
Medium 5.5
2019-07-23< 10.3.17

mysql: InnoDB unspecified vulnerability (CPU Jul 2019)

CVE
Medium 5.5
2020-04-15< 10.3.23

mysql: InnoDB unspecified vulnerability (CPU Apr 2020)

CVE
Medium 5.5
2022-01-29< 10.3.33

mariadb: Crash executing query with VIEW, aggregate and subquery

CVE
Medium 5.5
2022-02-01< 10.3.32

mariadb: Integer overflow in sql_lex.cc integer leading to crash

CVE
Medium 5.5
2022-01-29< 10.3.30

mariadb: Crash in get_sort_by_table() in subquery with ORDER BY having outer ref

CVE
Medium 5.5
2022-02-01< 10.3.34

mariadb: MariaDB allows an application crash in find_field_in_tables and find_order_in_list via an unused common table expression (CTE)

CVE
Medium 5.5
2022-02-01< 10.3.32

mariadb: Crash in set_var.cc via certain UPDATE queries with nested subqueries

CVE
Medium 5.5
2022-02-01< 10.3.30

mariadb: Crash caused by mishandling of a pushdown from a HAVING clause to a WHERE clause

CVE
Medium 5.5
2022-02-01< 10.3.34

mariadb: MariaDB through 10.5.9 allows a sql_parse.cc application crash because of incorrect used_tables expectations

CVE
Medium 5.5
2022-01-29< 10.3.31

mariadb: save_window_function_values triggers an abort during IN subquery

CVE
Medium 5.5
2022-02-01< 10.3.34

mariadb: MariaDB through 10.5.13 allows a ha_maria::extra application crash via certain SELECT statements

CVE
Medium 5.5
2021-10-20< 10.3.32

mysql: InnoDB unspecified vulnerability (CPU Oct 2021)

CVE
Medium 5.5
2022-02-01< 10.3.34

mariadb: MariaDB through 10.5.9 allows an application crash in sub_select_postjoin_aggr for a NULL value of aggr

CVE
Medium 5.5
2022-02-01< 10.3.34

mariadb: MariaDB through 10.5.9 allows an application crash via certain long SELECT DISTINCT statements

CVE
Medium 5.5
2022-05-25< 10.3.32

mariadb: DoS due to improper locking due to unreleased lock in plugin/server_audit/server_audit.c

CVE
Medium 5.5
2022-08-27< 10.3.36

mariadb: compress_write() fails to release mutex on failure

CVE
Medium 5.5
2022-05-25< 10.3.33

mariadb: improper locking due to the unreleased lock in extra/mariabackup/ds_compress.cc

CVE
Medium 5.5
2022-05-25< 10.3.33

mariadb: improper locking due to the unreleased lock in extra/mariabackup/ds_compress.cc

CVE
Medium 5.3
2018-10-17< 10.3.11

mysql: Init script calling kill with root privileges using pid from pidfile owned by mysql user (CPU Oct 2018)

CVE
Medium 5.3
2020-04-15< 10.3.23

mysql: C API unspecified vulnerability (CPU Apr 2020)

CVE
Medium 5.3
2022-05-25< 10.3.32

mariadb: improper locking due to unreleased lock in the ds_xbstream.cc

CVE
Medium 5.1
2019-07-23< 10.3.17

mysql: Server: Security: Privileges unspecified vulnerability (CPU Jul 2019)

CVE
Medium 4.9
2018-10-17< 10.3.11

mysql: Server: Storage Engines unspecified vulnerability (CPU Oct 2018)

CVE
Medium 4.9
2018-10-17< 10.3.11

mysql: InnoDB unspecified vulnerability (CPU Oct 2018)

CVE
Medium 4.9
2019-01-16< 10.3.13

mysql: Server: DDL unspecified vulnerability (CPU Jan 2019)

CVE
Medium 4.9
2018-10-17< 10.3.11

mysql: InnoDB unspecified vulnerability (CPU Oct 2018)

CVE
Medium 4.9
2019-01-16< 10.3.13

mysql: InnoDB unspecified vulnerability (CPU Jan 2019)

CVE
Medium 4.9
2018-10-17< 10.3.11

mysql: InnoDB unspecified vulnerability (CPU Oct 2018)

CVE
Medium 4.9
2018-10-17< 10.3.11

mysql: InnoDB unspecified vulnerability (CPU Oct 2018)

CVE
Medium 4.9
2018-07-18< 10.3.9

mysql: Server: Security: Privileges unspecified vulnerability (CPU Jul 2018)

CVE
Medium 4.9
2019-04-23< 10.3.15

mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2019)

CVE
Medium 4.9
2019-07-23< 10.3.17

mysql: Server: Pluggable Auth unspecified vulnerability (CPU Jul 2019)

CVE
Medium 4.9
2019-04-23< 10.3.15

mysql: InnoDB unspecified vulnerability (CPU Apr 2019)

CVE
Medium 4.9
2020-04-15< 10.3.23

mysql: Server: Stored Procedure unspecified vulnerability (CPU Apr 2020)

CVE
Medium 4.9
2020-04-15< 10.3.23

mysql: InnoDB unspecified vulnerability (CPU Apr 2020)

CVE
Medium 4.9
2020-10-21< 10.3.26

mysql: Server: FTS unspecified vulnerability (CPU Oct 2020)

CVE
Medium 4.9
2020-10-21< 10.3.26

mysql: InnoDB unspecified vulnerability (CPU Oct 2020)

CVE
Medium 4.9
2020-10-21< 10.3.26

mysql: Server: Locking unspecified vulnerability (CPU Oct 2020)

CVE
Medium 4.9
2021-04-22< 10.3.26

mysql: InnoDB unspecified vulnerability (CPU Apr 2021)

CVE
Medium 4.9
2021-04-22< 10.3.29

mysql: Server: DML unspecified vulnerability (CPU Apr 2021)

CVE
Medium 4.9
2021-04-22< 10.3.29

mysql: Server: DML unspecified vulnerability (CPU Apr 2021)

CVE
Medium 4.9
2022-04-19< 10.3.35

mysql: Server: FTS unspecified vulnerability (CPU Apr 2022)

CVE
Medium 4.4
2018-10-17< 10.3.11

mysql: InnoDB unspecified vulnerability (CPU Oct 2018)

CVE
Medium 4.4
2019-04-23< 10.3.15

mysql: Server: Replication unspecified vulnerability (CPU Apr 2019)

CVE
Medium 4.4
2019-10-16< 10.3.19

mysql: InnoDB unspecified vulnerability (CPU Oct 2019)

CVE
Medium 4.4
2021-01-20< 10.3.24

mysql: InnoDB unspecified vulnerability (CPU Jan 2021)

CVE
Medium 4.4
2021-07-20< 10.3.31

mysql: InnoDB unspecified vulnerability (CPU Jul 2021)

CVE
Medium 4.4
2022-04-19< 10.3.29

mysql: InnoDB unspecified vulnerability (CPU Apr 2022)

CVE
Medium 4.4
2022-10-18< 10.3.33

mysql: C API unspecified vulnerability (CPU Oct 2022)

CVE
Medium 4.3
2018-07-18< 10.3.9

mysql: MyISAM unspecified vulnerability (CPU Jul 2018)

CVE
Low 3.7
2020-04-15< 10.3.17

mysql: C API unspecified vulnerability (CPU Apr 2020)

CVE
Low 3.7
2021-01-20< 10.3.17

mysql: C API unspecified vulnerability (CPU Jan 2021)

CVE
Low 3.3
2018-07-18< 10.3.9

mysql: Server: Options unspecified vulnerability (CPU Jul 2018)

CVE
N/A
0000-00-00< 10.3.35

CVE