CVE-2022-42920

Apache Commons BCEL prior to 6.6.0 allows producing arbitrary bytecode via out-of-bounds writing

Apache Commons BCEL has a number of APIs that would normally only allow changing specific class characteristics. However, due to an out-of-bounds writing issue, these APIs can be used to produce arbitrary bytecode. This could be abused in applications that pass attacker-controllable data to those APIs, giving the attacker more control over the resulting bytecode than otherwise expected. Update to Apache Commons BCEL 6.6.0.

CVSS 3.1 · 9.8 Critical EPSS 3.5% KEV · Not listed

Vendors

Apache Fedoraproject Redhat

Products

Commons Bcel Fedora Amq Streams and 7 more

CVE-2022-39410

mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2022)

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.30 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

CVSS 3.1 · 6.5 Medium EPSS 1.5% KEV · Not listed

Vendors

Netapp Oracle Redhat

Products

Oncommand Insight Oncommand Workflow Automation Mysql and 2 more

CVE-2022-39408

mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2022)

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.30 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

CVSS 3.1 · 6.5 Medium EPSS 1.5% KEV · Not listed

Vendors

Netapp Oracle Redhat

Products

Oncommand Insight Oncommand Workflow Automation Mysql and 2 more

CVE-2022-39400

mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2022)

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.30 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

CVSS 3.1 · 4.9 Medium EPSS 1.5% KEV · Not listed

Vendors

Netapp Oracle Redhat

Products

Oncommand Insight Oncommand Workflow Automation Mysql and 2 more

CVE-2022-38791

mariadb: compress_write() fails to release mutex on failure

In MariaDB before 10.9.2, compress_write in extra/mariabackup/ds_compress.cc does not release data_mutex upon a stream write failure, which allows local users to trigger a deadlock.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Fedoraproject Mariadb Redhat

Products

Fedora Mariadb Enterprise Linux and 1 more

CVE-2022-33987

nodejs-got: missing verification of requested URLs allows redirects to UNIX sockets

The got package before 12.1.0 (also fixed in 11.8.5) for Node.js allows a redirect to a UNIX socket.

CVSS 3.1 · 5.3 Medium EPSS 2.4% KEV · Not listed

Vendors

Got Project Redhat

Products

Got Enterprise Linux Rhel Eus and 1 more

CVE-2022-32091

mariadb: server crash in JOIN_CACHE::free or in copy_fields

MariaDB v10.7 was discovered to contain an use-after-poison in in __interceptor_memset at /libsanitizer/sanitizer_common/sanitizer_common_interceptors.inc.

CVSS 3.1 · 7.5 High EPSS 2.4% KEV · Not listed

Vendors

Debian Fedoraproject Mariadb and 1 more

Products

Debian Linux Fedora Mariadb and 2 more

CVE-2022-32089

mariadb: server crash in st_select_lex_unit::exclude_level

MariaDB v10.5 to v10.7 was discovered to contain a segmentation fault via the component st_select_lex_unit::exclude_level.

CVSS 3.1 · 7.5 High EPSS 2.2% KEV · Not listed

Vendors

Fedoraproject Mariadb Redhat

Products

Fedora Mariadb Enterprise Linux and 1 more

CVE-2022-32088

mariadb: segmentation fault in Exec_time_tracker::get_loops/Filesort_tracker::report_use/filesort

MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component Exec_time_tracker::get_loops/Filesort_tracker::report_use/filesort.

CVSS 3.1 · 7.5 High EPSS 2.0% KEV · Not listed

Vendors

Debian Mariadb Redhat

Products

Debian Linux Mariadb Enterprise Linux and 1 more

CVE-2022-32087

mariadb: server crash in Item_args::walk_args

MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component Item_args::walk_args.

CVSS 3.1 · 7.5 High EPSS 1.8% KEV · Not listed

Vendors

Debian Mariadb Redhat

Products

Debian Linux Mariadb Enterprise Linux and 1 more

CVE-2022-32086

mariadb: server crash in Item_field::fix_outer_field for INSERT SELECT

MariaDB v10.4 to v10.8 was discovered to contain a segmentation fault via the component Item_field::fix_outer_field.

CVSS 3.1 · 7.5 High EPSS 1.6% KEV · Not listed

Vendors

Mariadb Redhat

Products

Mariadb Rhel Software Collections

CVE-2022-32085

mariadb: server crash in Item_func_in::cleanup/Item::cleanup_processor

MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component Item_func_in::cleanup/Item::cleanup_processor.

CVSS 3.1 · 7.5 High EPSS 2.0% KEV · Not listed

Vendors

Debian Mariadb Redhat

Products

Debian Linux Mariadb Enterprise Linux and 1 more

CVE-2022-32084

mariadb: segmentation fault via the component sub_select

MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component sub_select.

CVSS 3.1 · 7.5 High EPSS 2.3% KEV · Not listed

Vendors

Debian Fedoraproject Mariadb and 1 more

Products

Debian Linux Fedora Mariadb and 2 more

CVE-2022-32083

mariadb: server crash at Item_subselect::init_expr_cache_tracker

MariaDB v10.2 to v10.6.1 was discovered to contain a segmentation fault via the component Item_subselect::init_expr_cache_tracker.

CVSS 3.1 · 7.5 High EPSS 2.0% KEV · Not listed

Vendors

Debian Mariadb Redhat

Products

Debian Linux Mariadb Enterprise Linux and 1 more

CVE-2022-32082

mariadb: assertion failure at table->get_ref_count() == 0 in dict0dict.cc

MariaDB v10.5 to v10.7 was discovered to contain an assertion failure at table->get_ref_count() == 0 in dict0dict.cc.

CVSS 3.1 · 7.5 High EPSS 2.1% KEV · Not listed

Vendors

Fedoraproject Mariadb Redhat

Products

Fedora Mariadb Enterprise Linux and 1 more

CVE-2022-32081

mariadb: use-after-poison in prepare_inplace_add_virtual in handler0alter.cc

MariaDB v10.4 to v10.7 was discovered to contain an use-after-poison in prepare_inplace_add_virtual at /storage/innobase/handler/handler0alter.cc.

CVSS 3.1 · 7.5 High EPSS 2.2% KEV · Not listed

Vendors

Fedoraproject Mariadb Redhat

Products

Fedora Mariadb Enterprise Linux and 1 more

CVE-2022-31626

mysqlnd/pdo password buffer overflow

In PHP versions 7.4.x below 7.4.30, 8.0.x below 8.0.20, and 8.1.x below 8.1.7, when pdo_mysql extension with mysqlnd driver, if the third party is allowed to supply host to connect to and the password for the connection, password of excessive length can trigger a buffer overflow in PHP, which can lead to a remote code execution vulnerability.

CVSS 3.1 · 7.5 High EPSS 58.1% KEV · Not listed

Vendors

Debian Php Redhat

Products

Debian Linux Php Enterprise Linux and 2 more

CVE-2022-31625

Freeing unallocated memory in php_pgsql_free_params()

In PHP versions 7.4.x below 7.4.30, 8.0.x below 8.0.20, and 8.1.x below 8.1.7, when using Postgres database extension, supplying invalid parameters to the parametrized query may lead to PHP attempting to free memory using uninitialized data as pointers. This could lead to RCE vulnerability or denial of service.

CVSS 3.1 · 8.1 High EPSS 3.8% KEV · Not listed

Vendors

Debian Php Redhat

Products

Debian Linux Php Enterprise Linux and 1 more

CVE-2022-31624

mariadb: DoS due to improper locking due to unreleased lock in plugin/server_audit/server_audit.c

MariaDB Server before 10.7 is vulnerable to Denial of Service. While executing the plugin/server_audit/server_audit.c method log_statement_ex, the held lock lock_bigbuffer is not released correctly, which allows local users to trigger a denial of service due to the deadlock.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Mariadb Redhat

Products

Mariadb Enterprise Linux Rhel Eus and 1 more

CVE-2022-31623

mariadb: improper locking due to the unreleased lock in extra/mariabackup/ds_compress.cc

MariaDB Server before 10.7 is vulnerable to Denial of Service. In extra/mariabackup/ds_compress.cc, when an error occurs (i.e., going to the err label) while executing the method create_worker_threads, the held lock thd->ctrl_mutex is not released correctly, which allows local users to trigger a denial of service due to the deadlock. Note: The vendor argues this is just an improper locking bug and not a vulnerability with adverse effects.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Mariadb Redhat

Products

Mariadb Enterprise Linux Rhel Software Collections