Fixed Security Vulnerabilities

This page is part of MariaDB's Documentation.

The parent of this page is: Security

Topics on this page:

Table of Fixed Security Vulnerabilities
What is a CVE?
What is a CVSS Score?
What CVEs are listed on this page?
Enterprise Server Benefits

Table of Fixed Security Vulnerabilities

Date	CVE ID (with cve.org link)	CVSS base score	Enterprise Server Releases
2024-06-11	CVE-2024-21096	4.9	10.6.18-14, 10.5.25-19
2023-12-12	CVE-2023-22084	4.9	10.6.16-11, 10.5.23-17, 10.4.32-22
2023-06-13	CVE-2022-47015	N/A (Medium)#1	10.5.21-15, 10.4.30-20, 10.3.39-20
2023-05-24	CVE-2022-47015	N/A (Medium)#1	10.6.12-8
2022-09-12	CVE-2023-5157	7.5	10.6.9-5, 10.5.17-12, 10.4.26-17
2022-09-12	CVE-2018-25032	7.5	10.6.9-5, 10.5.17-12, 10.4.26-17, 10.3.36-17
2022-09-12	CVE-2022-32091	6.5	10.6.9-5, 10.5.17-12, 10.4.26-17, 10.3.36-17
2022-09-12	CVE-2022-32089	6.5	10.6.9-5, 10.5.17-12, 10.4.26-17
2022-09-12	CVE-2022-32084	6.5	10.6.9-5, 10.5.17-12, 10.4.26-17, 10.3.36-17
2022-09-12	CVE-2022-32082	6.5	10.6.9-5, 10.5.17-12
2022-09-12	CVE-2022-32081	6.5	10.6.9-5, 10.5.17-12, 10.4.26-17
2022-06-13	CVE-2022-27458	7.5	10.6.8-4, 10.5.16-11, 10.4.25-16, 10.3.35-16
2022-06-13	CVE-2022-27457	7.5	10.6.8-4, 10.5.16-11, 10.4.25-16
2022-06-13	CVE-2022-27456	7.5	10.6.8-4, 10.5.16-11, 10.4.25-16, 10.3.35-16
2022-06-13	CVE-2022-27455	7.5	10.6.8-4, 10.5.16-11, 10.4.25-16
2022-06-13	CVE-2022-27452	7.5	10.6.8-4, 10.5.16-11, 10.4.25-16, 10.3.35-16
2022-06-13	CVE-2022-27451	7.5	10.6.8-4, 10.5.16-11, 10.4.25-16
2022-06-13	CVE-2022-27449	7.5	10.6.8-4, 10.5.16-11, 10.4.25-16, 10.3.35-16
2022-06-13	CVE-2022-27448	7.5	10.6.8-4, 10.5.16-11, 10.4.25-16, 10.3.35-16
2022-06-13	CVE-2022-27447	7.5	10.6.8-4, 10.5.16-11, 10.4.25-16, 10.3.35-16
2022-06-13	CVE-2022-27446	7.5	10.6.8-4, 10.5.16-11, 10.4.25-16
2022-06-13	CVE-2022-27445	7.5	10.6.8-4, 10.5.16-11, 10.4.25-16, 10.3.35-16
2022-06-13	CVE-2022-27444	7.5	10.6.8-4, 10.5.16-11, 10.4.25-16
2022-06-13	CVE-2022-27387	7.5	10.6.8-4, 10.5.16-11, 10.4.25-16, 10.3.35-16
2022-06-13	CVE-2022-27386	7.5	10.6.8-4, 10.5.16-11, 10.4.25-16, 10.3.35-16
2022-06-13	CVE-2022-27384	7.5	10.6.8-4, 10.5.16-11, 10.4.25-16, 10.3.35-16
2022-06-13	CVE-2022-27383	7.5	10.6.8-4, 10.5.16-11, 10.4.25-16, 10.3.35-16
2022-06-13	CVE-2022-27382	7.5	10.6.8-4, 10.5.16-11, 10.4.25-16
2022-06-13	CVE-2022-27381	7.5	10.6.8-4, 10.5.16-11, 10.4.25-16, 10.3.35-16
2022-06-13	CVE-2022-27380	7.5	10.6.8-4, 10.5.16-11, 10.4.25-16, 10.3.35-16
2022-06-13	CVE-2022-27379	7.5	10.6.8-4, 10.5.16-11, 10.4.25-16, 10.3.35-16
2022-06-13	CVE-2022-27378	7.5	10.6.8-4, 10.5.16-11, 10.4.25-16, 10.3.35-16
2022-06-13	CVE-2022-27377	7.5	10.6.8-4, 10.5.16-11, 10.4.25-16, 10.3.35-16
2022-06-13	CVE-2022-27376	7.5	10.6.8-4, 10.5.16-11, 10.4.25-16, 10.3.35-16
2022-06-13	CVE-2022-21451	7.5	10.6.8-4, 10.5.16-11, 10.4.25-16
2022-06-13	CVE-2022-32088	6.5	10.6.8-4, 10.5.16-11, 10.4.25-16, 10.3.35-16
2022-06-13	CVE-2022-32087	6.5	10.6.8-4, 10.5.16-11, 10.4.25-16, 10.3.35-16
2022-06-13	CVE-2022-32086	6.5	10.6.8-4, 10.5.16-11, 10.4.25-16
2022-06-13	CVE-2022-32085	6.5	10.6.8-4, 10.5.16-11, 10.4.25-16, 10.3.35-16
2022-06-13	CVE-2022-32083	6.5	10.6.8-4, 10.5.16-11, 10.4.25-16, 10.3.35-16
2022-06-13	CVE-2021-46669	6.5	10.6.8-4, 10.5.16-11, 10.4.25-16, 10.3.35-16
2022-06-13	CVE-2022-21427	4.9	10.4.25-16, 10.3.35-16
2022-03-14	CVE-2021-46668	5.5	10.6.7-3, 10.5.15-10, 10.4.24-15, 10.3.34-15, 10.2.43-15
2022-03-14	CVE-2021-46665	5.5	10.6.7-3, 10.5.15-10, 10.4.24-15, 10.3.34-15, 10.2.43-15
2022-03-14	CVE-2021-46664	5.5	10.6.7-3, 10.5.15-10, 10.4.24-15, 10.3.34-15, 10.2.43-15
2022-03-14	CVE-2021-46663	5.5	10.6.7-3, 10.5.15-10, 10.4.24-15, 10.3.34-15, 10.2.43-15
2022-03-14	CVE-2021-46661	5.5	10.6.7-3, 10.5.15-10, 10.4.24-15, 10.3.34-15, 10.2.43-15
2022-03-14	CVE-2021-46659	5.5	10.6.7-3, 10.5.15-10, 10.4.24-15, 10.3.34-15, 10.2.43-15
2022-03-14	CVE-2022-21595	4.4	10.6.7-3, 10.5.15-10, 10.4.24-15, 10.3.34-15, 10.2.43-15
2021-12-13	CVE-2022-27385	7.5	10.6.5-2, 10.5.13-9, 10.4.22-14, 10.3.32-14
2021-12-13	CVE-2021-46667	7.5	10.6.5-2, 10.5.13-9, 10.4.22-14, 10.3.32-14, 10.2.41-14
2021-12-13	CVE-2022-31624	6.5	10.6.5-2, 10.5.13-9, 10.4.22-14, 10.3.32-14, 10.2.41-14
2021-12-13	CVE-2021-46662	5.5	10.6.5-2, 10.5.13-9, 10.4.22-14, 10.3.32-14
2021-12-13	CVE-2021-35604	5.5	10.5.13-9, 10.4.22-14, 10.3.32-14, 10.2.41-14
2021-09-14	CVE-2021-2389	5.9	10.5.12-8, 10.4.21-13, 10.3.31-13, 10.2.40-13
2021-09-14	CVE-2021-46666	5.5	10.5.12-8, 10.4.21-13, 10.3.31-13, 10.2.40-13
2021-09-14	CVE-2021-46658	5.5	10.5.12-8, 10.4.21-13, 10.3.31-13, 10.2.40-13
2021-09-14	CVE-2021-46657	5.5	10.5.12-8, 10.4.21-13, 10.3.31-13, 10.2.40-13
2021-09-14	CVE-2021-2372	4.4	10.5.12-8, 10.4.21-13, 10.3.31-13, 10.2.40-13
2021-08-26	CVE-2021-46658	5.5	10.6.4-1
2021-06-14	CVE-2021-2166	4.9	10.5.10-7, 10.4.19-12, 10.3.29-12, 10.2.38-12
2021-06-14	CVE-2021-2154	4.9	10.5.10-7, 10.4.19-12, 10.3.29-12, 10.2.38-12
2021-03-15	CVE-2021-27928	N/A (Critical)#1	10.5.9-6, 10.4.18-11, 10.3.28-11, 10.2.37-11
2020-12-14	CVE-2020-14765	6.5	10.5.8-5, 10.4.17-10, 10.3.27-10, 10.2.36-10
2020-12-14	CVE-2022-21427	4.9	10.5.8-5
2020-12-14	CVE-2020-14812	4.9	10.5.8-5, 10.4.17-10, 10.3.27-10, 10.2.36-10
2020-12-14	CVE-2020-14789	4.9	10.5.8-5, 10.4.17-10, 10.3.27-10, 10.2.36-10
2020-12-14	CVE-2020-14776	4.9	10.5.8-5, 10.4.17-10, 10.3.27-10, 10.2.36-10
2020-12-14	CVE-2020-28912	N/A (Critical)#1	10.5.8-5, 10.4.17-10, 10.3.27-10, 10.2.36-10
2020-10-07	CVE-2020-15180	N/A (Critical)#1	10.5.6-4, 10.4.15-9, 10.3.25-9, 10.2.34-9
2020-09-08	CVE-2021-2022	4.4	10.5.5-3, 10.4.14-8, 10.3.24-8, 10.2.33-8
2020-06-08	CVE-2020-2760	5.5	10.4.13-7, 10.3.23-7, 10.2.32-7
2020-06-08	CVE-2020-2752	5.3	10.4.13-7, 10.3.23-7, 10.2.32-7
2020-06-08	CVE-2020-2814	4.9	10.4.13-7, 10.3.23-7, 10.2.32-7
2020-06-08	CVE-2020-2812	4.9	10.4.13-7, 10.3.23-7, 10.2.32-7
2020-06-08	CVE-2020-13249	N/A (Medium)#1	10.4.13-7, 10.3.23-7, 10.2.32-7
2020-03-02	CVE-2020-7221	7.8	10.4.12-6
2020-03-02	CVE-2020-2574	5.9	10.4.12-6, 10.3.22-6, 10.2.31-6
2019-11-18	CVE-2020-2780	6.5	10.4.10-4, 10.3.20-4, 10.2.29-4
2019-11-18	CVE-2019-2974	6.5	10.4.10-4, 10.3.20-4, 10.2.29-4
2019-11-18	CVE-2019-2938	4.4	10.4.10-4, 10.3.20-4, 10.2.29-4
2019-08-19	CVE-2019-2805	6.5	10.4.7-2, 10.3.17-2, 10.2.26-2
2019-08-19	CVE-2019-2740	6.5	10.4.7-2, 10.3.17-2, 10.2.26-2
2019-08-19	CVE-2019-2758	5.5	10.4.7-2, 10.3.17-2, 10.2.26-2
2019-08-19	CVE-2019-2739	5.1	10.4.7-2, 10.3.17-2, 10.2.26-2
2019-08-19	CVE-2019-2737	4.9	10.4.7-2, 10.3.17-2, 10.2.26-2
2019-08-19	CVE-2021-2007	3.7	10.4.7-2, 10.3.17-2, 10.2.26-2
2019-08-19	CVE-2020-2922	3.7	10.4.7-2, 10.3.17-2, 10.2.26-2

#1 (references: 1, 2, 3, 4, 5, 6):: MariaDB CVEs are assigned a word rating instead of a CVSS base score. See the MariaDB Engineering Policy for details.

What is a CVE?

Common Vulnerabilities and Exposures (CVE) relate to flaws "in a software, firmware, hardware, or service component resulting from a weakness that can be exploited, causing a negative impact to the confidentiality, integrity, or availability of an impacted component or components."

For additional information, see CVE Glossary at cve.org

What is a CVSS Score?

Common Vulnerability Scoring System (CVSS) is "an open framework for communicating the characteristics and severity of software vulnerabilities."

For additional information, see Vulnerability Metrics at nvd.nist.gov

What CVEs are listed on this page?

This page provides a cross-reference for all CVEs addressed through a release of MariaDB Enterprise Server.

Enterprise Server Benefits

MariaDB Enterprise Server is an enhanced, hardened, and secured product with:

Enterprise-grade testing to drive a low defect rate
Increased code stability through restricted release of new functionality
Reduced risk from untested or incompatible features through inclusion of only features with level 3 support (Engineering code-level support) from MariaDB Corporation
Optimized configuration defaults
Premium features to meet enterprise scaling and operations requirements
Documentation maintained by MariaDB Corporation