Approved changes feed: RSS · Atom

cpe:2.3:a:mariadb:mariadb:*:r1:*:*:*:*:*:*

part: a version: * update: r1

VendorMariadb (7f603b14-ed39-5458-877b-2a349be64aa8)
ProductMariadb (f53ad24a-fa82-58e9-8aea-d11d98960d9a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/mariadb-server purl2cpe 2026-06-01 10:16:17.677601
pkg:deb/ubuntu/mariadb-server purl2cpe 2026-06-01 10:16:17.677603
pkg:docker/mariadb/mariadb-docker purl2cpe 2026-06-01 10:16:17.677604
pkg:docker/mariadb/server purl2cpe 2026-06-01 10:16:17.677605
pkg:github/mariadb/server purl2cpe 2026-06-01 10:16:17.677607
pkg:rpm/fedora/mariadb purl2cpe 2026-06-01 10:16:17.677608
pkg:rpm/opensuse/mariadb purl2cpe 2026-06-01 10:16:17.677610

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-15945 vulnerable 2026-06-08 05:08:59.779807 Details available
The installation scripts in the Gentoo dev-db/mysql, dev-db/mariadb, dev-db/percona-server, dev-db/mysql-cluster, and dev-db/mariadb-galera packages before 2017-09-29 have chown calls for user-writable directory trees, which allows local users to gain privileges by leveraging access to the mysql account for creation of a link.
Published: 2017-10-27T21:00:00.000Z
Updated: 2024-08-05T20:13:05.914Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.