Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-12150

Security: Use-after free with mysql_close() - CVE-2017-3302

    XMLWordPrintable

Details

    Description

      Hi, as far as I know MariaDB is vulnerable for the issue with CVE identifier CVE-2017-3302.
      This issue has been fixed by Oracle in the MySQL codebase.

      See description and fix at http://www.openwall.com/lists/oss-security/2017/02/11/11

      Attachments

        Issue Links

          is duplicated by

          Bug - A problem which impairs or prevents the functions of the product. MDEV-11933 Wrong usage of linked list in mysql_prune_stmt_list

          • Blocker - Blocks development and/or testing work, production could not run.
          • Closed

          Activity

            People

              serg Sergei Golubchik
              mwb Michiel Beijen
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Git Integration

                  Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.