The Ultimate Guide to High Availability with MariaDB

Security Vulnerabilities - MariaDB ColumnStore

You are viewing an old version of this article. View the current version here.

This page is about security vulnerabilities that has been fixed for or still affect MariaDB ColumnStore. In addition links are included to fixed security vulnerabilities in MariaDB Server since MariaDB ColumnStore is based on MariaDB Server.

Sensitive security issues can be sent directly to the persons responsible for MariaDB security: security [AT] mariadb (dot) org.

About CVEs

Contents

  1. About CVEs
  2. Open Vulnerabilities for MariaDB ColumnStore
  3. Other vulnerabilities affecting MariaDB ColumnStore
  4. CVEs fixed in MariaDB Server

CVE® stands for "Common Vulnerabilities and Exposures". It is a publicly available and free to use database of known software vulnerabilities maintained at https://cve.mitre.org/

Open Vulnerabilities for MariaDB ColumnStore

The first alpha version of MariaDB ColumnStore with version number 1.0.0 is based on MariaDB Server version 10.1.10, which includes the following vulnerabilities:

These vulnerabilities have been fixed in MariaDB Server 10.1.12 and MariaDB ColumnStore will get the fixes when it is updated with the latest MariaDB Server version.

Other vulnerabilities affecting MariaDB ColumnStore

MariaDB ColumnStore makes use of an old version of Net-SNMP that has been bundled into the product. The version currently in use of Net-SNMP in ColumnStore is 5.2, which has a few known vulnerabilities:

Once MariaDB ColumnStore gets updated to include a newer version of Net-SNMP these vulnerabilities will not affect MariaDB ColumnStore anymore.

CVEs fixed in MariaDB Server

MariaDB ColumnStore is based on MariaDB Server. For a full list of CVEs fixed in MariaDB Server please refer to Security Vulnerabilities Fixed in MariaDB.

Comments

Comments loading...
Content reproduced on this site is the property of its respective owners, and this content is not reviewed in advance by MariaDB. The views, information and opinions expressed by this content do not necessarily represent those of MariaDB or any other party.