Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 428
Alerts This Week
Warning Icon 1 428

Mageia 8: Security Advisory MGASA-2022-0035 for MySQL Connector DoS

mageia
Calendar Grey January 25, 2022
Scroller Mageia
Recent updates to the mysql-connector-c++ packages focus on rectifying buffer overflow and denial-of-service vulnerabilities identified in Mageia 8.
Buffer overflow due to inccorect calculation in EVP_PKEY_decrypt

Summary

Buffer overflow due to inccorect calculation in EVP_PKEY_decrypt. (CVE-2021-3711) Denial of Service attack due to possible non-zero terminated strings. (CVE-2021-3712)

References

- https://bugs.mageia.org/show_bug.cgi?id=29923

- https://www.oracle.com/security-alerts/cpujan2022.html#AppendixMSQL

- https://www.cve.org/CVERecord?id=CVE-2021-3711

- https://www.cve.org/CVERecord?id=CVE-2021-3712

Topics%20covered

Topics Covered

security advisory buffer overflow DoS Mageia mysql connector

Resolution

SRPMS

- 8/core/mysql-connector-c++-8.0.28-1.mga8

Severity
important
Lowest
Low
Medium
High
Critical

Publication date: 25 Jan 2022
URL: https://advisories.mageia.org/MGASA-2022-0035.html
Type: security
CVE: CVE-2021-3711, CVE-2021-3712

Topics%20covered

Topics Covered

security advisory buffer overflow DoS Mageia mysql connector

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.