Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
mageiaGentoo FoundationMGASA-2022-0056
HistoryFeb 12, 2022 - 8:31 p.m.

Updated php-adodb packages fix security vulnerability

2022-02-1220:31:35
Gentoo Foundation
advisories.mageia.org
21
php-adodb
security vulnerability
postgresql
hotfix
critical
cve-2021-3850
php
warning
pdo
pgsql
text
persistent connections
sql server
dsn
metacolumns
mysql
mssqlnative
unix

CVSS2

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

CVSS3

9.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

EPSS

0.005

Percentile

77.5%

JSON

Security hotfix release addressing a critical vulnerability in PostgreSQL connections (CVE-2021-3850) Additional fixes: Fix usage of get_magic_* functions #619 #657 Fix PHP warning in _rs2rs() function #679 pdo: Fix Fatal error in _query() #666 pdo: Fix undefined variable #678 pgsql: Fix Fatal error in _close() method (PHP8) #666 pgsql: fix deprecated function aliases (PHP8) #667 text: fix Cannot pass parameter by reference #668 Add support for persistent connections in PDO driver #650 Connect to SQL Server database on a specified port. #624 DSN database connection with password containing # fails #651 Metacolumns returns wrong type for integer fields in Mysql 8 #642 Uninitialized Variable access in mssqlnative ErrorNo() method #637

OSVersionArchitecturePackageVersionFilename
Mageia8noarchphp-adodb< 5.20.21-1php-adodb-5.20.21-1.mga8

Related

huntr 1
veracode 1
osv 5
redos 1
cve 1
nessus 3
openvas 4
debiancve 1
ubuntucve 1
prion 1
cvelist 1
github 1
nvd 1
debian 2
gitlab 1
ubuntu 1
huntr
huntr
in adodb/adodb
2021-10-28 16:05:21
veracode
veracode
Authentication Bypass
2022-01-26 04:18:43
osv
osv
libphp-adodb - security update
2022-02-06 00:00:00
Authentication Bypass in ADOdb/ADOdb
2022-01-27 15:23:19
libphp-adodb - security update
2022-03-13 00:00:00
redos
redos
ROS-20240403-06
2024-04-03 00:00:00
cve
cve
CVE-2021-3850
2022-01-25 15:15:08
nessus
nessus
Debian DLA-2912-1 : libphp-adodb - LTS security update
2022-02-06 00:00:00
Debian DSA-5101-1 : libphp-adodb - security update
2022-03-14 00:00:00
Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS : ADOdb vulnerabilities (USN-6825-1)
2024-06-10 00:00:00
openvas
openvas
Mageia: Security Advisory (MGASA-2022-0056)
2022-02-13 00:00:00
Debian: Security Advisory (DSA-5101-1)
2022-03-15 00:00:00
Debian: Security Advisory (DLA-2912-1)
2022-02-07 00:00:00
debiancve
debiancve
CVE-2021-3850
2022-01-25 15:15:08
ubuntucve
ubuntucve
CVE-2021-3850
2022-01-25 00:00:00
prion
prion
Authentication flaw
2022-01-25 15:15:00
cvelist
cvelist
CVE-2021-3850 Authentication Bypass by Primary Weakness in adodb/adodb
2022-01-25 14:20:11
github
github
Authentication Bypass in ADOdb/ADOdb
2022-01-27 15:23:19
nvd
nvd
CVE-2021-3850
2022-01-25 15:15:08
debian
debian
[SECURITY] [DSA 5101-1] libphp-adodb security update
2022-03-13 14:49:45
[SECURITY] [DLA 2912-1] libphp-adodb security update
2022-02-06 09:08:39
gitlab
gitlab
Authentication Bypass by Primary Weakness
2022-01-25 00:00:00
ubuntu
ubuntu
ADOdb vulnerabilities
2024-06-10 00:00:00

CVSS2

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

CVSS3

9.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

EPSS

0.005

Percentile

77.5%

JSON
Related for MGASA-2022-0056
huntr1veracode1osv5redos1cve1nessus3openvas4debiancve1ubuntucve1prion1cvelist1github1nvd1debian2gitlab1ubuntu1