save_window_function_values in MariaDB before 10.6.3 allows an application crash because of incorrect handling of with_window_func=true for a subquery.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mariadb-embedded-develUpgrade mariadb-backupUpgrade mariadbUpgrade galeraUpgrade JudyUpgrade mariadb-oqgraph-engineUpgrade mariadb-server-utilsUpgrade mariadb-commonUpgrade mariadb-develUpgrade mariadb-errmsgUpgrade mariadb-server-galeraUpgrade mariadb-serverUpgrade mariadb-testUpgrade mariadb-gssapi-serverUpgrade mariadb-pamUpgrade mariadb-embedded | May 4, 2022 | Jan 29, 2022 |
| Amazon Linux Ami 2 | — | Upgrade mariadb-debuginfoUpgrade mariadb-server-utilsUpgrade mariadb-errmsgUpgrade mariadb-server-galeraUpgrade mariadb-pamUpgrade mariadbUpgrade mariadb-oqgraph-engineUpgrade mariadb-connect-engineUpgrade mariadb-embeddedUpgrade mariadb-gssapi-serverUpgrade mariadb-testUpgrade mariadb-backupUpgrade mariadb-rocksdb-engineUpgrade mariadb-s3-engineUpgrade mariadb-serverUpgrade mariadb-libsUpgrade mariadb-configUpgrade mariadb-develUpgrade mariadb-sphinx-engineUpgrade mariadb-cracklib-password-checkUpgrade mariadb-commonUpgrade mariadb-embedded-devel | Sep 28, 2023 | Jan 29, 2022 |
| Amazon_linux_2023 | — | Upgrade mariadb105-connect-engine-debuginfoUpgrade mariadb105-debuginfoUpgrade mariadb105Upgrade mariadb105-serverUpgrade mariadb105-connect-engineUpgrade mariadb105-debugsourceUpgrade mariadb105-commonUpgrade mariadb105-rocksdb-engine-debuginfoUpgrade mariadb105-backup-debuginfoUpgrade mariadb105-rocksdb-engineUpgrade mariadb105-testUpgrade mariadb105-oqgraph-engineUpgrade mariadb105-pamUpgrade mariadb105-sphinx-engineUpgrade mariadb105-gssapi-serverUpgrade mariadb105-server-utilsUpgrade mariadb105-sphinx-engine-debuginfoUpgrade mariadb105-server-utils-debuginfoUpgrade mariadb105-errmsgUpgrade mariadb105-oqgraph-engine-debuginfoUpgrade mariadb105-gssapi-server-debuginfoUpgrade mariadb105-develUpgrade mariadb105-backupUpgrade mariadb105-test-debuginfoUpgrade mariadb105-cracklib-password-checkUpgrade mariadb105-server-debuginfoUpgrade mariadb105-cracklib-password-check-debuginfoUpgrade mariadb105-pam-debuginfo | Feb 17, 2025 | May 10, 2021 |
| Centos_linux | — | Upgrade galera-debugsourceUpgrade mariadb-debugsourceUpgrade mariadb-backupUpgrade mariadbUpgrade mariadb-errmsgUpgrade mariadb-pam-debuginfoUpgrade mariadb-server-galeraUpgrade Judy-debugsourceUpgrade mariadb-serverUpgrade mariadb-testUpgrade mariadb-embedded-debuginfoUpgrade galeraUpgrade mariadb-oqgraph-engineUpgrade mariadb-commonUpgrade mariadb-oqgraph-engine-debuginfoUpgrade galera-debuginfoUpgrade mariadb-server-debuginfoUpgrade mariadb-embeddedUpgrade JudyUpgrade Judy-debuginfoUpgrade mariadb-backup-debuginfoUpgrade mariadb-server-utilsUpgrade mariadb-debuginfoUpgrade mariadb-gssapi-serverUpgrade mariadb-test-debuginfoUpgrade mariadb-pamUpgrade mariadb-embedded-develUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-devel | Apr 27, 2022 | Jan 29, 2022 |
| Debian | — | Upgrade mariadb-10.5 | Jul 30, 2024 | Jan 29, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade mariadbUpgrade mariadb-commonUpgrade mariadb-devel | Aug 18, 2022 | Jan 29, 2022 |
| Mariadb Mariadb | — | Upgrade MariaDB to the latest version | Mar 4, 2025 | Jan 29, 2022 |
| Oracle_linux | — | Upgrade mariadb-oqgraph-engineUpgrade JudyUpgrade mariadb-commonUpgrade mariadb-testUpgrade mariadb-pamUpgrade galeraUpgrade mariadb-errmsgUpgrade mariadb-backupUpgrade mariadb-serverUpgrade mariadb-embedded-develUpgrade mariadbUpgrade mariadb-embeddedUpgrade mariadb-gssapi-serverUpgrade mariadb-develUpgrade mariadb-server-galeraUpgrade mariadb-server-utils | Apr 28, 2022 | May 10, 2021 |
| Redhat_linux | — | Upgrade mariadb-embeddedUpgrade mariadbUpgrade mariadb-debugsourceUpgrade Judy-debuginfoUpgrade mariadb-embedded-debuginfoUpgrade Judy-debugsourceUpgrade mariadb-server-utilsUpgrade mariadb-pam-debuginfoUpgrade mariadb-gssapi-serverUpgrade mariadb-debuginfoUpgrade mariadb-backup-debuginfoUpgrade mariadb-errmsgUpgrade mariadb-testUpgrade mariadb-develUpgrade mariadb-embedded-develUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-server-debuginfoUpgrade mariadb-serverUpgrade galera-debugsourceNo solution existsUpgrade mariadb-test-debuginfoUpgrade galeraUpgrade mariadb-oqgraph-engineUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-backupUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-commonUpgrade mariadb-server-galeraUpgrade galera-debuginfoUpgrade JudyUpgrade mariadb-pam | Apr 27, 2022 | Jan 29, 2022 |
| Rocky_linux | — | Upgrade mariadb-server-debuginfoUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-backup-debuginfoUpgrade mariadb-testUpgrade mariadb-pamUpgrade mariadb-server-utilsUpgrade mariadb-debugsourceUpgrade galera-debuginfoUpgrade mariadb-gssapi-server-debuginfoUpgrade JudyUpgrade mariadbUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-embeddedUpgrade mariadb-develUpgrade Judy-debuginfoUpgrade galeraUpgrade mariadb-server-galeraUpgrade mariadb-embedded-develUpgrade mariadb-backupUpgrade mariadb-oqgraph-engineUpgrade mariadb-errmsgUpgrade mariadb-pam-debuginfoUpgrade mariadb-embedded-debuginfoUpgrade mariadb-commonUpgrade Judy-debugsourceUpgrade mariadb-gssapi-serverUpgrade mariadb-serverUpgrade galera-debugsourceUpgrade mariadb-debuginfoUpgrade mariadb-test-debuginfo | Mar 5, 2024 | Jan 29, 2022 |
| Suse | — | Upgrade mariadb-testUpgrade mariadbUpgrade mariadb-errormessagesUpgrade mariadb-toolsUpgrade mariadb-benchUpgrade libmysqld-develUpgrade mariadb-galeraUpgrade libmariadbd19Upgrade mariadb-clientUpgrade libmariadbd-develUpgrade mariadb-rpm-macrosUpgrade libmysqld19 | Mar 5, 2022 | Jan 29, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 29, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub