MariaDB through 10.5.9 allows a set_var.cc application crash via certain uses of an UPDATE statement in conjunction with a nested subquery.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mariadb-develUpgrade mariadb-backupUpgrade mariadb-testUpgrade mariadbUpgrade mariadb-server-galeraUpgrade mariadb-errmsgUpgrade mariadb-oqgraph-engineUpgrade mariadb-commonUpgrade mariadb-serverUpgrade mariadb-server-utilsUpgrade mariadb-pamUpgrade mariadb-gssapi-serverUpgrade mariadb-embeddedUpgrade JudyUpgrade mariadb-embedded-devel | May 4, 2022 | Feb 1, 2022 |
| Alpine Linux | — | Upgrade mariadb | Mar 26, 2024 | Feb 1, 2022 |
| Amazon Linux Ami 2 | — | Upgrade mariadb-connect-engineUpgrade mariadb-embeddedUpgrade mariadb-testUpgrade mariadb-debuginfoUpgrade mariadb-gssapi-serverUpgrade mariadb-errmsgUpgrade mariadbUpgrade mariadb-pamUpgrade mariadb-server-utilsUpgrade mariadb-sphinx-engineUpgrade mariadb-commonUpgrade mariadb-backupUpgrade mariadb-cracklib-password-checkUpgrade mariadb-rocksdb-engineUpgrade mariadb-oqgraph-engineUpgrade mariadb-develUpgrade mariadb-server-galeraUpgrade mariadb-s3-engineUpgrade mariadb-embedded-develUpgrade mariadb-libsUpgrade mariadb-serverUpgrade mariadb-config | Sep 28, 2023 | Feb 1, 2022 |
| Amazon_linux_2023 | — | Upgrade mariadb105-gssapi-server-debuginfoUpgrade mariadb105-connect-engineUpgrade mariadb105-connect-engine-debuginfoUpgrade mariadb105-debugsourceUpgrade mariadb105-pam-debuginfoUpgrade mariadb105-testUpgrade mariadb105-cracklib-password-check-debuginfoUpgrade mariadb105-backupUpgrade mariadb105-errmsgUpgrade mariadb105-test-debuginfoUpgrade mariadb105-gssapi-serverUpgrade mariadb105-debuginfoUpgrade mariadb105-server-utils-debuginfoUpgrade mariadb105-develUpgrade mariadb105-server-debuginfoUpgrade mariadb105-commonUpgrade mariadb105-sphinx-engineUpgrade mariadb105-rocksdb-engineUpgrade mariadb105-rocksdb-engine-debuginfoUpgrade mariadb105-oqgraph-engine-debuginfoUpgrade mariadb105-oqgraph-engineUpgrade mariadb105Upgrade mariadb105-serverUpgrade mariadb105-sphinx-engine-debuginfoUpgrade mariadb105-cracklib-password-checkUpgrade mariadb105-server-utilsUpgrade mariadb105-pamUpgrade mariadb105-backup-debuginfo | Feb 17, 2025 | May 10, 2021 |
| Centos_linux | — | Upgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-serverUpgrade mariadb-errmsgUpgrade mariadb-commonUpgrade mariadb-pam-debuginfoUpgrade mariadb-backupUpgrade mariadb-embedded-debuginfoUpgrade Judy-debugsourceUpgrade mariadb-debuginfoUpgrade mariadb-embeddedUpgrade galera-debugsourceUpgrade galeraUpgrade mariadb-oqgraph-engineUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-server-galeraUpgrade mariadb-develUpgrade mariadb-gssapi-serverUpgrade galera-debuginfoUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-server-utilsUpgrade Judy-debuginfoUpgrade JudyUpgrade mariadb-testUpgrade mariadb-server-debuginfoUpgrade mariadb-pamUpgrade mariadb-backup-debuginfoUpgrade mariadb-embedded-develUpgrade mariadb-debugsourceUpgrade mariadbUpgrade mariadb-test-debuginfo | Apr 27, 2022 | Feb 1, 2022 |
| Debian | — | Upgrade mariadb-10.5 | Jul 30, 2024 | Feb 1, 2022 |
| Gentoo Linux | — | Upgrade dev-db/mariadb. | May 10, 2024 | Feb 1, 2022 |
| Huawei Euleros 2_0_sp3 | — | Upgrade mariadb-libsUpgrade mariadb-serverUpgrade mariadb-develUpgrade mariadb-benchUpgrade mariadb | May 25, 2022 | Feb 1, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade mariadb-benchUpgrade mariadb-develUpgrade mariadbUpgrade mariadb-serverUpgrade mariadb-libs | Apr 26, 2022 | Feb 1, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade mariadbUpgrade mariadb-commonUpgrade mariadb-devel | Aug 18, 2022 | Feb 1, 2022 |
| Mariadb Mariadb | — | Upgrade MariaDB to the latest version | Mar 4, 2025 | Feb 1, 2022 |
| Oracle_linux | — | Upgrade JudyUpgrade mariadb-embedded-develUpgrade mariadb-commonUpgrade mariadb-testUpgrade mariadbUpgrade mariadb-pamUpgrade mariadb-serverUpgrade mariadb-embeddedUpgrade mariadb-errmsgUpgrade mariadb-oqgraph-engineUpgrade mariadb-backupUpgrade galeraUpgrade mariadb-develUpgrade mariadb-server-utilsUpgrade mariadb-server-galeraUpgrade mariadb-gssapi-server | Apr 28, 2022 | May 10, 2021 |
| Redhat_linux | — | Upgrade mariadb-debuginfoUpgrade mariadb-embeddedUpgrade mariadb-backup-debuginfoUpgrade Judy-debuginfoUpgrade mariadb-testUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-debugsourceUpgrade galera-debuginfoUpgrade mariadb-gssapi-serverUpgrade mariadb-pam-debuginfoUpgrade galera-debugsourceUpgrade mariadb-pamUpgrade mariadb-oqgraph-engine-debuginfoUpgrade Judy-debugsourceUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-server-galeraNo solution existsUpgrade mariadb-oqgraph-engineUpgrade mariadbUpgrade JudyUpgrade galeraUpgrade mariadb-errmsgUpgrade mariadb-develUpgrade mariadb-embedded-develUpgrade mariadb-embedded-debuginfoUpgrade mariadb-server-utilsUpgrade mariadb-serverUpgrade mariadb-commonUpgrade mariadb-server-debuginfoUpgrade mariadb-test-debuginfoUpgrade mariadb-backup | Apr 27, 2022 | Feb 1, 2022 |
| Rocky_linux | — | Upgrade mariadb-oqgraph-engine-debuginfoUpgrade galera-debuginfoUpgrade mariadb-test-debuginfoUpgrade mariadb-commonUpgrade mariadb-backup-debuginfoUpgrade mariadb-pamUpgrade JudyUpgrade mariadb-server-galeraUpgrade mariadb-embedded-debuginfoUpgrade Judy-debugsourceUpgrade mariadbUpgrade mariadb-errmsgUpgrade mariadb-develUpgrade mariadb-embedded-develUpgrade mariadb-oqgraph-engineUpgrade galeraUpgrade galera-debugsourceUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-embeddedUpgrade mariadb-debugsourceUpgrade mariadb-server-utilsUpgrade mariadb-serverUpgrade Judy-debuginfoUpgrade mariadb-pam-debuginfoUpgrade mariadb-server-debuginfoUpgrade mariadb-testUpgrade mariadb-debuginfoUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-backupUpgrade mariadb-gssapi-server | Mar 5, 2024 | Feb 1, 2022 |
| Ubuntu | — | Upgrade mariadb-10.3 | Nov 19, 2024 | Feb 1, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 1, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub