MariaDB through 10.5.9 allows attackers to trigger a convert_const_to_int use-after-free when the BIGINT data type is used.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mariadb-testUpgrade mariadb-gssapi-serverUpgrade JudyUpgrade mariadb-pamUpgrade mariadbUpgrade mariadb-server-utilsUpgrade mariadb-embedded-develUpgrade mariadb-backupUpgrade mariadb-oqgraph-engineUpgrade galeraUpgrade mariadb-server-galeraUpgrade mariadb-embeddedUpgrade mariadb-commonUpgrade mariadb-develUpgrade mariadb-errmsgUpgrade mariadb-server | Aug 8, 2022 | Feb 1, 2022 |
| Alpine Linux | — | Upgrade mariadb | Mar 21, 2024 | Feb 1, 2022 |
| Amazon Linux Ami 2 | — | Upgrade mariadb-rocksdb-engineUpgrade mariadb-embedded-develUpgrade mariadb-commonUpgrade mariadb-connect-engineUpgrade mariadb-serverUpgrade mariadb-backupUpgrade mariadb-libsUpgrade mariadb-s3-engineUpgrade mariadb-errmsgUpgrade mariadb-oqgraph-engineUpgrade mariadb-server-galeraUpgrade mariadb-cracklib-password-checkUpgrade mariadb-sphinx-engineUpgrade mariadb-server-utilsUpgrade mariadb-embeddedUpgrade mariadb-develUpgrade mariadb-testUpgrade mariadbUpgrade mariadb-pamUpgrade mariadb-debuginfoUpgrade mariadb-gssapi-serverUpgrade mariadb-config | Sep 28, 2023 | Feb 1, 2022 |
| Amazon_linux_2023 | — | Upgrade mariadb105-develUpgrade mariadb105-cracklib-password-check-debuginfoUpgrade mariadb105-gssapi-serverUpgrade mariadb105-pam-debuginfoUpgrade mariadb105-rocksdb-engineUpgrade mariadb105-commonUpgrade mariadb105-server-utils-debuginfoUpgrade mariadb105-backupUpgrade mariadb105-server-debuginfoUpgrade mariadb105-cracklib-password-checkUpgrade mariadb105-connect-engine-debuginfoUpgrade mariadb105-testUpgrade mariadb105-test-debuginfoUpgrade mariadb105-backup-debuginfoUpgrade mariadb105-debugsourceUpgrade mariadb105-sphinx-engine-debuginfoUpgrade mariadb105Upgrade mariadb105-oqgraph-engineUpgrade mariadb105-oqgraph-engine-debuginfoUpgrade mariadb105-sphinx-engineUpgrade mariadb105-pamUpgrade mariadb105-errmsgUpgrade mariadb105-debuginfoUpgrade mariadb105-gssapi-server-debuginfoUpgrade mariadb105-server-utilsUpgrade mariadb105-serverUpgrade mariadb105-rocksdb-engine-debuginfoUpgrade mariadb105-connect-engine | Feb 17, 2025 | May 10, 2021 |
| Centos_linux | — | Upgrade mariadb-embeddedUpgrade Judy-debuginfoUpgrade mariadb-errmsgUpgrade mariadb-debuginfoUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-backupUpgrade mariadb-pam-debuginfoUpgrade galeraUpgrade galera-debugsourceUpgrade mariadb-test-debuginfoUpgrade mysql-selinuxUpgrade mariadb-embedded-debuginfoUpgrade mariadb-gssapi-serverUpgrade mariadb-serverUpgrade mariadb-oqgraph-engineUpgrade mariadb-embedded-develUpgrade mariadb-debugsourceUpgrade mariadb-develUpgrade mariadb-server-galeraUpgrade mariadb-backup-debuginfoUpgrade Judy-debugsourceUpgrade mariadb-pamUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-commonUpgrade mariadb-testUpgrade JudyUpgrade galera-debuginfoUpgrade mariadb-server-debuginfoUpgrade mariadb-server-utilsUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb | Aug 3, 2022 | Feb 1, 2022 |
| Debian | — | Upgrade mariadb-10.5 | Sep 19, 2022 | Feb 1, 2022 |
| Freebsd | — | Upgrade mariadb104-serverUpgrade mariadb103-clientUpgrade mariadb106-serverUpgrade mariadb106-clientUpgrade mariadb103-serverUpgrade mariadb105-serverUpgrade mariadb104-clientUpgrade mariadb105-client | Nov 4, 2022 | May 23, 2022 |
| Gentoo Linux | — | Upgrade dev-db/mariadb. | May 10, 2024 | Feb 1, 2022 |
| Mariadb Mariadb | — | Upgrade MariaDB to the latest version | Mar 4, 2025 | Feb 1, 2022 |
| Oracle_linux | — | Upgrade mariadb-commonUpgrade mariadb-pamUpgrade mariadb-errmsgUpgrade JudyUpgrade mariadb-backupUpgrade mariadb-testUpgrade mariadb-embedded-develUpgrade mysql-selinuxUpgrade mariadb-server-utilsUpgrade mariadbUpgrade mariadb-oqgraph-engineUpgrade mariadb-develUpgrade mariadb-embeddedUpgrade mariadb-gssapi-serverUpgrade galeraUpgrade mariadb-serverUpgrade mariadb-server-galera | Aug 4, 2022 | May 10, 2021 |
| Redhat_linux | — | Upgrade mariadb-server-utilsUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-errmsgUpgrade mariadb-embeddedUpgrade mysql-selinuxUpgrade mariadb-server-galeraUpgrade mariadb-serverUpgrade mariadb-gssapi-server-debuginfoUpgrade galeraUpgrade mariadb-debuginfoUpgrade mariadb-pam-debuginfoUpgrade mariadb-debugsourceUpgrade mariadb-oqgraph-engineUpgrade galera-debugsourceUpgrade mariadb-server-debuginfoUpgrade Judy-debuginfoUpgrade mariadb-embedded-debuginfoUpgrade mariadb-gssapi-serverUpgrade mariadb-test-debuginfoUpgrade mariadb-backupUpgrade mariadb-develUpgrade Judy-debugsourceUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-pamUpgrade mariadb-backup-debuginfoUpgrade mariadb-commonUpgrade galera-debuginfoUpgrade JudyNo solution existsUpgrade mariadb-embedded-develUpgrade mariadbUpgrade mariadb-test | Aug 3, 2022 | Feb 1, 2022 |
| Rocky_linux | — | Upgrade Judy-debugsourceUpgrade galera-debuginfoUpgrade mariadb-test-debuginfoUpgrade mariadb-embedded-debuginfoUpgrade mariadb-pamUpgrade mariadb-errmsgUpgrade mariadb-backup-debuginfoUpgrade mariadb-embedded-develUpgrade mariadb-commonUpgrade mariadb-server-galeraUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-develUpgrade mariadbUpgrade JudyUpgrade mariadb-gssapi-serverUpgrade mariadb-embeddedUpgrade galeraUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-server-debuginfoUpgrade mariadb-testUpgrade mariadb-pam-debuginfoUpgrade mariadb-debuginfoUpgrade Judy-debuginfoUpgrade mariadb-serverUpgrade mariadb-debugsourceUpgrade mariadb-server-utilsUpgrade mariadb-backupUpgrade galera-debugsourceUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-oqgraph-engine | Mar 12, 2024 | Feb 1, 2022 |
| Suse | — | Upgrade mariadb-toolsUpgrade mariadb-clientUpgrade mariadb-benchUpgrade mariadbUpgrade mariadb-rpm-macrosUpgrade mariadb-testUpgrade libmariadbd-develUpgrade mariadb-errormessagesUpgrade libmysqld-develUpgrade mariadb-galeraUpgrade libmysqld19Upgrade libmariadbd19 | Oct 26, 2022 | Feb 1, 2022 |
| Ubuntu | — | Upgrade mariadb-server | Nov 24, 2022 | Feb 1, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 1, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub