The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
MariaDB CONNECT Storage Engine Stack-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL queries. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the service account. Was ZDI-CAN-16191.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mariadb-commonUpgrade mariadb-embedded-develUpgrade mariadb-pamUpgrade mariadb-oqgraph-engineUpgrade mariadb-develUpgrade JudyUpgrade mariadb-server-galeraUpgrade mariadb-serverUpgrade mariadb-backupUpgrade mariadb-errmsgUpgrade mariadb-server-utilsUpgrade mariadbUpgrade galeraUpgrade mariadb-embeddedUpgrade mariadb-testUpgrade mariadb-gssapi-server | Aug 8, 2022 | Feb 18, 2022 |
| Alpine Linux | — | Upgrade mariadb | Aug 22, 2024 | Feb 18, 2022 |
| Amazon Linux Ami 2 | — | Upgrade mariadb-s3-engineUpgrade mariadb-server-galeraUpgrade mariadb-commonUpgrade mariadb-libsUpgrade mariadb-debuginfoUpgrade mariadb-embedded-develUpgrade mariadb-errmsgUpgrade mariadb-rocksdb-engineUpgrade mariadbUpgrade mariadb-serverUpgrade mariadb-embeddedUpgrade mariadb-connect-engineUpgrade mariadb-oqgraph-engineUpgrade mariadb-backupUpgrade mariadb-develUpgrade mariadb-configUpgrade mariadb-sphinx-engineUpgrade mariadb-gssapi-serverUpgrade mariadb-pamUpgrade mariadb-cracklib-password-checkUpgrade mariadb-testUpgrade mariadb-server-utils | Sep 28, 2023 | Feb 18, 2022 |
| Amazon_linux_2023 | — | Upgrade mariadb105-rocksdb-engine-debuginfoUpgrade mariadb105-serverUpgrade mariadb105-testUpgrade mariadb105-oqgraph-engine-debuginfoUpgrade mariadb105-pamUpgrade mariadb105-cracklib-password-check-debuginfoUpgrade mariadb105-rocksdb-engineUpgrade mariadb105-connect-engineUpgrade mariadb105-sphinx-engineUpgrade mariadb105-debugsourceUpgrade mariadb105-backup-debuginfoUpgrade mariadb105-server-utilsUpgrade mariadb105-commonUpgrade mariadb105Upgrade mariadb105-sphinx-engine-debuginfoUpgrade mariadb105-cracklib-password-checkUpgrade mariadb105-server-utils-debuginfoUpgrade mariadb105-server-debuginfoUpgrade mariadb105-connect-engine-debuginfoUpgrade mariadb105-debuginfoUpgrade mariadb105-develUpgrade mariadb105-errmsgUpgrade mariadb105-oqgraph-engineUpgrade mariadb105-pam-debuginfoUpgrade mariadb105-gssapi-serverUpgrade mariadb105-gssapi-server-debuginfoUpgrade mariadb105-backupUpgrade mariadb105-test-debuginfo | Feb 17, 2025 | Feb 18, 2022 |
| Centos_linux | — | Upgrade mariadb-server-utils-debuginfoUpgrade mariadb-gssapi-server-debuginfoUpgrade galera-debuginfoUpgrade mariadb-testUpgrade mariadb-develUpgrade mariadb-commonUpgrade mariadb-pam-debuginfoUpgrade mariadb-pamUpgrade galera-debugsourceUpgrade mariadb-serverUpgrade mariadb-server-debuginfoUpgrade mariadb-backup-debuginfoUpgrade mariadb-embeddedUpgrade mariadb-server-utilsUpgrade mariadb-embedded-debuginfoUpgrade mariadb-oqgraph-engine-debuginfoUpgrade Judy-debugsourceUpgrade mariadb-test-debuginfoUpgrade JudyUpgrade galeraUpgrade Judy-debuginfoUpgrade mariadb-embedded-develUpgrade mariadb-debuginfoUpgrade mariadb-oqgraph-engineUpgrade mariadb-debugsourceUpgrade mysql-selinuxUpgrade mariadb-server-galeraUpgrade mariadb-errmsgUpgrade mariadb-gssapi-serverUpgrade mariadb-backupUpgrade mariadb | Aug 3, 2022 | Feb 18, 2022 |
| Debian | — | Upgrade mariadb-10.5 | Jul 30, 2024 | Feb 18, 2022 |
| Freebsd | — | Upgrade mariadb103-serverUpgrade mariadb105-clientUpgrade mariadb105-serverUpgrade mariadb104-serverUpgrade mariadb104-clientUpgrade mariadb103-client | Nov 4, 2022 | Feb 10, 2022 |
| Gentoo Linux | — | Upgrade dev-db/mariadb. | May 10, 2024 | Feb 18, 2022 |
| Mariadb Mariadb | — | Upgrade MariaDB to the latest version | Mar 4, 2025 | Feb 18, 2022 |
| Oracle_linux | — | Upgrade mariadb-server-utilsUpgrade mariadb-develUpgrade galeraUpgrade mariadb-errmsgUpgrade mariadb-oqgraph-engineUpgrade mariadb-embedded-develUpgrade mariadb-gssapi-serverUpgrade mariadb-serverUpgrade mariadb-server-galeraUpgrade mariadb-backupUpgrade mariadb-embeddedUpgrade mysql-selinuxUpgrade mariadb-pamUpgrade mariadb-testUpgrade JudyUpgrade mariadb-commonUpgrade mariadb | Aug 4, 2022 | Feb 18, 2022 |
| Redhat_linux | — | Upgrade JudyUpgrade mariadb-backup-debuginfoUpgrade mariadb-server-debuginfoUpgrade mariadb-server-utilsUpgrade mariadb-embedded-debuginfoUpgrade galera-debuginfoUpgrade mariadb-pamUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadbUpgrade mariadb-commonUpgrade mariadb-embedded-develUpgrade mariadb-develUpgrade Judy-debugsourceUpgrade mariadb-test-debuginfoUpgrade mariadb-server-galeraUpgrade mariadb-errmsgUpgrade mariadb-gssapi-server-debuginfoUpgrade mysql-selinuxUpgrade mariadb-testUpgrade mariadb-debuginfoUpgrade mariadb-gssapi-serverUpgrade mariadb-backupUpgrade mariadb-embeddedUpgrade mariadb-oqgraph-engineUpgrade mariadb-pam-debuginfoUpgrade galera-debugsourceUpgrade Judy-debuginfoNo solution existsUpgrade mariadb-debugsourceUpgrade galeraUpgrade mariadb-serverUpgrade mariadb-server-utils-debuginfo | Aug 3, 2022 | Feb 18, 2022 |
| Rocky_linux | — | Upgrade mariadb-embeddedUpgrade mariadb-server-debuginfoUpgrade mariadb-develUpgrade mariadb-errmsgUpgrade JudyUpgrade mariadbUpgrade Judy-debuginfoUpgrade galeraUpgrade mariadb-serverUpgrade mariadb-server-galeraUpgrade mariadb-commonUpgrade mariadb-embedded-develUpgrade galera-debugsourceUpgrade mariadb-pam-debuginfoUpgrade mariadb-server-utilsUpgrade mariadb-backupUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-oqgraph-engineUpgrade mariadb-test-debuginfoUpgrade mariadb-embedded-debuginfoUpgrade galera-debuginfoUpgrade mariadb-backup-debuginfoUpgrade Judy-debugsourceUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-pamUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-testUpgrade mariadb-debugsourceUpgrade mariadb-debuginfoUpgrade mariadb-gssapi-server | Mar 12, 2024 | Feb 18, 2022 |
| Suse | — | Upgrade mariadb104-testUpgrade mariadb104-benchUpgrade python3-mysqlclientUpgrade libmysqld-develUpgrade mariadb-rpm-macrosUpgrade mariadb104-galeraUpgrade mariadb104-clientUpgrade mariadb-testUpgrade libmariadbd19Upgrade mariadb-clientUpgrade mariadb104Upgrade mariadb104-toolsUpgrade mariadb104-errormessagesUpgrade mariadb104-rpm-macrosUpgrade libmariadb-develUpgrade mariadb-galeraUpgrade mariadb-errormessagesUpgrade libmariadbd104-develUpgrade mariadb-toolsUpgrade libmariadb3Upgrade mariadbUpgrade mariadb-benchUpgrade libmariadb_pluginsUpgrade libmysqld19Upgrade liblz4-1Upgrade libmariadbd-devel | Mar 5, 2022 | Feb 18, 2022 |
| Ubuntu | — | Upgrade mariadb-server | Mar 22, 2023 | Feb 18, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 18, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub