MariaDB CONNECT Storage Engine Stack-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL queries. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the service account. Was ZDI-CAN-16191.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
- CVSS 3.0 Base Score: 7
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mariadb-gssapi-serverUpgrade mariadb-errmsgUpgrade mariadb-embeddedUpgrade mariadb-server-utilsUpgrade mariadbUpgrade galeraUpgrade mariadb-testUpgrade mariadb-develUpgrade mariadb-server-galeraUpgrade mariadb-oqgraph-engineUpgrade mariadb-serverUpgrade mariadb-pamUpgrade mariadb-backupUpgrade mariadb-embedded-develUpgrade JudyUpgrade mariadb-common | Aug 8, 2022 | Feb 18, 2022 |
| Alpine Linux | — | Upgrade mariadb | Aug 22, 2024 | Feb 18, 2022 |
| Amazon Linux Ami 2 | — | Upgrade mariadb-commonUpgrade mariadb-embeddedUpgrade mariadb-backupUpgrade mariadb-oqgraph-engineUpgrade mariadb-rocksdb-engineUpgrade mariadb-connect-engineUpgrade mariadb-server-galeraUpgrade mariadb-serverUpgrade mariadb-libsUpgrade mariadb-embedded-develUpgrade mariadb-debuginfoUpgrade mariadb-errmsgUpgrade mariadbUpgrade mariadb-s3-engineUpgrade mariadb-gssapi-serverUpgrade mariadb-develUpgrade mariadb-cracklib-password-checkUpgrade mariadb-configUpgrade mariadb-server-utilsUpgrade mariadb-pamUpgrade mariadb-testUpgrade mariadb-sphinx-engine | Sep 28, 2023 | Feb 18, 2022 |
| Amazon_linux_2023 | — | Upgrade mariadb105-pam-debuginfoUpgrade mariadb105-gssapi-serverUpgrade mariadb105-cracklib-password-checkUpgrade mariadb105-server-utils-debuginfoUpgrade mariadb105-develUpgrade mariadb105-errmsgUpgrade mariadb105-connect-engine-debuginfoUpgrade mariadb105-server-debuginfoUpgrade mariadb105-gssapi-server-debuginfoUpgrade mariadb105-debuginfoUpgrade mariadb105-backupUpgrade mariadb105-oqgraph-engineUpgrade mariadb105-test-debuginfoUpgrade mariadb105-testUpgrade mariadb105-commonUpgrade mariadb105Upgrade mariadb105-sphinx-engine-debuginfoUpgrade mariadb105-serverUpgrade mariadb105-oqgraph-engine-debuginfoUpgrade mariadb105-cracklib-password-check-debuginfoUpgrade mariadb105-pamUpgrade mariadb105-rocksdb-engine-debuginfoUpgrade mariadb105-connect-engineUpgrade mariadb105-debugsourceUpgrade mariadb105-sphinx-engineUpgrade mariadb105-rocksdb-engineUpgrade mariadb105-backup-debuginfoUpgrade mariadb105-server-utils | Feb 17, 2025 | Feb 18, 2022 |
| Centos_linux | — | Upgrade mariadb-gssapi-serverUpgrade mariadb-debuginfoUpgrade mariadb-embeddedUpgrade Judy-debuginfoUpgrade mariadb-embedded-develUpgrade mariadb-server-galeraUpgrade mysql-selinuxUpgrade mariadb-backupUpgrade Judy-debugsourceUpgrade mariadb-server-utilsUpgrade mariadb-oqgraph-engineUpgrade JudyUpgrade mariadb-debugsourceUpgrade mariadb-errmsgUpgrade mariadb-embedded-debuginfoUpgrade mariadb-test-debuginfoUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadbUpgrade galeraUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-backup-debuginfoUpgrade mariadb-develUpgrade mariadb-testUpgrade mariadb-pamUpgrade mariadb-pam-debuginfoUpgrade galera-debugsourceUpgrade galera-debuginfoUpgrade mariadb-server-debuginfoUpgrade mariadb-commonUpgrade mariadb-server | Aug 3, 2022 | Feb 18, 2022 |
| Debian | — | Upgrade mariadb-10.5 | Jul 30, 2024 | Feb 18, 2022 |
| Freebsd | — | Upgrade mariadb104-serverUpgrade mariadb104-clientUpgrade mariadb103-clientUpgrade mariadb105-clientUpgrade mariadb103-serverUpgrade mariadb105-server | Nov 4, 2022 | Feb 10, 2022 |
| Gentoo Linux | — | Upgrade dev-db/mariadb. | May 10, 2024 | Feb 18, 2022 |
| Mariadb Mariadb | — | Upgrade MariaDB to the latest version | Mar 4, 2025 | Feb 18, 2022 |
| Oracle_linux | — | Upgrade JudyUpgrade mariadb-commonUpgrade mariadbUpgrade mariadb-pamUpgrade mariadb-testUpgrade mariadb-develUpgrade mariadb-serverUpgrade mariadb-gssapi-serverUpgrade mariadb-errmsgUpgrade mariadb-embedded-develUpgrade mariadb-server-utilsUpgrade mariadb-server-galeraUpgrade mariadb-backupUpgrade mariadb-oqgraph-engineUpgrade mysql-selinuxUpgrade mariadb-embeddedUpgrade galera | Aug 4, 2022 | Feb 18, 2022 |
| Redhat_linux | — | Upgrade mariadb-backupUpgrade mariadb-serverUpgrade mariadb-gssapi-server-debuginfoUpgrade mysql-selinuxUpgrade mariadb-gssapi-serverUpgrade mariadb-debuginfoUpgrade mariadb-pam-debuginfoUpgrade galera-debugsourceUpgrade mariadb-server-utils-debuginfoNo solution existsUpgrade Judy-debuginfoUpgrade mariadb-testUpgrade mariadb-embeddedUpgrade mariadb-oqgraph-engineUpgrade galeraUpgrade mariadb-debugsourceUpgrade mariadb-backup-debuginfoUpgrade mariadb-server-utilsUpgrade galera-debuginfoUpgrade Judy-debugsourceUpgrade JudyUpgrade mariadb-server-debuginfoUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-server-galeraUpgrade mariadb-test-debuginfoUpgrade mariadb-pamUpgrade mariadb-embedded-develUpgrade mariadb-develUpgrade mariadbUpgrade mariadb-errmsgUpgrade mariadb-commonUpgrade mariadb-embedded-debuginfo | Aug 3, 2022 | Feb 18, 2022 |
| Rocky_linux | — | Upgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-debugsourceUpgrade mariadb-testUpgrade galera-debuginfoUpgrade mariadb-pamUpgrade mariadb-debuginfoUpgrade mariadb-gssapi-serverUpgrade mariadb-backup-debuginfoUpgrade Judy-debugsourceUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-server-debuginfoUpgrade mariadb-backupUpgrade mariadb-embedded-debuginfoUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-server-galeraUpgrade mariadb-errmsgUpgrade Judy-debuginfoUpgrade mariadb-embeddedUpgrade mariadb-develUpgrade mariadbUpgrade JudyUpgrade galeraUpgrade mariadb-embedded-develUpgrade mariadb-pam-debuginfoUpgrade mariadb-oqgraph-engineUpgrade mariadb-server-utilsUpgrade mariadb-commonUpgrade galera-debugsourceUpgrade mariadb-test-debuginfoUpgrade mariadb-server | Mar 12, 2024 | Feb 18, 2022 |
| Suse | — | Upgrade mariadbUpgrade libmysqld19Upgrade liblz4-1Upgrade mariadb-benchUpgrade libmariadbd104-develUpgrade libmariadb_pluginsUpgrade libmariadbd-develUpgrade mariadb-toolsUpgrade libmariadb3Upgrade libmariadbd19Upgrade mariadb-testUpgrade python3-mysqlclientUpgrade mariadb104-testUpgrade mariadb-galeraUpgrade libmariadb-develUpgrade mariadb104-galeraUpgrade mariadb-clientUpgrade mariadb104Upgrade mariadb104-benchUpgrade mariadb104-toolsUpgrade mariadb104-errormessagesUpgrade mariadb-errormessagesUpgrade mariadb-rpm-macrosUpgrade libmysqld-develUpgrade mariadb104-rpm-macrosUpgrade mariadb104-client | Mar 5, 2022 | Feb 18, 2022 |
| Ubuntu | — | Upgrade mariadb-server | Mar 22, 2023 | Feb 18, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 18, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub