MariaDB CONNECT Storage Engine Format String Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL queries. The issue results from the lack of proper validation of a user-supplied string before using it as a format specifier. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the service account. Was ZDI-CAN-16193.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
- CVSS 3.0 Base Score: 7
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mariadb-pamUpgrade mariadb-commonUpgrade mariadb-testUpgrade mariadb-develUpgrade mariadb-server-utilsUpgrade mariadb-serverUpgrade mariadb-embeddedUpgrade galeraUpgrade mariadb-backupUpgrade mariadb-server-galeraUpgrade mariadb-errmsgUpgrade mariadb-gssapi-serverUpgrade mariadb-oqgraph-engineUpgrade mariadbUpgrade JudyUpgrade mariadb-embedded-devel | Aug 8, 2022 | Feb 18, 2022 |
| Alpine Linux | — | Upgrade mariadb | Aug 22, 2024 | Feb 18, 2022 |
| Amazon Linux Ami 2 | — | Upgrade mariadb-backupUpgrade mariadb-connect-engineUpgrade mariadb-libsUpgrade mariadb-commonUpgrade mariadb-errmsgUpgrade mariadb-s3-engineUpgrade mariadb-pamUpgrade mariadb-testUpgrade mariadb-embedded-develUpgrade mariadb-serverUpgrade mariadb-embeddedUpgrade mariadb-rocksdb-engineUpgrade mariadbUpgrade mariadb-develUpgrade mariadb-gssapi-serverUpgrade mariadb-server-galeraUpgrade mariadb-debuginfoUpgrade mariadb-oqgraph-engineUpgrade mariadb-cracklib-password-checkUpgrade mariadb-server-utilsUpgrade mariadb-configUpgrade mariadb-sphinx-engine | Sep 28, 2023 | Feb 18, 2022 |
| Amazon_linux_2023 | — | Upgrade mariadb105-sphinx-engineUpgrade mariadb105-debuginfoUpgrade mariadb105-rocksdb-engineUpgrade mariadb105-pam-debuginfoUpgrade mariadb105-rocksdb-engine-debuginfoUpgrade mariadb105-connect-engineUpgrade mariadb105-connect-engine-debuginfoUpgrade mariadb105-debugsourceUpgrade mariadb105-gssapi-server-debuginfoUpgrade mariadb105-server-utilsUpgrade mariadb105-gssapi-serverUpgrade mariadb105-testUpgrade mariadb105-commonUpgrade mariadb105-pamUpgrade mariadb105-serverUpgrade mariadb105-oqgraph-engine-debuginfoUpgrade mariadb105Upgrade mariadb105-server-utils-debuginfoUpgrade mariadb105-cracklib-password-check-debuginfoUpgrade mariadb105-cracklib-password-checkUpgrade mariadb105-test-debuginfoUpgrade mariadb105-server-debuginfoUpgrade mariadb105-errmsgUpgrade mariadb105-develUpgrade mariadb105-backup-debuginfoUpgrade mariadb105-oqgraph-engineUpgrade mariadb105-backupUpgrade mariadb105-sphinx-engine-debuginfo | Feb 17, 2025 | Feb 18, 2022 |
| Centos_linux | — | Upgrade mariadb-develUpgrade mariadb-server-debuginfoUpgrade Judy-debuginfoUpgrade galera-debugsourceUpgrade galeraUpgrade mariadb-debuginfoUpgrade mariadb-server-utilsUpgrade mysql-selinuxUpgrade mariadb-pam-debuginfoUpgrade mariadb-gssapi-serverUpgrade mariadbUpgrade mariadb-embeddedUpgrade mariadb-serverUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-oqgraph-engineUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-debugsourceUpgrade mariadb-backup-debuginfoUpgrade mariadb-backupUpgrade mariadb-oqgraph-engine-debuginfoUpgrade galera-debuginfoUpgrade mariadb-errmsgUpgrade mariadb-embedded-debuginfoUpgrade Judy-debugsourceUpgrade mariadb-embedded-develUpgrade mariadb-pamUpgrade mariadb-commonUpgrade mariadb-testUpgrade JudyUpgrade mariadb-test-debuginfoUpgrade mariadb-server-galera | Aug 3, 2022 | Feb 18, 2022 |
| Debian | — | Upgrade mariadb-10.5 | Jul 30, 2024 | Feb 18, 2022 |
| Freebsd | — | Upgrade mariadb104-clientUpgrade mariadb103-clientUpgrade mariadb105-serverUpgrade mariadb105-clientUpgrade mariadb104-serverUpgrade mariadb103-server | Nov 4, 2022 | Feb 10, 2022 |
| Gentoo Linux | — | Upgrade dev-db/mariadb. | May 10, 2024 | Feb 18, 2022 |
| Mariadb Mariadb | — | Upgrade MariaDB to the latest version | Mar 4, 2025 | Feb 18, 2022 |
| Oracle_linux | — | Upgrade JudyUpgrade mariadbUpgrade mariadb-develUpgrade mariadb-embeddedUpgrade mariadb-gssapi-serverUpgrade mariadb-server-utilsUpgrade mariadb-pamUpgrade mariadb-server-galeraUpgrade mariadb-oqgraph-engineUpgrade mariadb-errmsgUpgrade mariadb-embedded-develUpgrade mariadb-serverUpgrade mariadb-testUpgrade mariadb-backupUpgrade mariadb-commonUpgrade mysql-selinuxUpgrade galera | Aug 4, 2022 | Feb 18, 2022 |
| Redhat_linux | — | Upgrade JudyUpgrade Judy-debuginfoUpgrade mariadb-pamUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-test-debuginfoUpgrade mariadb-server-debuginfoUpgrade mariadb-debuginfoUpgrade mariadb-server-utilsUpgrade mariadb-develUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-backup-debuginfoUpgrade mariadb-embeddedUpgrade mariadb-gssapi-serverUpgrade mariadb-testUpgrade galera-debugsourceUpgrade galera-debuginfoUpgrade mariadb-commonUpgrade mariadbUpgrade galeraUpgrade mariadb-pam-debuginfoUpgrade mariadb-embedded-debuginfoUpgrade mariadb-oqgraph-engineNo solution existsUpgrade mariadb-serverUpgrade mariadb-embedded-develUpgrade mariadb-server-galeraUpgrade mariadb-debugsourceUpgrade mysql-selinuxUpgrade Judy-debugsourceUpgrade mariadb-backupUpgrade mariadb-errmsgUpgrade mariadb-oqgraph-engine-debuginfo | Aug 3, 2022 | Feb 18, 2022 |
| Rocky_linux | — | Upgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-pam-debuginfoUpgrade mariadb-backup-debuginfoUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-debugsourceUpgrade mariadb-server-utilsUpgrade mariadb-serverUpgrade mariadb-testUpgrade mariadb-embeddedUpgrade galera-debugsourceUpgrade mariadb-debuginfoUpgrade Judy-debugsourceUpgrade galeraUpgrade mariadb-gssapi-serverUpgrade Judy-debuginfoUpgrade mariadb-oqgraph-engineUpgrade JudyUpgrade mariadb-pamUpgrade mariadb-server-galeraUpgrade mariadb-server-utils-debuginfoUpgrade galera-debuginfoUpgrade mariadb-embedded-debuginfoUpgrade mariadb-test-debuginfoUpgrade mariadb-embedded-develUpgrade mariadb-commonUpgrade mariadb-backupUpgrade mariadb-develUpgrade mariadb-errmsgUpgrade mariadbUpgrade mariadb-server-debuginfo | Mar 12, 2024 | Feb 18, 2022 |
| Suse | — | Upgrade mariadb104-testUpgrade libmariadbd104-develUpgrade mariadb-galeraUpgrade libmariadb-develUpgrade libmysqld-develUpgrade mariadb-benchUpgrade mariadb104-toolsUpgrade libmysqld19Upgrade mariadb104-clientUpgrade liblz4-1Upgrade mariadb-rpm-macrosUpgrade libmariadb3Upgrade libmariadbd19Upgrade mariadb104-galeraUpgrade mariadb104-rpm-macrosUpgrade mariadb104Upgrade mariadb-toolsUpgrade mariadb104-benchUpgrade mariadbUpgrade mariadb-testUpgrade python3-mysqlclientUpgrade mariadb-clientUpgrade mariadb104-errormessagesUpgrade mariadb-errormessagesUpgrade libmariadb_pluginsUpgrade libmariadbd-devel | Mar 5, 2022 | Feb 18, 2022 |
| Ubuntu | — | Upgrade mariadb-server | Mar 22, 2023 | Feb 18, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 18, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub