MariaDB CONNECT Storage Engine Format String Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL queries. The issue results from the lack of proper validation of a user-supplied string before using it as a format specifier. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the service account. Was ZDI-CAN-16193.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mariadb-develUpgrade mariadb-testUpgrade mariadb-pamUpgrade mariadb-commonUpgrade mariadb-server-utilsUpgrade mariadb-embeddedUpgrade mariadb-backupUpgrade mariadb-embedded-develUpgrade galeraUpgrade JudyUpgrade mariadb-serverUpgrade mariadb-oqgraph-engineUpgrade mariadb-errmsgUpgrade mariadbUpgrade mariadb-gssapi-serverUpgrade mariadb-server-galera | Aug 8, 2022 | Feb 18, 2022 |
| Alpine Linux | — | Upgrade mariadb | Aug 22, 2024 | Feb 18, 2022 |
| Amazon Linux Ami 2 | — | Upgrade mariadb-embedded-develUpgrade mariadb-rocksdb-engineUpgrade mariadb-develUpgrade mariadb-sphinx-engineUpgrade mariadb-server-galeraUpgrade mariadb-gssapi-serverUpgrade mariadb-debuginfoUpgrade mariadb-embeddedUpgrade mariadb-configUpgrade mariadb-oqgraph-engineUpgrade mariadbUpgrade mariadb-cracklib-password-checkUpgrade mariadb-server-utilsUpgrade mariadb-serverUpgrade mariadb-s3-engineUpgrade mariadb-backupUpgrade mariadb-testUpgrade mariadb-libsUpgrade mariadb-connect-engineUpgrade mariadb-commonUpgrade mariadb-pamUpgrade mariadb-errmsg | Sep 28, 2023 | Feb 18, 2022 |
| Amazon_linux_2023 | — | Upgrade mariadb105-server-debuginfoUpgrade mariadb105-errmsgUpgrade mariadb105-backup-debuginfoUpgrade mariadb105-oqgraph-engine-debuginfoUpgrade mariadb105-cracklib-password-checkUpgrade mariadb105-develUpgrade mariadb105Upgrade mariadb105-server-utils-debuginfoUpgrade mariadb105-cracklib-password-check-debuginfoUpgrade mariadb105-oqgraph-engineUpgrade mariadb105-backupUpgrade mariadb105-test-debuginfoUpgrade mariadb105-sphinx-engine-debuginfoUpgrade mariadb105-pam-debuginfoUpgrade mariadb105-gssapi-server-debuginfoUpgrade mariadb105-server-utilsUpgrade mariadb105-testUpgrade mariadb105-connect-engine-debuginfoUpgrade mariadb105-serverUpgrade mariadb105-debuginfoUpgrade mariadb105-rocksdb-engineUpgrade mariadb105-debugsourceUpgrade mariadb105-connect-engineUpgrade mariadb105-rocksdb-engine-debuginfoUpgrade mariadb105-gssapi-serverUpgrade mariadb105-sphinx-engineUpgrade mariadb105-pamUpgrade mariadb105-common | Feb 17, 2025 | Feb 18, 2022 |
| Centos_linux | — | Upgrade mariadb-embeddedUpgrade mariadb-serverUpgrade mariadbUpgrade Judy-debuginfoUpgrade mariadb-gssapi-serverUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-server-debuginfoUpgrade galeraUpgrade mariadb-oqgraph-engineUpgrade mariadb-pam-debuginfoUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-develUpgrade mariadb-debuginfoUpgrade mariadb-debugsourceUpgrade mysql-selinuxUpgrade galera-debugsourceUpgrade mariadb-server-utilsUpgrade mariadb-backup-debuginfoUpgrade mariadb-commonUpgrade mariadb-test-debuginfoUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-backupUpgrade mariadb-embedded-debuginfoUpgrade mariadb-pamUpgrade mariadb-errmsgUpgrade mariadb-testUpgrade JudyUpgrade Judy-debugsourceUpgrade mariadb-server-galeraUpgrade mariadb-embedded-develUpgrade galera-debuginfo | Aug 3, 2022 | Feb 18, 2022 |
| Debian | — | Upgrade mariadb-10.5 | Jul 30, 2024 | Feb 18, 2022 |
| Freebsd | — | Upgrade mariadb103-clientUpgrade mariadb104-clientUpgrade mariadb104-serverUpgrade mariadb105-clientUpgrade mariadb105-serverUpgrade mariadb103-server | Nov 4, 2022 | Feb 10, 2022 |
| Gentoo Linux | — | Upgrade dev-db/mariadb. | May 10, 2024 | Feb 18, 2022 |
| Mariadb Mariadb | — | Upgrade MariaDB to the latest version | Mar 4, 2025 | Feb 18, 2022 |
| Oracle_linux | — | Upgrade mariadb-pamUpgrade mariadb-server-galeraUpgrade mariadbUpgrade mariadb-gssapi-serverUpgrade mariadb-develUpgrade mariadb-server-utilsUpgrade JudyUpgrade mariadb-embeddedUpgrade mariadb-serverUpgrade mariadb-commonUpgrade mariadb-testUpgrade mariadb-errmsgUpgrade galeraUpgrade mysql-selinuxUpgrade mariadb-backupUpgrade mariadb-embedded-develUpgrade mariadb-oqgraph-engine | Aug 4, 2022 | Feb 18, 2022 |
| Redhat_linux | — | Upgrade galera-debugsourceUpgrade galera-debuginfoUpgrade mariadb-oqgraph-engineUpgrade mariadb-backupUpgrade mariadbUpgrade mariadb-embedded-develUpgrade Judy-debugsourceNo solution existsUpgrade mariadb-embedded-debuginfoUpgrade mariadb-commonUpgrade mariadb-serverUpgrade mariadb-server-galeraUpgrade mariadb-pam-debuginfoUpgrade mariadb-errmsgUpgrade mariadb-oqgraph-engine-debuginfoUpgrade galeraUpgrade mariadb-debugsourceUpgrade mysql-selinuxUpgrade mariadb-debuginfoUpgrade JudyUpgrade mariadb-pamUpgrade mariadb-test-debuginfoUpgrade mariadb-testUpgrade mariadb-develUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-embeddedUpgrade mariadb-backup-debuginfoUpgrade mariadb-server-utilsUpgrade Judy-debuginfoUpgrade mariadb-server-debuginfoUpgrade mariadb-gssapi-server | Aug 3, 2022 | Feb 18, 2022 |
| Rocky_linux | — | Upgrade JudyUpgrade mariadb-commonUpgrade mariadb-embedded-develUpgrade mariadb-backupUpgrade mariadb-develUpgrade mariadb-test-debuginfoUpgrade mariadb-oqgraph-engineUpgrade mariadb-errmsgUpgrade mariadb-server-debuginfoUpgrade mariadb-pamUpgrade mariadbUpgrade mariadb-server-galeraUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-embedded-debuginfoUpgrade galera-debuginfoUpgrade Judy-debugsourceUpgrade mariadb-debuginfoUpgrade mariadb-embeddedUpgrade mariadb-backup-debuginfoUpgrade mariadb-pam-debuginfoUpgrade mariadb-server-utilsUpgrade mariadb-debugsourceUpgrade galera-debugsourceUpgrade mariadb-testUpgrade galeraUpgrade mariadb-gssapi-serverUpgrade Judy-debuginfoUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-serverUpgrade mariadb-gssapi-server-debuginfo | Mar 12, 2024 | Feb 18, 2022 |
| Suse | — | Upgrade mariadb-clientUpgrade mariadb-toolsUpgrade mariadbUpgrade mariadb-testUpgrade mariadb-errormessagesUpgrade mariadb104-rpm-macrosUpgrade libmariadbd-develUpgrade mariadb104Upgrade python3-mysqlclientUpgrade libmariadb_pluginsUpgrade mariadb104-errormessagesUpgrade mariadb104-galeraUpgrade mariadb104-benchUpgrade mariadb104-toolsUpgrade liblz4-1Upgrade libmysqld19Upgrade libmariadb3Upgrade mariadb-rpm-macrosUpgrade libmariadbd19Upgrade mariadb-benchUpgrade mariadb104-clientUpgrade libmysqld-develUpgrade libmariadbd104-develUpgrade mariadb-galeraUpgrade mariadb104-testUpgrade libmariadb-devel | Mar 5, 2022 | Feb 18, 2022 |
| Ubuntu | — | Upgrade mariadb-server | Mar 22, 2023 | Feb 18, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 18, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub