MariaDB CONNECT Storage Engine Heap-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL queries. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the service account. Was ZDI-CAN-16190.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
- CVSS 3.0 Base Score: 7
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mariadb-commonUpgrade mariadb-pamUpgrade mariadb-testUpgrade mariadb-gssapi-serverUpgrade JudyUpgrade mariadb-embedded-develUpgrade mariadb-server-utilsUpgrade mariadb-embeddedUpgrade mariadb-oqgraph-engineUpgrade galeraUpgrade mariadb-errmsgUpgrade mariadbUpgrade mariadb-backupUpgrade mariadb-server-galeraUpgrade mariadb-serverUpgrade mariadb-devel | Aug 8, 2022 | Feb 18, 2022 |
| Alpine Linux | — | Upgrade mariadb | Aug 22, 2024 | Feb 18, 2022 |
| Amazon Linux Ami 2 | — | Upgrade mariadb-sphinx-engineUpgrade mariadb-server-utilsUpgrade mariadb-debuginfoUpgrade mariadb-configUpgrade mariadb-cracklib-password-checkUpgrade mariadb-develUpgrade mariadbUpgrade mariadb-gssapi-serverUpgrade mariadb-pamUpgrade mariadb-embeddedUpgrade mariadb-rocksdb-engineUpgrade mariadb-server-galeraUpgrade mariadb-errmsgUpgrade mariadb-s3-engineUpgrade mariadb-testUpgrade mariadb-connect-engineUpgrade mariadb-commonUpgrade mariadb-oqgraph-engineUpgrade mariadb-libsUpgrade mariadb-serverUpgrade mariadb-embedded-develUpgrade mariadb-backup | Sep 28, 2023 | Feb 18, 2022 |
| Amazon_linux_2023 | — | Upgrade mariadb105-oqgraph-engineUpgrade mariadb105-serverUpgrade mariadb105-connect-engine-debuginfoUpgrade mariadb105-connect-engineUpgrade mariadb105-develUpgrade mariadb105-commonUpgrade mariadb105-debugsourceUpgrade mariadb105-gssapi-server-debuginfoUpgrade mariadb105-debuginfoUpgrade mariadb105-backup-debuginfoUpgrade mariadb105-gssapi-serverUpgrade mariadb105-pam-debuginfoUpgrade mariadb105-cracklib-password-check-debuginfoUpgrade mariadb105-testUpgrade mariadb105-oqgraph-engine-debuginfoUpgrade mariadb105Upgrade mariadb105-server-utilsUpgrade mariadb105-backupUpgrade mariadb105-test-debuginfoUpgrade mariadb105-sphinx-engineUpgrade mariadb105-cracklib-password-checkUpgrade mariadb105-sphinx-engine-debuginfoUpgrade mariadb105-errmsgUpgrade mariadb105-rocksdb-engineUpgrade mariadb105-server-debuginfoUpgrade mariadb105-rocksdb-engine-debuginfoUpgrade mariadb105-server-utils-debuginfoUpgrade mariadb105-pam | Feb 17, 2025 | Feb 18, 2022 |
| Centos_linux | — | Upgrade galera-debugsourceUpgrade mariadb-backup-debuginfoUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-test-debuginfoUpgrade mariadb-server-debuginfoUpgrade galeraUpgrade mariadb-serverUpgrade mariadb-server-galeraUpgrade mariadb-pam-debuginfoUpgrade mariadb-oqgraph-engineUpgrade mariadb-develUpgrade mariadb-gssapi-serverUpgrade mariadb-server-utilsUpgrade mysql-selinuxUpgrade mariadb-debuginfoUpgrade Judy-debuginfoUpgrade mariadb-embeddedUpgrade mariadb-embedded-develUpgrade mariadb-commonUpgrade mariadb-backupUpgrade mariadb-embedded-debuginfoUpgrade mariadb-testUpgrade mariadb-errmsgUpgrade mariadb-debugsourceUpgrade mariadbUpgrade mariadb-oqgraph-engine-debuginfoUpgrade galera-debuginfoUpgrade mariadb-gssapi-server-debuginfoUpgrade Judy-debugsourceUpgrade mariadb-pamUpgrade Judy | Aug 3, 2022 | Feb 18, 2022 |
| Debian | — | Upgrade mariadb-10.5 | Jul 30, 2024 | Feb 18, 2022 |
| Freebsd | — | Upgrade mariadb104-serverUpgrade mariadb104-clientUpgrade mariadb103-serverUpgrade mariadb105-clientUpgrade mariadb105-serverUpgrade mariadb103-client | Nov 4, 2022 | Feb 10, 2022 |
| Gentoo Linux | — | Upgrade dev-db/mariadb. | May 10, 2024 | Feb 18, 2022 |
| Mariadb Mariadb | — | Upgrade MariaDB to the latest version | Mar 4, 2025 | Feb 18, 2022 |
| Oracle_linux | — | Upgrade mariadb-embeddedUpgrade mariadb-gssapi-serverUpgrade mariadb-server-utilsUpgrade mariadb-oqgraph-engineUpgrade galeraUpgrade mariadb-embedded-develUpgrade mariadb-server-galeraUpgrade mariadb-develUpgrade mysql-selinuxUpgrade mariadb-errmsgUpgrade mariadb-serverUpgrade mariadb-commonUpgrade mariadb-backupUpgrade mariadb-pamUpgrade mariadb-testUpgrade JudyUpgrade mariadb | Aug 4, 2022 | Feb 18, 2022 |
| Redhat_linux | — | Upgrade mariadbUpgrade mariadb-pam-debuginfoUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-serverUpgrade mariadb-testUpgrade mariadb-debuginfoUpgrade mariadb-server-utilsUpgrade galeraUpgrade mariadb-embeddedUpgrade Judy-debuginfoUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-backup-debuginfoUpgrade galera-debugsourceUpgrade mariadb-gssapi-serverUpgrade Judy-debugsourceUpgrade mariadb-debugsourceUpgrade galera-debuginfoUpgrade mysql-selinuxUpgrade mariadb-backupNo solution existsUpgrade mariadb-embedded-develUpgrade mariadb-server-galeraUpgrade mariadb-test-debuginfoUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-develUpgrade mariadb-embedded-debuginfoUpgrade mariadb-commonUpgrade mariadb-oqgraph-engineUpgrade mariadb-pamUpgrade JudyUpgrade mariadb-errmsgUpgrade mariadb-server-debuginfo | Aug 3, 2022 | Feb 18, 2022 |
| Rocky_linux | — | Upgrade mariadb-serverUpgrade Judy-debugsourceUpgrade mariadb-gssapi-serverUpgrade mariadb-backupUpgrade galera-debuginfoUpgrade mariadb-debugsourceUpgrade mariadbUpgrade galera-debugsourceUpgrade mariadb-oqgraph-engineUpgrade mariadb-errmsgUpgrade mariadb-pam-debuginfoUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-commonUpgrade galeraUpgrade mariadb-embedded-debuginfoUpgrade mariadb-server-galeraUpgrade mariadb-debuginfoUpgrade Judy-debuginfoUpgrade mariadb-test-debuginfoUpgrade mariadb-embeddedUpgrade mariadb-embedded-develUpgrade mariadb-server-utilsUpgrade mariadb-backup-debuginfoUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-pamUpgrade mariadb-develUpgrade mariadb-server-utils-debuginfoUpgrade JudyUpgrade mariadb-testUpgrade mariadb-server-debuginfo | Mar 12, 2024 | Feb 18, 2022 |
| Suse | — | Upgrade mariadb104Upgrade libmariadbd19Upgrade mariadb104-errormessagesUpgrade mariadb104-toolsUpgrade python3-mysqlclientUpgrade mariadb-errormessagesUpgrade mariadb104-clientUpgrade mariadb-testUpgrade mariadb104-benchUpgrade mariadb104-testUpgrade mariadb104-rpm-macrosUpgrade libmysqld-develUpgrade mariadb-rpm-macrosUpgrade mariadb-galeraUpgrade mariadbUpgrade libmariadb3Upgrade libmariadbd104-develUpgrade mariadb104-galeraUpgrade libmariadb-develUpgrade mariadb-clientUpgrade mariadb-benchUpgrade mariadb-toolsUpgrade libmariadb_pluginsUpgrade libmariadbd-develUpgrade liblz4-1Upgrade libmysqld19 | Mar 5, 2022 | Feb 18, 2022 |
| Ubuntu | — | Upgrade mariadb-server | Mar 22, 2023 | Feb 18, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 18, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub