MariaDB Server v10.6.5 and below was discovered to contain an use-after-free in the component Item_args::walk_arg, which is exploited via specially crafted SQL statements.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mariadb-gssapi-serverUpgrade mariadb-embeddedUpgrade galeraUpgrade mariadb-serverUpgrade mariadb-develUpgrade mariadb-server-galeraUpgrade mariadb-backupUpgrade mariadb-errmsgUpgrade mariadb-oqgraph-engineUpgrade mariadbUpgrade mariadb-embedded-develUpgrade mariadb-server-utilsUpgrade mariadb-testUpgrade mariadb-commonUpgrade JudyUpgrade mariadb-pam | Aug 8, 2022 | Apr 12, 2022 |
| Alpine Linux | — | Upgrade mariadb | Mar 26, 2024 | Apr 12, 2022 |
| Amazon Linux Ami 2 | — | Upgrade mariadb-develUpgrade mariadb-rocksdb-engineUpgrade mariadb-oqgraph-engineUpgrade mariadb-embedded-develUpgrade mariadb-server-galeraUpgrade mariadb-gssapi-serverUpgrade mariadb-cracklib-password-checkUpgrade mariadb-configUpgrade mariadb-server-utilsUpgrade mariadb-debuginfoUpgrade mariadb-embeddedUpgrade mariadbUpgrade mariadb-sphinx-engineUpgrade mariadb-connect-engineUpgrade mariadb-pamUpgrade mariadb-libsUpgrade mariadb-testUpgrade mariadb-s3-engineUpgrade mariadb-backupUpgrade mariadb-errmsgUpgrade mariadb-serverUpgrade mariadb-common | Sep 28, 2023 | Apr 12, 2022 |
| Amazon_linux_2023 | — | Upgrade mariadb105-testUpgrade mariadb105-server-utils-debuginfoUpgrade mariadb105-gssapi-serverUpgrade mariadb105-gssapi-server-debuginfoUpgrade mariadb105-backupUpgrade mariadb105-pam-debuginfoUpgrade mariadb105-test-debuginfoUpgrade mariadb105-errmsgUpgrade mariadb105-develUpgrade mariadb105-server-debuginfoUpgrade mariadb105-debugsourceUpgrade mariadb105-debuginfoUpgrade mariadb105-cracklib-password-check-debuginfoUpgrade mariadb105-connect-engine-debuginfoUpgrade mariadb105-connect-engineUpgrade mariadb105Upgrade mariadb105-commonUpgrade mariadb105-oqgraph-engine-debuginfoUpgrade mariadb105-cracklib-password-checkUpgrade mariadb105-rocksdb-engineUpgrade mariadb105-serverUpgrade mariadb105-oqgraph-engineUpgrade mariadb105-server-utilsUpgrade mariadb105-pamUpgrade mariadb105-backup-debuginfoUpgrade mariadb105-sphinx-engine-debuginfoUpgrade mariadb105-rocksdb-engine-debuginfoUpgrade mariadb105-sphinx-engine | Feb 17, 2025 | Nov 9, 2020 |
| Centos_linux | — | Upgrade mariadb-pamUpgrade mariadb-server-debuginfoUpgrade mariadbUpgrade mariadb-server-utilsUpgrade mariadb-gssapi-server-debuginfoUpgrade galera-debuginfoUpgrade mariadb-debugsourceUpgrade mariadb-backup-debuginfoUpgrade JudyUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-testUpgrade mariadb-gssapi-serverUpgrade mariadb-debuginfoUpgrade galeraUpgrade mysql-selinuxUpgrade mariadb-develUpgrade mariadb-commonUpgrade mariadb-test-debuginfoUpgrade mariadb-embedded-develUpgrade mariadb-pam-debuginfoUpgrade mariadb-serverUpgrade mariadb-embedded-debuginfoUpgrade mariadb-oqgraph-engineUpgrade mariadb-backupUpgrade Judy-debuginfoUpgrade mariadb-embeddedUpgrade mariadb-server-galeraUpgrade mariadb-errmsgUpgrade mariadb-server-utils-debuginfoUpgrade Judy-debugsourceUpgrade galera-debugsource | Aug 3, 2022 | Apr 12, 2022 |
| Debian | — | Upgrade mariadb-10.5 | Sep 19, 2022 | Apr 12, 2022 |
| Freebsd | — | Upgrade mariadb104-clientUpgrade mariadb106-serverUpgrade mariadb104-serverUpgrade mariadb106-clientUpgrade mariadb103-serverUpgrade mariadb105-clientUpgrade mariadb103-clientUpgrade mariadb105-server | Nov 4, 2022 | May 23, 2022 |
| Gentoo Linux | — | Upgrade dev-db/mariadb. | May 10, 2024 | Apr 12, 2022 |
| Mariadb Mariadb | — | Upgrade MariaDB to the latest version | Mar 4, 2025 | Apr 12, 2022 |
| Oracle_linux | — | Upgrade mariadb-backupUpgrade mariadb-pamUpgrade mariadbUpgrade mariadb-commonUpgrade mariadb-gssapi-serverUpgrade JudyUpgrade mariadb-errmsgUpgrade mariadb-testUpgrade mariadb-embedded-develUpgrade mariadb-server-utilsUpgrade mariadb-embeddedUpgrade mariadb-server-galeraUpgrade mariadb-serverUpgrade mariadb-develUpgrade mysql-selinuxUpgrade mariadb-oqgraph-engineUpgrade galera | Aug 4, 2022 | Nov 9, 2020 |
| Redhat_linux | — | Upgrade mariadb-serverUpgrade galera-debugsourceUpgrade mariadb-gssapi-serverUpgrade mariadb-pamUpgrade mariadb-server-debuginfoUpgrade mariadb-backup-debuginfoNo solution existsUpgrade mariadb-pam-debuginfoUpgrade mariadb-gssapi-server-debuginfoUpgrade Judy-debugsourceUpgrade mariadb-debuginfoUpgrade mariadb-debugsourceUpgrade Judy-debuginfoUpgrade mariadb-embeddedUpgrade mariadb-testUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-develUpgrade mariadb-backupUpgrade mariadb-test-debuginfoUpgrade galeraUpgrade mariadb-errmsgUpgrade mariadb-embedded-develUpgrade JudyUpgrade mariadbUpgrade mariadb-server-galeraUpgrade galera-debuginfoUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-server-utilsUpgrade mariadb-commonUpgrade mysql-selinuxUpgrade mariadb-oqgraph-engineUpgrade mariadb-embedded-debuginfo | Aug 3, 2022 | Apr 12, 2022 |
| Rocky_linux | — | Upgrade galera-debuginfoUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-pamUpgrade mariadb-test-debuginfoUpgrade mariadb-develUpgrade mariadb-embedded-debuginfoUpgrade mariadb-errmsgUpgrade mariadb-embedded-develUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadbUpgrade mariadb-backup-debuginfoUpgrade JudyUpgrade mariadb-commonUpgrade mariadb-oqgraph-engineUpgrade mariadb-server-galeraUpgrade mariadb-backupUpgrade mariadb-embeddedUpgrade mariadb-debugsourceUpgrade galeraUpgrade Judy-debuginfoUpgrade galera-debugsourceUpgrade mariadb-debuginfoUpgrade mariadb-gssapi-serverUpgrade mariadb-pam-debuginfoUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-server-utilsUpgrade mariadb-serverUpgrade Judy-debugsourceUpgrade mariadb-server-debuginfoUpgrade mariadb-test | Mar 12, 2024 | Apr 12, 2022 |
| Suse | — | Upgrade mariadb-toolsUpgrade mariadb104-testUpgrade liblz4-1Upgrade mariadb104-benchUpgrade mariadb-galeraUpgrade mariadb104Upgrade mariadb104-errormessagesUpgrade mariadb-rpm-macrosUpgrade mariadb104-toolsUpgrade mariadb104-clientUpgrade libmariadbd19Upgrade libmariadb-develUpgrade mariadb-benchUpgrade libmariadbd104-develUpgrade mariadb-testUpgrade mariadb-clientUpgrade mariadb-errormessagesUpgrade mariadb104-galeraUpgrade libmariadb_pluginsUpgrade libmariadbd-develUpgrade libmariadb3Upgrade mariadb104-rpm-macrosUpgrade python3-mysqlclientUpgrade mariadb | Oct 26, 2022 | Apr 12, 2022 |
| Ubuntu | — | Upgrade mariadb-server | Nov 24, 2022 | Apr 12, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 12, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub