MariaDB Server v10.6.5 and below was discovered to contain an use-after-free in the component Item_args::walk_arg, which is exploited via specially crafted SQL statements.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade galeraUpgrade mariadb-errmsgUpgrade mariadb-embeddedUpgrade mariadb-gssapi-serverUpgrade mariadb-serverUpgrade mariadb-server-galeraUpgrade mariadb-develUpgrade mariadb-backupUpgrade mariadb-oqgraph-engineUpgrade mariadb-embedded-develUpgrade mariadb-server-utilsUpgrade mariadb-commonUpgrade mariadb-pamUpgrade mariadb-testUpgrade mariadbUpgrade Judy | Aug 8, 2022 | Apr 12, 2022 |
| Alpine Linux | — | Upgrade mariadb | Mar 26, 2024 | Apr 12, 2022 |
| Amazon Linux Ami 2 | — | Upgrade mariadb-errmsgUpgrade mariadb-s3-engineUpgrade mariadb-serverUpgrade mariadb-testUpgrade mariadb-backupUpgrade mariadb-libsUpgrade mariadb-pamUpgrade mariadb-commonUpgrade mariadb-connect-engineUpgrade mariadb-configUpgrade mariadb-debuginfoUpgrade mariadb-server-utilsUpgrade mariadb-embeddedUpgrade mariadb-server-galeraUpgrade mariadb-embedded-develUpgrade mariadb-gssapi-serverUpgrade mariadb-cracklib-password-checkUpgrade mariadbUpgrade mariadb-sphinx-engineUpgrade mariadb-develUpgrade mariadb-rocksdb-engineUpgrade mariadb-oqgraph-engine | Sep 28, 2023 | Apr 12, 2022 |
| Amazon_linux_2023 | — | Upgrade mariadb105-backup-debuginfoUpgrade mariadb105-rocksdb-engine-debuginfoUpgrade mariadb105-sphinx-engine-debuginfoUpgrade mariadb105-cracklib-password-checkUpgrade mariadb105-sphinx-engineUpgrade mariadb105Upgrade mariadb105-pamUpgrade mariadb105-rocksdb-engineUpgrade mariadb105-oqgraph-engineUpgrade mariadb105-oqgraph-engine-debuginfoUpgrade mariadb105-commonUpgrade mariadb105-serverUpgrade mariadb105-server-utilsUpgrade mariadb105-server-utils-debuginfoUpgrade mariadb105-gssapi-server-debuginfoUpgrade mariadb105-debugsourceUpgrade mariadb105-gssapi-serverUpgrade mariadb105-debuginfoUpgrade mariadb105-errmsgUpgrade mariadb105-develUpgrade mariadb105-connect-engineUpgrade mariadb105-backupUpgrade mariadb105-connect-engine-debuginfoUpgrade mariadb105-pam-debuginfoUpgrade mariadb105-test-debuginfoUpgrade mariadb105-server-debuginfoUpgrade mariadb105-cracklib-password-check-debuginfoUpgrade mariadb105-test | Feb 17, 2025 | Nov 9, 2020 |
| Centos_linux | — | Upgrade mariadb-gssapi-serverUpgrade mariadb-testUpgrade JudyUpgrade mariadb-server-utilsUpgrade mariadb-oqgraph-engine-debuginfoUpgrade galera-debuginfoUpgrade mariadb-backup-debuginfoUpgrade mariadb-debugsourceUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-pamUpgrade mariadb-server-debuginfoUpgrade mariadbUpgrade mariadb-backupUpgrade galera-debugsourceUpgrade mariadb-oqgraph-engineUpgrade Judy-debugsourceUpgrade mariadb-pam-debuginfoUpgrade mariadb-embedded-develUpgrade mariadb-debuginfoUpgrade mariadb-serverUpgrade galeraUpgrade mariadb-embedded-debuginfoUpgrade mariadb-test-debuginfoUpgrade mysql-selinuxUpgrade mariadb-develUpgrade mariadb-commonUpgrade mariadb-server-galeraUpgrade mariadb-embeddedUpgrade Judy-debuginfoUpgrade mariadb-errmsgUpgrade mariadb-server-utils-debuginfo | Aug 3, 2022 | Apr 12, 2022 |
| Debian | — | Upgrade mariadb-10.5 | Sep 19, 2022 | Apr 12, 2022 |
| Freebsd | — | Upgrade mariadb103-serverUpgrade mariadb103-clientUpgrade mariadb105-clientUpgrade mariadb105-serverUpgrade mariadb106-clientUpgrade mariadb104-serverUpgrade mariadb106-serverUpgrade mariadb104-client | Nov 4, 2022 | May 23, 2022 |
| Gentoo Linux | — | Upgrade dev-db/mariadb. | May 10, 2024 | Apr 12, 2022 |
| Mariadb Mariadb | — | Upgrade MariaDB to the latest version | Mar 4, 2025 | Apr 12, 2022 |
| Oracle_linux | — | Upgrade mariadb-gssapi-serverUpgrade mariadb-backupUpgrade mariadb-errmsgUpgrade mariadbUpgrade JudyUpgrade mariadb-commonUpgrade mariadb-testUpgrade mariadb-pamUpgrade mariadb-server-utilsUpgrade mariadb-server-galeraUpgrade mariadb-embeddedUpgrade mariadb-oqgraph-engineUpgrade galeraUpgrade mariadb-serverUpgrade mariadb-develUpgrade mysql-selinuxUpgrade mariadb-embedded-devel | Aug 4, 2022 | Nov 9, 2020 |
| Redhat_linux | — | Upgrade mariadb-embeddedUpgrade mariadb-server-debuginfoUpgrade mariadb-oqgraph-engine-debuginfoUpgrade Judy-debugsourceUpgrade mariadb-debugsourceUpgrade Judy-debuginfoUpgrade mariadb-gssapi-server-debuginfoUpgrade galera-debugsourceUpgrade mariadb-pam-debuginfoUpgrade mariadbUpgrade mariadb-server-galeraUpgrade mariadb-commonUpgrade mariadb-serverNo solution existsUpgrade mariadb-debuginfoUpgrade mariadb-backup-debuginfoUpgrade mariadb-gssapi-serverUpgrade mariadb-testUpgrade mariadb-pamUpgrade mariadb-oqgraph-engineUpgrade mariadb-embedded-debuginfoUpgrade mariadb-server-utilsUpgrade mariadb-develUpgrade mariadb-test-debuginfoUpgrade galera-debuginfoUpgrade mariadb-server-utils-debuginfoUpgrade galeraUpgrade mysql-selinuxUpgrade mariadb-backup | Aug 3, 2022 | Apr 12, 2022 |
| Rocky_linux | — | Upgrade mariadb-errmsgUpgrade JudyUpgrade galera-debuginfoUpgrade mariadb-test-debuginfoUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-pamUpgrade mariadb-develUpgrade mariadb-embedded-debuginfoUpgrade mariadb-embedded-develUpgrade mariadb-server-galeraUpgrade mariadb-oqgraph-engineUpgrade mariadbUpgrade mariadb-commonUpgrade mariadb-backup-debuginfoUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-serverUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-gssapi-serverUpgrade mariadb-debugsourceUpgrade mariadb-backupUpgrade mariadb-embeddedUpgrade mariadb-testUpgrade Judy-debuginfoUpgrade mariadb-server-utilsUpgrade galeraUpgrade mariadb-server-debuginfoUpgrade mariadb-pam-debuginfoUpgrade galera-debugsourceUpgrade mariadb-debuginfoUpgrade Judy-debugsource | Mar 12, 2024 | Apr 12, 2022 |
| Suse | — | Upgrade liblz4-1Upgrade libmariadb-develUpgrade mariadb104-toolsUpgrade mariadb104-errormessagesUpgrade libmariadbd19Upgrade mariadb-rpm-macrosUpgrade mariadb104-clientUpgrade mariadb-galeraUpgrade mariadb104-benchUpgrade mariadb104Upgrade mariadb-toolsUpgrade mariadb104-testUpgrade mariadb-testUpgrade mariadb104-rpm-macrosUpgrade libmariadb_pluginsUpgrade libmariadb3Upgrade mariadb-errormessagesUpgrade libmariadbd-develUpgrade mariadb-benchUpgrade mariadb-clientUpgrade libmariadbd104-develUpgrade mariadbUpgrade python3-mysqlclientUpgrade mariadb104-galera | Oct 26, 2022 | Apr 12, 2022 |
| Ubuntu | — | Upgrade mariadb-server | Nov 24, 2022 | Apr 12, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 12, 2022 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub