MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component Item_func_in::cleanup(), which is exploited via specially crafted SQL statements.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mariadb-commonUpgrade mariadb-testUpgrade mariadb-develUpgrade mariadb-backupUpgrade mariadb-server-galeraUpgrade mariadb-pamUpgrade mariadb-embedded-develUpgrade JudyUpgrade mariadbUpgrade mariadb-gssapi-serverUpgrade mariadb-errmsgUpgrade mariadb-server-utilsUpgrade mariadb-oqgraph-engineUpgrade galeraUpgrade mariadb-serverUpgrade mariadb-embedded | Aug 8, 2022 | Apr 12, 2022 |
| Alpine Linux | — | Upgrade mariadb | Mar 26, 2024 | Apr 12, 2022 |
| Amazon Linux Ami 2 | — | Upgrade mariadb-connect-engineUpgrade mariadbUpgrade mariadb-errmsgUpgrade mariadb-commonUpgrade mariadb-backupUpgrade mariadb-rocksdb-engineUpgrade mariadb-develUpgrade mariadb-libsUpgrade mariadb-embedded-develUpgrade mariadb-oqgraph-engineUpgrade mariadb-server-utilsUpgrade mariadb-server-galeraUpgrade mariadb-pamUpgrade mariadb-configUpgrade mariadb-s3-engineUpgrade mariadb-debuginfoUpgrade mariadb-embeddedUpgrade mariadb-serverUpgrade mariadb-cracklib-password-checkUpgrade mariadb-testUpgrade mariadb-gssapi-serverUpgrade mariadb-sphinx-engine | Sep 28, 2023 | Apr 12, 2022 |
| Amazon_linux_2023 | — | Upgrade mariadb105-serverUpgrade mariadb105-gssapi-serverUpgrade mariadb105-rocksdb-engineUpgrade mariadb105-sphinx-engine-debuginfoUpgrade mariadb105-debuginfoUpgrade mariadb105-debugsourceUpgrade mariadb105-sphinx-engineUpgrade mariadb105-rocksdb-engine-debuginfoUpgrade mariadb105Upgrade mariadb105-connect-engineUpgrade mariadb105-commonUpgrade mariadb105-pamUpgrade mariadb105-server-utilsUpgrade mariadb105-connect-engine-debuginfoUpgrade mariadb105-cracklib-password-check-debuginfoUpgrade mariadb105-server-debuginfoUpgrade mariadb105-cracklib-password-checkUpgrade mariadb105-errmsgUpgrade mariadb105-oqgraph-engineUpgrade mariadb105-develUpgrade mariadb105-oqgraph-engine-debuginfoUpgrade mariadb105-gssapi-server-debuginfoUpgrade mariadb105-pam-debuginfoUpgrade mariadb105-server-utils-debuginfoUpgrade mariadb105-backup-debuginfoUpgrade mariadb105-testUpgrade mariadb105-backupUpgrade mariadb105-test-debuginfo | Feb 17, 2025 | Jul 30, 2021 |
| Centos_linux | — | Upgrade mariadb-develUpgrade Judy-debuginfoUpgrade mariadb-serverUpgrade mariadb-server-utils-debuginfoUpgrade mysql-selinuxUpgrade galera-debugsourceUpgrade mariadb-test-debuginfoUpgrade mariadbUpgrade mariadb-embedded-develUpgrade mariadb-backupUpgrade mariadb-embeddedUpgrade mariadb-server-galeraUpgrade galeraUpgrade mariadb-debuginfoUpgrade mariadb-embedded-debuginfoUpgrade mariadb-errmsgUpgrade mariadb-gssapi-serverUpgrade mariadb-server-utilsUpgrade mariadb-oqgraph-engineUpgrade mariadb-pam-debuginfoUpgrade Judy-debugsourceUpgrade mariadb-pamUpgrade mariadb-server-debuginfoUpgrade mariadb-backup-debuginfoUpgrade mariadb-debugsourceUpgrade galera-debuginfoUpgrade mariadb-testUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-commonUpgrade mariadb-gssapi-server-debuginfoUpgrade Judy | Aug 3, 2022 | Apr 12, 2022 |
| Debian | — | Upgrade mariadb-10.5 | Sep 19, 2022 | Apr 12, 2022 |
| Freebsd | — | Upgrade mariadb106-serverUpgrade mariadb104-clientUpgrade mariadb104-serverUpgrade mariadb106-clientUpgrade mariadb105-clientUpgrade mariadb105-serverUpgrade mariadb103-serverUpgrade mariadb103-client | Nov 4, 2022 | May 23, 2022 |
| Gentoo Linux | — | Upgrade dev-db/mariadb. | May 10, 2024 | Apr 12, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade mariadb-commonUpgrade mariadb-develUpgrade mariadb | Jun 22, 2022 | Apr 12, 2022 |
| Mariadb Mariadb | — | Upgrade MariaDB to the latest version | Mar 4, 2025 | Apr 12, 2022 |
| Oracle_linux | — | Upgrade mariadb-oqgraph-engineUpgrade mariadb-server-utilsUpgrade mariadb-embeddedUpgrade mariadb-gssapi-serverUpgrade mariadb-develUpgrade mariadbUpgrade galeraUpgrade mariadb-serverUpgrade mariadb-server-galeraUpgrade mysql-selinuxUpgrade mariadb-testUpgrade mariadb-pamUpgrade JudyUpgrade mariadb-backupUpgrade mariadb-commonUpgrade mariadb-errmsgUpgrade mariadb-embedded-devel | Aug 4, 2022 | Jul 30, 2021 |
| Redhat_linux | — | Upgrade mariadb-pamUpgrade galera-debugsourceUpgrade mariadb-gssapi-serverUpgrade mariadbUpgrade mariadb-gssapi-server-debuginfoUpgrade Judy-debuginfoUpgrade mariadb-backup-debuginfoUpgrade mariadb-debugsourceUpgrade mariadb-embeddedUpgrade galera-debuginfoUpgrade mariadb-server-utilsUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-debuginfoUpgrade Judy-debugsourceUpgrade mariadb-testUpgrade mariadb-pam-debuginfoUpgrade mariadb-serverUpgrade mariadb-test-debuginfoUpgrade mariadb-server-galeraUpgrade mariadb-embedded-develUpgrade mariadb-commonUpgrade mariadb-develUpgrade mariadb-oqgraph-engineUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-server-debuginfoUpgrade mariadb-backupUpgrade mariadb-errmsgUpgrade mysql-selinuxUpgrade JudyNo solution existsUpgrade galeraUpgrade mariadb-embedded-debuginfo | Aug 3, 2022 | Apr 12, 2022 |
| Rocky_linux | — | Upgrade mariadb-debuginfoUpgrade mariadb-server-utilsUpgrade Judy-debuginfoUpgrade mariadb-serverUpgrade mariadb-debugsourceUpgrade galeraUpgrade mariadb-embedded-debuginfoUpgrade mariadb-server-debuginfoUpgrade mariadbUpgrade mariadb-server-utils-debuginfoUpgrade galera-debugsourceUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-gssapi-serverUpgrade mariadb-embeddedUpgrade mariadb-testUpgrade mariadb-oqgraph-engineUpgrade mariadb-pam-debuginfoUpgrade mariadb-embedded-develUpgrade Judy-debugsourceUpgrade JudyUpgrade mariadb-pamUpgrade mariadb-server-galeraUpgrade mariadb-backupUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-backup-debuginfoUpgrade mariadb-test-debuginfoUpgrade galera-debuginfoUpgrade mariadb-commonUpgrade mariadb-develUpgrade mariadb-errmsg | Mar 12, 2024 | Apr 12, 2022 |
| Suse | — | Upgrade liblz4-1Upgrade mariadb-toolsUpgrade libmariadb_pluginsUpgrade mariadb104-benchUpgrade mariadbUpgrade libmariadbd-develUpgrade mariadb104-rpm-macrosUpgrade mariadb104-galeraUpgrade mariadb-clientUpgrade mariadb-rpm-macrosUpgrade mariadb-errormessagesUpgrade mariadb-benchUpgrade mariadb104-clientUpgrade mariadb104Upgrade libmariadbd19Upgrade libmysqld19Upgrade mariadb104-errormessagesUpgrade mariadb-testUpgrade libmariadbd104-develUpgrade libmariadb3Upgrade mariadb104-toolsUpgrade mariadb104-testUpgrade libmariadb-develUpgrade libmysqld-develUpgrade mariadb-galeraUpgrade python3-mysqlclient | Oct 26, 2022 | Apr 12, 2022 |
| Ubuntu | — | Upgrade mariadb-server | Nov 24, 2022 | Apr 12, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 12, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub