An issue in the component Arg_comparator::compare_real_fixed of MariaDB Server v10.6.2 and below was discovered to allow attackers to cause a Denial of Service (DoS) via specially crafted SQL statements.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mariadb-develUpgrade mariadb-testUpgrade mariadb-serverUpgrade mariadb-commonUpgrade mariadb-pamUpgrade mariadb-gssapi-serverUpgrade mariadb-embeddedUpgrade JudyUpgrade mariadb-server-galeraUpgrade galeraUpgrade mariadb-server-utilsUpgrade mariadb-errmsgUpgrade mariadb-oqgraph-engineUpgrade mariadbUpgrade mariadb-backupUpgrade mariadb-embedded-devel | Aug 8, 2022 | Apr 12, 2022 |
| Alpine Linux | — | Upgrade mariadb | Mar 26, 2024 | Apr 12, 2022 |
| Amazon Linux Ami 2 | — | Upgrade mariadb-s3-engineUpgrade mariadb-cracklib-password-checkUpgrade mariadb-testUpgrade mariadb-sphinx-engineUpgrade mariadb-develUpgrade mariadb-pamUpgrade mariadb-server-utilsUpgrade mariadb-configUpgrade mariadb-embeddedUpgrade mariadb-gssapi-serverUpgrade mariadb-embedded-develUpgrade mariadb-errmsgUpgrade mariadb-server-galeraUpgrade mariadb-rocksdb-engineUpgrade mariadbUpgrade mariadb-connect-engineUpgrade mariadb-debuginfoUpgrade mariadb-commonUpgrade mariadb-oqgraph-engineUpgrade mariadb-libsUpgrade mariadb-serverUpgrade mariadb-backup | Sep 28, 2023 | Apr 12, 2022 |
| Amazon_linux_2023 | — | Upgrade mariadb105-oqgraph-engine-debuginfoUpgrade mariadb105-backup-debuginfoUpgrade mariadb105-errmsgUpgrade mariadb105Upgrade mariadb105-rocksdb-engine-debuginfoUpgrade mariadb105-connect-engineUpgrade mariadb105-gssapi-server-debuginfoUpgrade mariadb105-backupUpgrade mariadb105-server-utilsUpgrade mariadb105-debugsourceUpgrade mariadb105-server-utils-debuginfoUpgrade mariadb105-debuginfoUpgrade mariadb105-oqgraph-engineUpgrade mariadb105-cracklib-password-check-debuginfoUpgrade mariadb105-serverUpgrade mariadb105-sphinx-engineUpgrade mariadb105-pamUpgrade mariadb105-sphinx-engine-debuginfoUpgrade mariadb105-rocksdb-engineUpgrade mariadb105-commonUpgrade mariadb105-server-debuginfoUpgrade mariadb105-gssapi-serverUpgrade mariadb105-pam-debuginfoUpgrade mariadb105-test-debuginfoUpgrade mariadb105-connect-engine-debuginfoUpgrade mariadb105-cracklib-password-checkUpgrade mariadb105-develUpgrade mariadb105-test | Feb 17, 2025 | Aug 13, 2021 |
| Centos_linux | — | Upgrade mariadb-server-utilsUpgrade mariadb-oqgraph-engineUpgrade mariadb-server-debuginfoUpgrade Judy-debuginfoUpgrade mariadb-embedded-develUpgrade mariadb-develUpgrade mariadb-gssapi-serverUpgrade mariadb-backup-debuginfoUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-debuginfoUpgrade mariadb-server-galeraUpgrade mariadb-embeddedUpgrade galera-debugsourceUpgrade galeraUpgrade mariadb-test-debuginfoUpgrade mysql-selinuxUpgrade mariadb-pam-debuginfoUpgrade mariadb-commonUpgrade mariadb-errmsgUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-serverUpgrade mariadb-debugsourceUpgrade mariadb-backupUpgrade galera-debuginfoUpgrade mariadb-embedded-debuginfoUpgrade mariadb-pamUpgrade mariadbUpgrade mariadb-testUpgrade JudyUpgrade Judy-debugsourceUpgrade mariadb-oqgraph-engine-debuginfo | Aug 3, 2022 | Apr 12, 2022 |
| Debian | — | Upgrade mariadb-10.5 | Sep 19, 2022 | Apr 12, 2022 |
| Freebsd | — | Upgrade mariadb104-serverUpgrade mariadb103-clientUpgrade mariadb106-serverUpgrade mariadb106-clientUpgrade mariadb104-clientUpgrade mariadb105-serverUpgrade mariadb103-serverUpgrade mariadb105-client | Nov 4, 2022 | May 23, 2022 |
| Gentoo Linux | — | Upgrade dev-db/mariadb. | May 10, 2024 | Apr 12, 2022 |
| Mariadb Mariadb | — | Upgrade MariaDB to the latest version | Mar 4, 2025 | Apr 12, 2022 |
| Oracle_linux | — | Upgrade mariadbUpgrade mariadb-commonUpgrade mariadb-testUpgrade mariadb-pamUpgrade JudyUpgrade mariadb-oqgraph-engineUpgrade mariadb-develUpgrade mariadb-serverUpgrade mariadb-embeddedUpgrade mariadb-backupUpgrade mariadb-server-galeraUpgrade mariadb-gssapi-serverUpgrade mariadb-errmsgUpgrade mariadb-server-utilsUpgrade mysql-selinuxUpgrade galeraUpgrade mariadb-embedded-devel | Aug 4, 2022 | Aug 13, 2021 |
| Redhat_linux | — | Upgrade mariadb-gssapi-serverUpgrade mysql-selinuxUpgrade mariadb-embedded-debuginfoUpgrade mariadb-oqgraph-engineUpgrade mariadb-testUpgrade galera-debugsourceUpgrade mariadb-serverUpgrade mariadb-pam-debuginfoUpgrade mariadb-debuginfoUpgrade galera-debuginfoUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-backupUpgrade mariadb-debugsourceUpgrade Judy-debugsourceUpgrade galeraUpgrade mariadb-errmsgUpgrade mariadb-server-galeraUpgrade mariadb-commonUpgrade mariadbUpgrade mariadb-develUpgrade mariadb-backup-debuginfoUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-test-debuginfoUpgrade mariadb-embeddedUpgrade mariadb-server-debuginfoUpgrade Judy-debuginfoUpgrade mariadb-server-utilsUpgrade mariadb-embedded-develUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-pamUpgrade JudyNo solution exists | Aug 3, 2022 | Apr 12, 2022 |
| Rocky_linux | — | Upgrade mariadb-embedded-develUpgrade mariadb-backup-debuginfoUpgrade mariadb-server-debuginfoUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-server-utilsUpgrade mariadb-oqgraph-engineUpgrade mariadb-embeddedUpgrade Judy-debuginfoUpgrade mariadb-pam-debuginfoUpgrade mariadb-server-galeraUpgrade mariadb-develUpgrade mariadb-test-debuginfoUpgrade galeraUpgrade Judy-debugsourceUpgrade mariadb-embedded-debuginfoUpgrade mariadb-gssapi-serverUpgrade mariadb-commonUpgrade mariadbUpgrade mariadb-debuginfoUpgrade mariadb-testUpgrade JudyUpgrade galera-debugsourceUpgrade mariadb-pamUpgrade mariadb-debugsourceUpgrade mariadb-backupUpgrade mariadb-errmsgUpgrade mariadb-serverUpgrade galera-debuginfoUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-oqgraph-engine-debuginfo | Mar 12, 2024 | Apr 12, 2022 |
| Suse | — | Upgrade mariadbUpgrade mariadb-clientUpgrade libmariadb3Upgrade libmariadbd-develUpgrade mariadb104-rpm-macrosUpgrade libmariadb_pluginsUpgrade libmariadbd104-develUpgrade mariadb104-galeraUpgrade mariadb104-testUpgrade mariadb-benchUpgrade mariadb-errormessagesUpgrade python3-mysqlclientUpgrade mariadb104-toolsUpgrade mariadb104-clientUpgrade libmariadb-develUpgrade liblz4-1Upgrade mariadb-testUpgrade mariadb104Upgrade mariadb-toolsUpgrade mariadb-galeraUpgrade mariadb104-errormessagesUpgrade mariadb104-benchUpgrade libmariadbd19Upgrade mariadb-rpm-macros | Oct 26, 2022 | Apr 12, 2022 |
| Ubuntu | — | Upgrade mariadb-server | Nov 24, 2022 | Apr 12, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 12, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub