MariaDB Server v10.6 and below was discovered to contain an use-after-free in the component my_strcasecmp_8bit, which is exploited via specially crafted SQL statements.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mariadb-embeddedUpgrade mariadb-server-galeraUpgrade mariadb-embedded-develUpgrade mariadb-develUpgrade mariadb-server-utilsUpgrade mariadb-pamUpgrade galeraUpgrade mariadb-serverUpgrade mariadbUpgrade mariadb-gssapi-serverUpgrade mariadb-testUpgrade mariadb-commonUpgrade mariadb-errmsgUpgrade mariadb-oqgraph-engineUpgrade mariadb-backupUpgrade Judy | Aug 8, 2022 | Apr 12, 2022 |
| Alpine Linux | — | Upgrade mariadb | Mar 26, 2024 | Apr 12, 2022 |
| Amazon Linux Ami 2 | — | Upgrade mariadb-gssapi-serverUpgrade mariadb-pamUpgrade mariadb-server-utilsUpgrade mariadb-develUpgrade mariadb-configUpgrade mariadb-sphinx-engineUpgrade mariadb-cracklib-password-checkUpgrade mariadb-testUpgrade mariadb-oqgraph-engineUpgrade mariadbUpgrade mariadb-embedded-develUpgrade mariadb-rocksdb-engineUpgrade mariadb-backupUpgrade mariadb-s3-engineUpgrade mariadb-debuginfoUpgrade mariadb-embeddedUpgrade mariadb-libsUpgrade mariadb-connect-engineUpgrade mariadb-commonUpgrade mariadb-errmsgUpgrade mariadb-server-galeraUpgrade mariadb-server | Sep 28, 2023 | Apr 12, 2022 |
| Amazon_linux_2023 | — | Upgrade mariadb105-cracklib-password-checkUpgrade mariadb105-pam-debuginfoUpgrade mariadb105-gssapi-serverUpgrade mariadb105-testUpgrade mariadb105-commonUpgrade mariadb105-connect-engineUpgrade mariadb105-develUpgrade mariadb105-serverUpgrade mariadb105-connect-engine-debuginfoUpgrade mariadb105-oqgraph-engineUpgrade mariadb105-server-utils-debuginfoUpgrade mariadb105-server-debuginfoUpgrade mariadb105-rocksdb-engine-debuginfoUpgrade mariadb105-sphinx-engine-debuginfoUpgrade mariadb105-pamUpgrade mariadb105-rocksdb-engineUpgrade mariadb105-cracklib-password-check-debuginfoUpgrade mariadb105-errmsgUpgrade mariadb105-sphinx-engineUpgrade mariadb105-backup-debuginfoUpgrade mariadb105-debuginfoUpgrade mariadb105-test-debuginfoUpgrade mariadb105-oqgraph-engine-debuginfoUpgrade mariadb105-debugsourceUpgrade mariadb105Upgrade mariadb105-server-utilsUpgrade mariadb105-gssapi-server-debuginfoUpgrade mariadb105-backup | Feb 17, 2025 | Aug 9, 2021 |
| Centos_linux | — | Upgrade JudyUpgrade mariadbUpgrade mariadb-commonUpgrade mariadb-backup-debuginfoUpgrade mariadb-testUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-server-utilsUpgrade galera-debuginfoUpgrade mariadb-server-debuginfoUpgrade Judy-debugsourceUpgrade mariadb-pamUpgrade mariadb-embedded-develUpgrade mariadb-debuginfoUpgrade galeraUpgrade mariadb-embedded-debuginfoUpgrade mariadb-serverUpgrade mariadb-oqgraph-engineUpgrade mariadb-test-debuginfoUpgrade mariadb-server-galeraUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-debugsourceUpgrade mariadb-embeddedUpgrade Judy-debuginfoUpgrade mariadb-pam-debuginfoUpgrade galera-debugsourceUpgrade mariadb-backupUpgrade mariadb-server-utils-debuginfoUpgrade mysql-selinuxUpgrade mariadb-gssapi-serverUpgrade mariadb-develUpgrade mariadb-errmsg | Aug 3, 2022 | Apr 12, 2022 |
| Debian | — | Upgrade mariadb-10.5 | Sep 19, 2022 | Apr 12, 2022 |
| Freebsd | — | Upgrade mariadb106-clientUpgrade mariadb105-clientUpgrade mariadb104-clientUpgrade mariadb103-serverUpgrade mariadb106-serverUpgrade mariadb105-serverUpgrade mariadb103-clientUpgrade mariadb104-server | Nov 4, 2022 | May 23, 2022 |
| Gentoo Linux | — | Upgrade dev-db/mariadb. | May 10, 2024 | Apr 12, 2022 |
| Huawei Euleros 2_0_sp3 | — | Upgrade mariadb-benchUpgrade mariadbUpgrade mariadb-serverUpgrade mariadb-libsUpgrade mariadb-devel | Oct 28, 2022 | Apr 12, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade mariadb-libsUpgrade mariadb-serverUpgrade mariadb-benchUpgrade mariadb-develUpgrade mariadb | Aug 18, 2022 | Apr 12, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade mariadb-commonUpgrade mariadbUpgrade mariadb-devel | Aug 18, 2022 | Apr 12, 2022 |
| Mariadb Mariadb | — | Upgrade MariaDB to the latest version | Mar 4, 2025 | Apr 12, 2022 |
| Oracle_linux | — | Upgrade galeraUpgrade mariadb-embeddedUpgrade mariadb-serverUpgrade mariadb-oqgraph-engineUpgrade mysql-selinuxUpgrade mariadb-backupUpgrade mariadb-gssapi-serverUpgrade mariadb-testUpgrade mariadb-pamUpgrade mariadb-commonUpgrade mariadbUpgrade JudyUpgrade mariadb-develUpgrade mariadb-server-galeraUpgrade mariadb-server-utilsUpgrade mariadb-errmsgUpgrade mariadb-embedded-devel | Aug 4, 2022 | Aug 9, 2021 |
| Redhat_linux | — | Upgrade mariadb-pamUpgrade mariadb-server-debuginfoUpgrade JudyUpgrade mariadb-embedded-develUpgrade mariadb-test-debuginfoUpgrade mariadb-backupUpgrade mariadb-commonUpgrade galera-debuginfoNo solution existsUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-server-galeraUpgrade mariadb-develUpgrade mariadb-testUpgrade galera-debugsourceUpgrade mysql-selinuxUpgrade mariadb-server-utilsUpgrade mariadbUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-gssapi-serverUpgrade galeraUpgrade mariadb-server-utils-debuginfoUpgrade Judy-debugsourceUpgrade mariadb-debugsourceUpgrade mariadb-pam-debuginfoUpgrade mariadb-backup-debuginfoUpgrade Judy-debuginfoUpgrade mariadb-embeddedUpgrade mariadb-errmsgUpgrade mariadb-embedded-debuginfoUpgrade mariadb-debuginfoUpgrade mariadb-serverUpgrade mariadb-oqgraph-engine | Aug 3, 2022 | Apr 12, 2022 |
| Rocky_linux | — | Upgrade JudyUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-server-galeraUpgrade mariadb-test-debuginfoUpgrade mariadb-oqgraph-engineUpgrade mariadb-serverUpgrade mariadb-embedded-debuginfoUpgrade mariadb-embedded-develUpgrade mariadb-errmsgUpgrade mariadb-backupUpgrade mariadbUpgrade mariadb-commonUpgrade mariadb-develUpgrade galeraUpgrade mariadb-debuginfoUpgrade mariadb-backup-debuginfoUpgrade Judy-debuginfoUpgrade galera-debuginfoUpgrade mariadb-server-debuginfoUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-server-utilsUpgrade mariadb-pamUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-embeddedUpgrade Judy-debugsourceUpgrade mariadb-testUpgrade galera-debugsourceUpgrade mariadb-gssapi-serverUpgrade mariadb-pam-debuginfoUpgrade mariadb-debugsource | Mar 12, 2024 | Apr 12, 2022 |
| Suse | — | Upgrade mariadb104-testUpgrade mariadb-galeraUpgrade mariadb-clientUpgrade libmariadb3Upgrade libmysqld-develUpgrade libmariadbd-develUpgrade mariadb104-galeraUpgrade libmysqld19Upgrade mariadb-benchUpgrade mariadb104-clientUpgrade libmariadbd104-develUpgrade libmariadb_pluginsUpgrade mariadb-rpm-macrosUpgrade mariadb104-errormessagesUpgrade python3-mysqlclientUpgrade libmariadbd19Upgrade libmariadb-develUpgrade mariadb-toolsUpgrade mariadbUpgrade mariadb-testUpgrade mariadb104Upgrade mariadb104-toolsUpgrade mariadb104-benchUpgrade mariadb-errormessagesUpgrade liblz4-1Upgrade mariadb104-rpm-macros | Oct 26, 2022 | Apr 12, 2022 |
| Ubuntu | — | Upgrade mariadb-server | Nov 24, 2022 | Apr 12, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 12, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub