An issue in the component Used_tables_and_const_cache::used_tables_and_const_cache_join of MariaDB Server v10.7 and below was discovered to allow attackers to cause a Denial of Service (DoS) via specially crafted SQL statements.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mariadb-gssapi-serverUpgrade mariadb-server-galeraUpgrade mariadb-pamUpgrade mariadb-server-utilsUpgrade mariadb-embeddedUpgrade mariadb-embedded-develUpgrade mariadb-develUpgrade mariadb-testUpgrade galeraUpgrade mariadb-commonUpgrade mariadb-backupUpgrade mariadb-errmsgUpgrade JudyUpgrade mariadb-serverUpgrade mariadb-oqgraph-engineUpgrade mariadb | Oct 24, 2022 | Apr 12, 2022 |
| Alpine Linux | — | Upgrade mariadb | Mar 26, 2024 | Apr 12, 2022 |
| Amazon Linux Ami 2 | — | Upgrade mariadb-develUpgrade mariadb-cracklib-password-checkUpgrade mariadb-s3-engineUpgrade mariadb-rocksdb-engineUpgrade mariadb-serverUpgrade mariadb-configUpgrade mariadb-pamUpgrade mariadb-commonUpgrade mariadb-backupUpgrade mariadb-libsUpgrade mariadb-embedded-develUpgrade mariadb-server-galeraUpgrade mariadb-connect-engineUpgrade mariadb-embeddedUpgrade mariadb-testUpgrade mariadb-gssapi-serverUpgrade mariadb-debuginfoUpgrade mariadb-oqgraph-engineUpgrade mariadb-sphinx-engineUpgrade mariadb-server-utilsUpgrade mariadbUpgrade mariadb-errmsg | Sep 28, 2023 | Apr 12, 2022 |
| Amazon_linux_2023 | — | Upgrade mariadb105-commonUpgrade mariadb105-gssapi-serverUpgrade mariadb105-pam-debuginfoUpgrade mariadb105-test-debuginfoUpgrade mariadb105-cracklib-password-checkUpgrade mariadb105-gssapi-server-debuginfoUpgrade mariadb105-testUpgrade mariadb105-develUpgrade mariadb105-sphinx-engine-debuginfoUpgrade mariadb105-backupUpgrade mariadb105-sphinx-engineUpgrade mariadb105-oqgraph-engine-debuginfoUpgrade mariadb105-errmsgUpgrade mariadb105-rocksdb-engine-debuginfoUpgrade mariadb105-debugsourceUpgrade mariadb105-server-debuginfoUpgrade mariadb105-rocksdb-engineUpgrade mariadb105-serverUpgrade mariadb105-connect-engine-debuginfoUpgrade mariadb105-backup-debuginfoUpgrade mariadb105-server-utilsUpgrade mariadb105-debuginfoUpgrade mariadb105-oqgraph-engineUpgrade mariadb105-server-utils-debuginfoUpgrade mariadb105-pamUpgrade mariadb105-cracklib-password-check-debuginfoUpgrade mariadb105Upgrade mariadb105-connect-engine | Feb 17, 2025 | May 5, 2020 |
| Centos_linux | — | Upgrade mariadb-pamUpgrade mariadb-pam-debuginfoUpgrade mariadb-oqgraph-engine-debuginfoUpgrade galera-debuginfoUpgrade mariadb-gssapi-server-debuginfoUpgrade Judy-debugsourceUpgrade mariadb-backup-debuginfoUpgrade mariadb-debuginfoUpgrade mariadb-testUpgrade mariadb-gssapi-serverUpgrade mariadb-embeddedUpgrade mariadb-debugsourceUpgrade Judy-debuginfoUpgrade galera-debugsourceUpgrade mariadb-server-utilsUpgrade JudyUpgrade mariadb-commonUpgrade mariadb-server-galeraUpgrade mariadb-serverUpgrade mariadb-develUpgrade mariadbUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-oqgraph-engineUpgrade mariadb-embedded-develUpgrade mariadb-server-debuginfoUpgrade mariadb-backupUpgrade mariadb-test-debuginfoUpgrade mariadb-embedded-debuginfoUpgrade galeraUpgrade mariadb-errmsg | May 31, 2022 | Apr 12, 2022 |
| Debian | — | Upgrade mariadb-10.5 | Jul 30, 2024 | Apr 12, 2022 |
| Gentoo Linux | — | Upgrade dev-db/mariadb. | May 10, 2024 | Apr 12, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade mariadb-develUpgrade mariadb-commonUpgrade mariadb | Aug 18, 2022 | Apr 12, 2022 |
| Mariadb Mariadb | — | Upgrade MariaDB to the latest version | Mar 4, 2025 | Apr 12, 2022 |
| Redhat_linux | — | Upgrade mariadb-backup-debuginfoUpgrade Judy-debugsourceUpgrade mariadb-pamUpgrade mariadb-commonUpgrade JudyUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-testUpgrade mariadb-server-galeraUpgrade mariadb-embedded-develUpgrade galera-debuginfoUpgrade mariadb-test-debuginfoUpgrade mariadbNo solution existsUpgrade galera-debugsourceUpgrade galeraUpgrade mariadb-server-debuginfoUpgrade Judy-debuginfoUpgrade mariadb-errmsgUpgrade mariadb-gssapi-serverUpgrade mariadb-backupUpgrade mariadb-embeddedUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-pam-debuginfoUpgrade mariadb-embedded-debuginfoUpgrade mariadb-debugsourceUpgrade mariadb-server-utilsUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-debuginfoUpgrade mariadb-oqgraph-engineUpgrade mariadb-serverUpgrade mariadb-devel | May 31, 2022 | Apr 12, 2022 |
| Rocky_linux | — | Upgrade mariadb-embeddedUpgrade mariadb-oqgraph-engineUpgrade mariadb-debuginfoUpgrade mariadb-server-utilsUpgrade mariadb-test-debuginfoUpgrade mariadb-server-utils-debuginfoUpgrade galera-debugsourceUpgrade mariadb-develUpgrade mariadb-server-galeraUpgrade Judy-debuginfoUpgrade mariadb-embedded-develUpgrade mariadb-backup-debuginfoUpgrade mariadb-server-debuginfoUpgrade mariadb-pam-debuginfoUpgrade galeraUpgrade mariadb-gssapi-serverUpgrade mariadb-embedded-debuginfoUpgrade mariadbUpgrade JudyUpgrade mariadb-errmsgUpgrade mariadb-pamUpgrade mariadb-debugsourceUpgrade mariadb-testUpgrade mariadb-serverUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-commonUpgrade Judy-debugsourceUpgrade galera-debuginfoUpgrade mariadb-backup | Mar 5, 2024 | Apr 12, 2022 |
| Ubuntu | — | Upgrade mariadb-10.3 | Nov 19, 2024 | Apr 12, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub