MariaDB Server v10.9 and below was discovered to contain a use-after-free via the component Binary_string::free_buffer() at /sql/sql_string.h.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade JudyUpgrade mariadb-commonUpgrade mariadb-pamUpgrade mariadb-testUpgrade galeraUpgrade mariadb-server-utilsUpgrade mariadb-embedded-develUpgrade mariadb-serverUpgrade mariadb-server-galeraUpgrade mariadb-errmsgUpgrade mariadb-backupUpgrade mariadb-gssapi-serverUpgrade mariadbUpgrade mariadb-embeddedUpgrade mariadb-develUpgrade mariadb-oqgraph-engine | Aug 8, 2022 | Apr 14, 2022 |
| Alpine Linux | — | Upgrade mariadb | Mar 26, 2024 | Apr 14, 2022 |
| Amazon Linux Ami 2 | — | Upgrade mariadb-embedded-develUpgrade mariadb-configUpgrade mariadb-libsUpgrade mariadb-rocksdb-engineUpgrade mariadb-develUpgrade mariadb-cracklib-password-checkUpgrade mariadb-server-galeraUpgrade mariadb-sphinx-engineUpgrade mariadb-oqgraph-engineUpgrade mariadb-pamUpgrade mariadb-commonUpgrade mariadb-testUpgrade mariadb-debuginfoUpgrade mariadb-embeddedUpgrade mariadb-s3-engineUpgrade mariadb-serverUpgrade mariadb-connect-engineUpgrade mariadb-server-utilsUpgrade mariadb-gssapi-serverUpgrade mariadbUpgrade mariadb-backupUpgrade mariadb-errmsg | Sep 28, 2023 | Apr 14, 2022 |
| Amazon_linux_2023 | — | Upgrade mariadb105-testUpgrade mariadb105-commonUpgrade mariadb105Upgrade mariadb105-sphinx-engineUpgrade mariadb105-debuginfoUpgrade mariadb105-gssapi-serverUpgrade mariadb105-serverUpgrade mariadb105-debugsourceUpgrade mariadb105-connect-engine-debuginfoUpgrade mariadb105-connect-engineUpgrade mariadb105-backup-debuginfoUpgrade mariadb105-rocksdb-engineUpgrade mariadb105-server-utilsUpgrade mariadb105-pamUpgrade mariadb105-oqgraph-engineUpgrade mariadb105-rocksdb-engine-debuginfoUpgrade mariadb105-sphinx-engine-debuginfoUpgrade mariadb105-cracklib-password-check-debuginfoUpgrade mariadb105-oqgraph-engine-debuginfoUpgrade mariadb105-develUpgrade mariadb105-server-utils-debuginfoUpgrade mariadb105-pam-debuginfoUpgrade mariadb105-server-debuginfoUpgrade mariadb105-cracklib-password-checkUpgrade mariadb105-backupUpgrade mariadb105-gssapi-server-debuginfoUpgrade mariadb105-test-debuginfoUpgrade mariadb105-errmsg | Feb 17, 2025 | Nov 9, 2020 |
| Centos_linux | — | Upgrade mariadb-serverUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-test-debuginfoUpgrade mariadb-server-utilsUpgrade mariadb-oqgraph-engineUpgrade mariadb-backupUpgrade mariadb-commonUpgrade galeraUpgrade mariadb-develUpgrade mariadb-server-debuginfoUpgrade mariadb-server-galeraUpgrade mariadb-embedded-debuginfoUpgrade JudyUpgrade mariadb-errmsgUpgrade mysql-selinuxUpgrade mariadb-embedded-develUpgrade mariadb-embeddedUpgrade Judy-debuginfoUpgrade mariadb-debugsourceUpgrade galera-debuginfoUpgrade Judy-debugsourceUpgrade mariadb-gssapi-serverUpgrade mariadb-backup-debuginfoUpgrade mariadb-testUpgrade galera-debugsourceUpgrade mariadbUpgrade mariadb-pam-debuginfoUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-pamUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-debuginfo | Aug 3, 2022 | Apr 14, 2022 |
| Debian | — | Upgrade mariadb-10.5 | Sep 19, 2022 | Apr 14, 2022 |
| Freebsd | — | Upgrade mariadb106-serverUpgrade mariadb104-clientUpgrade mariadb103-clientUpgrade mariadb103-serverUpgrade mariadb104-serverUpgrade mariadb105-serverUpgrade mariadb106-clientUpgrade mariadb105-client | Nov 4, 2022 | May 23, 2022 |
| Gentoo Linux | — | Upgrade dev-db/mariadb. | May 10, 2024 | Apr 14, 2022 |
| Mariadb Mariadb | — | Upgrade MariaDB to the latest version | Mar 4, 2025 | Apr 14, 2022 |
| Oracle_linux | — | Upgrade mariadb-gssapi-serverUpgrade mariadb-testUpgrade mariadb-embeddedUpgrade JudyUpgrade mariadb-pamUpgrade mariadb-server-galeraUpgrade mariadbUpgrade mariadb-server-utilsUpgrade mariadb-errmsgUpgrade mysql-selinuxUpgrade galeraUpgrade mariadb-commonUpgrade mariadb-backupUpgrade mariadb-develUpgrade mariadb-embedded-develUpgrade mariadb-oqgraph-engineUpgrade mariadb-server | Aug 4, 2022 | Nov 9, 2020 |
| Redhat_linux | — | Upgrade mariadb-debugsourceUpgrade galeraUpgrade galera-debugsourceUpgrade Judy-debuginfoUpgrade mariadb-serverUpgrade mariadb-gssapi-serverUpgrade mariadb-server-debuginfoUpgrade mariadb-oqgraph-engineUpgrade mariadb-testUpgrade mariadb-embeddedUpgrade mariadb-backupUpgrade mariadbUpgrade mysql-selinuxUpgrade mariadb-pam-debuginfoUpgrade mariadb-server-utilsUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-debuginfoUpgrade mariadb-server-utils-debuginfoUpgrade JudyUpgrade Judy-debugsourceUpgrade mariadb-embedded-develUpgrade mariadb-backup-debuginfoUpgrade mariadb-embedded-debuginfoUpgrade mariadb-server-galeraNo solution existsUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-errmsgUpgrade mariadb-test-debuginfoUpgrade mariadb-pamUpgrade galera-debuginfoUpgrade mariadb-develUpgrade mariadb-common | Aug 3, 2022 | Apr 14, 2022 |
| Rocky_linux | — | Upgrade mariadb-commonUpgrade mariadb-develUpgrade mariadb-serverUpgrade mariadb-pam-debuginfoUpgrade galera-debuginfoUpgrade mariadb-gssapi-server-debuginfoUpgrade galeraUpgrade galera-debugsourceUpgrade mariadb-server-debuginfoUpgrade mariadb-testUpgrade mariadb-test-debuginfoUpgrade mariadb-backupUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-oqgraph-engineUpgrade mariadbUpgrade mariadb-backup-debuginfoUpgrade Judy-debuginfoUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-debuginfoUpgrade mariadb-gssapi-serverUpgrade mariadb-errmsgUpgrade mariadb-embedded-debuginfoUpgrade JudyUpgrade mariadb-pamUpgrade mariadb-server-utilsUpgrade mariadb-embeddedUpgrade mariadb-embedded-develUpgrade mariadb-server-galeraUpgrade Judy-debugsourceUpgrade mariadb-debugsource | Mar 12, 2024 | Apr 14, 2022 |
| Suse | — | Upgrade libmariadb3Upgrade mariadb104-errormessagesUpgrade mariadb104-benchUpgrade libmariadbd19Upgrade libmariadbd104-develUpgrade mariadb-benchUpgrade mariadb-galeraUpgrade mariadb104Upgrade mariadb104-clientUpgrade python3-mysqlclientUpgrade mariadb-rpm-macrosUpgrade mariadb-errormessagesUpgrade mariadb104-toolsUpgrade mariadb104-testUpgrade libmariadbd-develUpgrade libmariadb-develUpgrade mariadb-testUpgrade mariadb104-galeraUpgrade libmariadb_pluginsUpgrade mariadbUpgrade mariadb104-rpm-macrosUpgrade mariadb-toolsUpgrade liblz4-1Upgrade mariadb-client | Oct 26, 2022 | Apr 14, 2022 |
| Ubuntu | — | Upgrade mariadb-server | Nov 24, 2022 | Apr 14, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 14, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub