mysql_install_db in MariaDB 10.4.7 through 10.4.11 allows privilege escalation from the mysql user account to root because chown and chmod are performed unsafely, as demonstrated by a symlink attack on a chmod 04755 of auth_pam_tool_dir/auth_pam_tool. NOTE: this does not affect the Oracle MySQL product, which implements mysql_install_db differently.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Mariadb Mariadb | — | Upgrade MariaDB to the latest version | Mar 4, 2025 | Feb 4, 2020 |
| Suse | — | Upgrade libmariadbd-develUpgrade mariadbUpgrade mariadb-toolsUpgrade libmariadbd19Upgrade mariadb-clientUpgrade mariadb-errormessages | Feb 4, 2022 | Feb 4, 2020 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Feb 4, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub