save_window_function_values in MariaDB before 10.6.3 allows an application crash because of incorrect handling of with_window_func=true for a subquery.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mariadb-pamUpgrade mariadb-testUpgrade mariadb-embeddedUpgrade mariadb-gssapi-serverUpgrade mariadb-errmsgUpgrade mariadb-backupUpgrade galeraUpgrade JudyUpgrade mariadb-oqgraph-engineUpgrade mariadb-serverUpgrade mariadb-server-utilsUpgrade mariadb-embedded-develUpgrade mariadb-server-galeraUpgrade mariadbUpgrade mariadb-commonUpgrade mariadb-devel | May 4, 2022 | Jan 29, 2022 |
| Amazon Linux Ami 2 | — | Upgrade mariadb-s3-engineUpgrade mariadb-serverUpgrade mariadb-sphinx-engineUpgrade mariadb-cracklib-password-checkUpgrade mariadb-rocksdb-engineUpgrade mariadb-commonUpgrade mariadb-embedded-develUpgrade mariadb-develUpgrade mariadb-configUpgrade mariadb-libsUpgrade mariadb-gssapi-serverUpgrade mariadb-server-utilsUpgrade mariadb-server-galeraUpgrade mariadbUpgrade mariadb-errmsgUpgrade mariadb-pamUpgrade mariadb-embeddedUpgrade mariadb-connect-engineUpgrade mariadb-oqgraph-engineUpgrade mariadb-backupUpgrade mariadb-debuginfoUpgrade mariadb-test | Sep 28, 2023 | Jan 29, 2022 |
| Amazon_linux_2023 | — | Upgrade mariadb105-gssapi-server-debuginfoUpgrade mariadb105-errmsgUpgrade mariadb105-cracklib-password-check-debuginfoUpgrade mariadb105-pam-debuginfoUpgrade mariadb105-server-utils-debuginfoUpgrade mariadb105-cracklib-password-checkUpgrade mariadb105-server-debuginfoUpgrade mariadb105-oqgraph-engine-debuginfoUpgrade mariadb105-test-debuginfoUpgrade mariadb105-backupUpgrade mariadb105-develUpgrade mariadb105-sphinx-engine-debuginfoUpgrade mariadb105-sphinx-engineUpgrade mariadb105-server-utilsUpgrade mariadb105-debugsourceUpgrade mariadb105-rocksdb-engine-debuginfoUpgrade mariadb105-connect-engineUpgrade mariadb105-serverUpgrade mariadb105-connect-engine-debuginfoUpgrade mariadb105-debuginfoUpgrade mariadb105-backup-debuginfoUpgrade mariadb105-commonUpgrade mariadb105-rocksdb-engineUpgrade mariadb105-pamUpgrade mariadb105-oqgraph-engineUpgrade mariadb105-testUpgrade mariadb105Upgrade mariadb105-gssapi-server | Feb 17, 2025 | May 10, 2021 |
| Centos_linux | — | Upgrade mariadb-server-utils-debuginfoUpgrade mariadb-test-debuginfoUpgrade mariadb-embedded-develUpgrade mariadb-gssapi-serverUpgrade mariadb-server-debuginfoUpgrade Judy-debuginfoUpgrade mariadb-server-utilsUpgrade mariadb-backup-debuginfoUpgrade mariadb-develUpgrade mariadb-debuginfoUpgrade JudyUpgrade mariadb-embeddedUpgrade mariadb-pamUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-debugsourceUpgrade mariadb-serverUpgrade mariadb-embedded-debuginfoUpgrade mariadb-oqgraph-engineUpgrade galera-debugsourceUpgrade mariadb-backupUpgrade mariadb-commonUpgrade mariadb-testUpgrade mariadb-errmsgUpgrade mariadbUpgrade mariadb-oqgraph-engine-debuginfoUpgrade Judy-debugsourceUpgrade galera-debuginfoUpgrade mariadb-server-galeraUpgrade galeraUpgrade mariadb-pam-debuginfo | Apr 27, 2022 | Jan 29, 2022 |
| Debian | — | Upgrade mariadb-10.5 | Jul 30, 2024 | Jan 29, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade mariadb-develUpgrade mariadb-commonUpgrade mariadb | Aug 18, 2022 | Jan 29, 2022 |
| Mariadb Mariadb | — | Upgrade MariaDB to the latest version | Mar 4, 2025 | Jan 29, 2022 |
| Oracle_linux | — | Upgrade JudyUpgrade mariadb-pamUpgrade mariadb-oqgraph-engineUpgrade mariadb-commonUpgrade galeraUpgrade mariadb-backupUpgrade mariadb-errmsgUpgrade mariadb-testUpgrade mariadb-serverUpgrade mariadb-embedded-develUpgrade mariadb-server-utilsUpgrade mariadb-develUpgrade mariadb-server-galeraUpgrade mariadb-embeddedUpgrade mariadbUpgrade mariadb-gssapi-server | Apr 28, 2022 | May 10, 2021 |
| Redhat_linux | — | Upgrade mariadb-server-utilsUpgrade mariadb-testUpgrade mariadb-pam-debuginfoUpgrade mariadb-gssapi-serverUpgrade mariadb-backup-debuginfoUpgrade mariadb-errmsgUpgrade mariadb-debuginfoUpgrade mariadb-debugsourceUpgrade mariadbUpgrade Judy-debugsourceUpgrade mariadb-embedded-debuginfoUpgrade Judy-debuginfoUpgrade mariadb-embeddedUpgrade mariadb-oqgraph-engineUpgrade galera-debugsourceUpgrade mariadb-test-debuginfoUpgrade mariadb-server-galeraUpgrade mariadb-server-utils-debuginfoUpgrade galeraUpgrade mariadb-commonNo solution existsUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-server-debuginfoUpgrade mariadb-embedded-develUpgrade mariadb-oqgraph-engine-debuginfoUpgrade JudyUpgrade mariadb-develUpgrade mariadb-pamUpgrade mariadb-backupUpgrade mariadb-serverUpgrade galera-debuginfo | Apr 27, 2022 | Jan 29, 2022 |
| Rocky_linux | — | Upgrade mariadb-debuginfoUpgrade mariadb-pam-debuginfoUpgrade mariadb-server-galeraUpgrade mariadb-embedded-develUpgrade mariadb-embeddedUpgrade mariadb-server-utils-debuginfoUpgrade galeraUpgrade mariadb-embedded-debuginfoUpgrade Judy-debugsourceUpgrade mariadb-oqgraph-engineUpgrade mariadb-commonUpgrade mariadb-errmsgUpgrade mariadb-backupUpgrade mariadb-gssapi-serverUpgrade galera-debugsourceUpgrade mariadb-serverUpgrade mariadb-test-debuginfoUpgrade mariadb-develUpgrade Judy-debuginfoUpgrade mariadb-server-utilsUpgrade mariadb-pamUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-debugsourceUpgrade mariadb-testUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-server-debuginfoUpgrade mariadb-backup-debuginfoUpgrade mariadbUpgrade JudyUpgrade galera-debuginfo | Mar 5, 2024 | Jan 29, 2022 |
| Suse | — | Upgrade mariadb-toolsUpgrade mariadb-errormessagesUpgrade mariadb-testUpgrade mariadbUpgrade libmysqld-develUpgrade libmariadbd-develUpgrade mariadb-benchUpgrade mariadb-clientUpgrade mariadb-rpm-macrosUpgrade mariadb-galeraUpgrade libmariadbd19Upgrade libmysqld19 | Mar 5, 2022 | Jan 29, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 29, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub