save_window_function_values in MariaDB before 10.6.3 allows an application crash because of incorrect handling of with_window_func=true for a subquery.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mariadb-embeddedUpgrade mariadb-pamUpgrade mariadb-testUpgrade mariadb-gssapi-serverUpgrade mariadb-serverUpgrade mariadbUpgrade galeraUpgrade mariadb-backupUpgrade mariadb-embedded-develUpgrade mariadb-errmsgUpgrade JudyUpgrade mariadb-server-utilsUpgrade mariadb-oqgraph-engineUpgrade mariadb-server-galeraUpgrade mariadb-commonUpgrade mariadb-devel | May 4, 2022 | Jan 29, 2022 |
| Amazon Linux Ami 2 | — | Upgrade mariadb-gssapi-serverUpgrade mariadb-server-galeraUpgrade mariadb-debuginfoUpgrade mariadbUpgrade mariadb-testUpgrade mariadb-errmsgUpgrade mariadb-backupUpgrade mariadb-embeddedUpgrade mariadb-pamUpgrade mariadb-connect-engineUpgrade mariadb-server-utilsUpgrade mariadb-oqgraph-engineUpgrade mariadb-cracklib-password-checkUpgrade mariadb-rocksdb-engineUpgrade mariadb-serverUpgrade mariadb-s3-engineUpgrade mariadb-configUpgrade mariadb-libsUpgrade mariadb-develUpgrade mariadb-embedded-develUpgrade mariadb-commonUpgrade mariadb-sphinx-engine | Sep 28, 2023 | Jan 29, 2022 |
| Amazon_linux_2023 | — | Upgrade mariadb105-sphinx-engine-debuginfoUpgrade mariadb105-backup-debuginfoUpgrade mariadb105Upgrade mariadb105-serverUpgrade mariadb105-connect-engine-debuginfoUpgrade mariadb105-gssapi-serverUpgrade mariadb105-testUpgrade mariadb105-connect-engineUpgrade mariadb105-rocksdb-engine-debuginfoUpgrade mariadb105-rocksdb-engineUpgrade mariadb105-debuginfoUpgrade mariadb105-debugsourceUpgrade mariadb105-oqgraph-engineUpgrade mariadb105-pamUpgrade mariadb105-server-utilsUpgrade mariadb105-sphinx-engineUpgrade mariadb105-commonUpgrade mariadb105-develUpgrade mariadb105-server-debuginfoUpgrade mariadb105-cracklib-password-checkUpgrade mariadb105-server-utils-debuginfoUpgrade mariadb105-pam-debuginfoUpgrade mariadb105-errmsgUpgrade mariadb105-oqgraph-engine-debuginfoUpgrade mariadb105-test-debuginfoUpgrade mariadb105-cracklib-password-check-debuginfoUpgrade mariadb105-gssapi-server-debuginfoUpgrade mariadb105-backup | Feb 17, 2025 | May 10, 2021 |
| Centos_linux | — | Upgrade mariadb-develUpgrade mariadb-gssapi-serverUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-embedded-develUpgrade mariadb-test-debuginfoUpgrade mariadb-backup-debuginfoUpgrade JudyUpgrade mariadb-server-utilsUpgrade mariadb-server-debuginfoUpgrade mariadb-embeddedUpgrade Judy-debuginfoUpgrade mariadb-debuginfoUpgrade mariadb-pamUpgrade Judy-debugsourceUpgrade mariadb-errmsgUpgrade mariadb-commonUpgrade mariadb-oqgraph-engineUpgrade mariadb-testUpgrade mariadb-debugsourceUpgrade galera-debugsourceUpgrade mariadb-pam-debuginfoUpgrade mariadbUpgrade mariadb-backupUpgrade galeraUpgrade mariadb-server-galeraUpgrade mariadb-oqgraph-engine-debuginfoUpgrade galera-debuginfoUpgrade mariadb-serverUpgrade mariadb-embedded-debuginfo | Apr 27, 2022 | Jan 29, 2022 |
| Debian | — | Upgrade mariadb-10.5 | Jul 30, 2024 | Jan 29, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade mariadbUpgrade mariadb-develUpgrade mariadb-common | Aug 18, 2022 | Jan 29, 2022 |
| Mariadb Mariadb | — | Upgrade MariaDB to the latest version | Mar 4, 2025 | Jan 29, 2022 |
| Oracle_linux | — | Upgrade mariadb-errmsgUpgrade galeraUpgrade mariadb-serverUpgrade mariadb-pamUpgrade mariadb-oqgraph-engineUpgrade mariadb-commonUpgrade mariadb-embedded-develUpgrade mariadb-testUpgrade JudyUpgrade mariadb-backupUpgrade mariadb-embeddedUpgrade mariadb-server-utilsUpgrade mariadb-server-galeraUpgrade mariadb-develUpgrade mariadb-gssapi-serverUpgrade mariadb | Apr 28, 2022 | May 10, 2021 |
| Redhat_linux | — | Upgrade mariadb-server-galeraUpgrade mariadb-server-debuginfoUpgrade mariadb-serverUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-test-debuginfoUpgrade mariadb-oqgraph-engineUpgrade galeraUpgrade mariadb-embedded-develUpgrade mariadb-backupUpgrade mariadb-commonUpgrade mariadb-develNo solution existsUpgrade galera-debuginfoUpgrade JudyUpgrade mariadb-pamUpgrade mariadb-gssapi-server-debuginfoUpgrade galera-debugsourceUpgrade mariadb-backup-debuginfoUpgrade mariadb-errmsgUpgrade mariadb-embedded-debuginfoUpgrade Judy-debuginfoUpgrade mariadb-embeddedUpgrade mariadbUpgrade mariadb-debuginfoUpgrade mariadb-debugsourceUpgrade mariadb-gssapi-serverUpgrade mariadb-testUpgrade mariadb-pam-debuginfoUpgrade mariadb-server-utilsUpgrade Judy-debugsource | Apr 27, 2022 | Jan 29, 2022 |
| Rocky_linux | — | Upgrade galera-debugsourceUpgrade mariadb-test-debuginfoUpgrade mariadb-serverUpgrade mariadb-server-utils-debuginfoUpgrade Judy-debugsourceUpgrade mariadb-embedded-debuginfoUpgrade mariadb-commonUpgrade mariadb-develUpgrade mariadb-errmsgUpgrade mariadb-oqgraph-engineUpgrade mariadb-backupUpgrade Judy-debuginfoUpgrade mariadb-server-galeraUpgrade mariadb-debuginfoUpgrade mariadb-embedded-develUpgrade mariadb-pam-debuginfoUpgrade mariadb-gssapi-serverUpgrade mariadb-embeddedUpgrade galeraUpgrade mariadb-testUpgrade mariadb-pamUpgrade mariadb-server-debuginfoUpgrade galera-debuginfoUpgrade JudyUpgrade mariadbUpgrade mariadb-server-utilsUpgrade mariadb-debugsourceUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-backup-debuginfoUpgrade mariadb-gssapi-server-debuginfo | Mar 5, 2024 | Jan 29, 2022 |
| Suse | — | Upgrade mariadb-galeraUpgrade mariadb-clientUpgrade mariadb-benchUpgrade libmysqld-develUpgrade mariadb-rpm-macrosUpgrade libmariadbd19Upgrade libmariadbd-develUpgrade libmysqld19Upgrade mariadb-errormessagesUpgrade mariadb-toolsUpgrade mariadbUpgrade mariadb-test | Mar 5, 2022 | Jan 29, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 29, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub