save_window_function_values in MariaDB before 10.6.3 allows an application crash because of incorrect handling of with_window_func=true for a subquery.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mariadb-oqgraph-engineUpgrade mariadb-server-galeraUpgrade mariadb-errmsgUpgrade mariadb-develUpgrade mariadb-server-utilsUpgrade mariadb-commonUpgrade JudyUpgrade mariadbUpgrade galeraUpgrade mariadb-serverUpgrade mariadb-embedded-develUpgrade mariadb-backupUpgrade mariadb-testUpgrade mariadb-pamUpgrade mariadb-embeddedUpgrade mariadb-gssapi-server | May 4, 2022 | Jan 29, 2022 |
| Amazon Linux Ami 2 | — | Upgrade mariadb-testUpgrade mariadb-debuginfoUpgrade mariadb-gssapi-serverUpgrade mariadb-pamUpgrade mariadb-server-galeraUpgrade mariadbUpgrade mariadb-connect-engineUpgrade mariadb-embeddedUpgrade mariadb-oqgraph-engineUpgrade mariadb-server-utilsUpgrade mariadb-backupUpgrade mariadb-errmsgUpgrade mariadb-configUpgrade mariadb-develUpgrade mariadb-rocksdb-engineUpgrade mariadb-s3-engineUpgrade mariadb-commonUpgrade mariadb-serverUpgrade mariadb-embedded-develUpgrade mariadb-libsUpgrade mariadb-cracklib-password-checkUpgrade mariadb-sphinx-engine | Sep 28, 2023 | Jan 29, 2022 |
| Amazon_linux_2023 | — | Upgrade mariadb105-cracklib-password-check-debuginfoUpgrade mariadb105-cracklib-password-checkUpgrade mariadb105-server-debuginfoUpgrade mariadb105-develUpgrade mariadb105-server-utils-debuginfoUpgrade mariadb105-gssapi-server-debuginfoUpgrade mariadb105-backupUpgrade mariadb105-errmsgUpgrade mariadb105-pam-debuginfoUpgrade mariadb105-oqgraph-engine-debuginfoUpgrade mariadb105-test-debuginfoUpgrade mariadb105-debugsourceUpgrade mariadb105-connect-engine-debuginfoUpgrade mariadb105-backup-debuginfoUpgrade mariadb105-debuginfoUpgrade mariadb105-rocksdb-engineUpgrade mariadb105-pamUpgrade mariadb105-oqgraph-engineUpgrade mariadb105-commonUpgrade mariadb105-serverUpgrade mariadb105-testUpgrade mariadb105-sphinx-engine-debuginfoUpgrade mariadb105Upgrade mariadb105-gssapi-serverUpgrade mariadb105-sphinx-engineUpgrade mariadb105-server-utilsUpgrade mariadb105-rocksdb-engine-debuginfoUpgrade mariadb105-connect-engine | Feb 17, 2025 | May 10, 2021 |
| Centos_linux | — | Upgrade mariadb-gssapi-serverUpgrade Judy-debuginfoUpgrade mariadb-debuginfoUpgrade mariadb-server-debuginfoUpgrade mariadb-embeddedUpgrade mariadb-test-debuginfoUpgrade mariadb-develUpgrade mariadb-server-utilsUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-embedded-develUpgrade mariadb-pamUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-backup-debuginfoUpgrade JudyUpgrade galeraUpgrade mariadb-server-galeraUpgrade mariadb-oqgraph-engine-debuginfoUpgrade galera-debuginfoUpgrade mariadb-oqgraph-engineUpgrade Judy-debugsourceUpgrade mariadb-commonUpgrade galera-debugsourceUpgrade mariadb-backupUpgrade mariadb-embedded-debuginfoUpgrade mariadb-serverUpgrade mariadb-testUpgrade mariadbUpgrade mariadb-pam-debuginfoUpgrade mariadb-errmsgUpgrade mariadb-debugsource | Apr 27, 2022 | Jan 29, 2022 |
| Debian | — | Upgrade mariadb-10.5 | Jul 30, 2024 | Jan 29, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade mariadbUpgrade mariadb-commonUpgrade mariadb-devel | Aug 18, 2022 | Jan 29, 2022 |
| Mariadb Mariadb | — | Upgrade MariaDB to the latest version | Mar 4, 2025 | Jan 29, 2022 |
| Oracle_linux | — | Upgrade mariadb-errmsgUpgrade galeraUpgrade mariadb-commonUpgrade JudyUpgrade mariadb-oqgraph-engineUpgrade mariadb-backupUpgrade mariadb-embedded-develUpgrade mariadb-pamUpgrade mariadb-testUpgrade mariadb-serverUpgrade mariadb-develUpgrade mariadb-server-galeraUpgrade mariadb-embeddedUpgrade mariadbUpgrade mariadb-gssapi-serverUpgrade mariadb-server-utils | Apr 28, 2022 | May 10, 2021 |
| Redhat_linux | — | Upgrade mariadb-debugsourceUpgrade Judy-debugsourceUpgrade mariadb-pam-debuginfoUpgrade mariadb-embeddedUpgrade mariadb-embedded-debuginfoUpgrade mariadb-server-utilsUpgrade Judy-debuginfoUpgrade mariadbUpgrade mariadb-debuginfoUpgrade mariadb-backup-debuginfoUpgrade mariadb-gssapi-serverUpgrade mariadb-testUpgrade mariadb-errmsgUpgrade mariadb-develUpgrade mariadb-oqgraph-engineUpgrade mariadb-serverUpgrade galera-debugsourceUpgrade mariadb-test-debuginfoUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-server-debuginfoUpgrade mariadb-embedded-develUpgrade mariadb-server-utils-debuginfoUpgrade galeraUpgrade mariadb-pamUpgrade JudyUpgrade mariadb-commonUpgrade mariadb-gssapi-server-debuginfoNo solution existsUpgrade mariadb-backupUpgrade galera-debuginfoUpgrade mariadb-server-galera | Apr 27, 2022 | Jan 29, 2022 |
| Rocky_linux | — | Upgrade mariadb-test-debuginfoUpgrade mariadb-oqgraph-engineUpgrade mariadb-embedded-debuginfoUpgrade mariadb-errmsgUpgrade mariadb-backupUpgrade mariadb-gssapi-serverUpgrade mariadb-pam-debuginfoUpgrade mariadb-server-utils-debuginfoUpgrade galera-debugsourceUpgrade mariadb-debuginfoUpgrade galeraUpgrade mariadb-server-galeraUpgrade mariadb-serverUpgrade mariadb-embedded-develUpgrade mariadb-develUpgrade mariadb-embeddedUpgrade Judy-debuginfoUpgrade Judy-debugsourceUpgrade mariadb-commonUpgrade mariadb-backup-debuginfoUpgrade mariadb-debugsourceUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-testUpgrade galera-debuginfoUpgrade mariadb-pamUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadbUpgrade JudyUpgrade mariadb-server-debuginfoUpgrade mariadb-server-utils | Mar 5, 2024 | Jan 29, 2022 |
| Suse | — | Upgrade mariadb-benchUpgrade mariadb-clientUpgrade libmysqld-develUpgrade libmysqld19Upgrade mariadb-galeraUpgrade libmariadbd19Upgrade mariadb-rpm-macrosUpgrade libmariadbd-develUpgrade mariadb-toolsUpgrade mariadb-testUpgrade mariadbUpgrade mariadb-errormessages | Mar 5, 2022 | Jan 29, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 29, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub