save_window_function_values in MariaDB before 10.6.3 allows an application crash because of incorrect handling of with_window_func=true for a subquery.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mariadb-oqgraph-engineUpgrade mariadb-server-utilsUpgrade JudyUpgrade mariadb-server-galeraUpgrade mariadb-serverUpgrade mariadbUpgrade galeraUpgrade mariadb-develUpgrade mariadb-backupUpgrade mariadb-commonUpgrade mariadb-embedded-develUpgrade mariadb-errmsgUpgrade mariadb-pamUpgrade mariadb-testUpgrade mariadb-embeddedUpgrade mariadb-gssapi-server | May 4, 2022 | Jan 29, 2022 |
| Amazon Linux Ami 2 | — | Upgrade mariadb-pamUpgrade mariadb-embeddedUpgrade mariadb-backupUpgrade mariadb-errmsgUpgrade mariadb-debuginfoUpgrade mariadb-connect-engineUpgrade mariadb-server-galeraUpgrade mariadb-gssapi-serverUpgrade mariadb-oqgraph-engineUpgrade mariadb-testUpgrade mariadbUpgrade mariadb-server-utilsUpgrade mariadb-embedded-develUpgrade mariadb-configUpgrade mariadb-libsUpgrade mariadb-develUpgrade mariadb-serverUpgrade mariadb-s3-engineUpgrade mariadb-cracklib-password-checkUpgrade mariadb-sphinx-engineUpgrade mariadb-rocksdb-engineUpgrade mariadb-common | Sep 28, 2023 | Jan 29, 2022 |
| Amazon_linux_2023 | — | Upgrade mariadb105-backup-debuginfoUpgrade mariadb105-sphinx-engine-debuginfoUpgrade mariadb105-commonUpgrade mariadb105-oqgraph-engineUpgrade mariadb105-serverUpgrade mariadb105Upgrade mariadb105-server-utilsUpgrade mariadb105-rocksdb-engineUpgrade mariadb105-sphinx-engineUpgrade mariadb105-pamUpgrade mariadb105-connect-engineUpgrade mariadb105-connect-engine-debuginfoUpgrade mariadb105-debuginfoUpgrade mariadb105-debugsourceUpgrade mariadb105-rocksdb-engine-debuginfoUpgrade mariadb105-testUpgrade mariadb105-gssapi-serverUpgrade mariadb105-pam-debuginfoUpgrade mariadb105-develUpgrade mariadb105-backupUpgrade mariadb105-errmsgUpgrade mariadb105-oqgraph-engine-debuginfoUpgrade mariadb105-cracklib-password-check-debuginfoUpgrade mariadb105-gssapi-server-debuginfoUpgrade mariadb105-server-utils-debuginfoUpgrade mariadb105-server-debuginfoUpgrade mariadb105-test-debuginfoUpgrade mariadb105-cracklib-password-check | Feb 17, 2025 | May 10, 2021 |
| Centos_linux | — | Upgrade mariadb-gssapi-serverUpgrade mariadb-test-debuginfoUpgrade mariadb-server-utilsUpgrade mariadb-pamUpgrade mariadb-develUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-embedded-develUpgrade mariadb-backup-debuginfoUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-server-debuginfoUpgrade JudyUpgrade Judy-debuginfoUpgrade mariadb-embeddedUpgrade mariadb-debuginfoUpgrade mariadb-debugsourceUpgrade mariadbUpgrade mariadb-pam-debuginfoUpgrade mariadb-errmsgUpgrade mariadb-embedded-debuginfoUpgrade mariadb-serverUpgrade mariadb-oqgraph-engineUpgrade mariadb-commonUpgrade galera-debugsourceUpgrade galera-debuginfoUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-backupUpgrade galeraUpgrade mariadb-server-galeraUpgrade Judy-debugsourceUpgrade mariadb-test | Apr 27, 2022 | Jan 29, 2022 |
| Debian | — | Upgrade mariadb-10.5 | Jul 30, 2024 | Jan 29, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade mariadb-commonUpgrade mariadb-develUpgrade mariadb | Aug 18, 2022 | Jan 29, 2022 |
| Mariadb Mariadb | — | Upgrade MariaDB to the latest version | Mar 4, 2025 | Jan 29, 2022 |
| Oracle_linux | — | Upgrade mariadb-server-utilsUpgrade mariadb-develUpgrade mariadb-server-galeraUpgrade mariadbUpgrade mariadb-embeddedUpgrade mariadb-gssapi-serverUpgrade mariadb-oqgraph-engineUpgrade mariadb-embedded-develUpgrade JudyUpgrade mariadb-backupUpgrade mariadb-pamUpgrade mariadb-serverUpgrade mariadb-testUpgrade galeraUpgrade mariadb-commonUpgrade mariadb-errmsg | Apr 28, 2022 | May 10, 2021 |
| Redhat_linux | — | Upgrade mariadb-test-debuginfoUpgrade mariadb-commonUpgrade galera-debuginfoUpgrade JudyUpgrade mariadb-embedded-develUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-pamUpgrade mariadb-serverUpgrade mariadb-oqgraph-engineUpgrade mariadb-backupUpgrade galera-debugsourceUpgrade mariadb-server-galeraNo solution existsUpgrade galeraUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-server-debuginfoUpgrade mariadb-develUpgrade mariadb-server-utilsUpgrade mariadb-debugsourceUpgrade mariadb-debuginfoUpgrade mariadbUpgrade Judy-debuginfoUpgrade mariadb-pam-debuginfoUpgrade mariadb-embeddedUpgrade mariadb-gssapi-serverUpgrade mariadb-testUpgrade mariadb-backup-debuginfoUpgrade mariadb-embedded-debuginfoUpgrade Judy-debugsourceUpgrade mariadb-errmsg | Apr 27, 2022 | Jan 29, 2022 |
| Rocky_linux | — | Upgrade mariadb-server-debuginfoUpgrade mariadbUpgrade mariadb-gssapi-server-debuginfoUpgrade JudyUpgrade galera-debuginfoUpgrade mariadb-backup-debuginfoUpgrade mariadb-debugsourceUpgrade mariadb-testUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-server-utilsUpgrade mariadb-pamUpgrade mariadb-commonUpgrade mariadb-server-utils-debuginfoUpgrade Judy-debuginfoUpgrade mariadb-serverUpgrade mariadb-pam-debuginfoUpgrade mariadb-develUpgrade mariadb-debuginfoUpgrade mariadb-embedded-develUpgrade galeraUpgrade mariadb-gssapi-serverUpgrade mariadb-embeddedUpgrade mariadb-server-galeraUpgrade mariadb-errmsgUpgrade mariadb-oqgraph-engineUpgrade mariadb-backupUpgrade mariadb-embedded-debuginfoUpgrade Judy-debugsourceUpgrade mariadb-test-debuginfoUpgrade galera-debugsource | Mar 5, 2024 | Jan 29, 2022 |
| Suse | — | Upgrade libmariadbd-develUpgrade libmysqld19Upgrade mariadb-benchUpgrade libmariadbd19Upgrade mariadb-clientUpgrade mariadb-galeraUpgrade mariadb-rpm-macrosUpgrade libmysqld-develUpgrade mariadb-toolsUpgrade mariadb-errormessagesUpgrade mariadbUpgrade mariadb-test | Mar 5, 2022 | Jan 29, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 29, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub