save_window_function_values in MariaDB before 10.6.3 allows an application crash because of incorrect handling of with_window_func=true for a subquery.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mariadb-testUpgrade mariadb-gssapi-serverUpgrade mariadb-embeddedUpgrade mariadb-pamUpgrade mariadb-oqgraph-engineUpgrade mariadbUpgrade JudyUpgrade mariadb-serverUpgrade mariadb-develUpgrade mariadb-commonUpgrade mariadb-backupUpgrade galeraUpgrade mariadb-embedded-develUpgrade mariadb-server-utilsUpgrade mariadb-server-galeraUpgrade mariadb-errmsg | May 4, 2022 | Jan 29, 2022 |
| Amazon Linux Ami 2 | — | Upgrade mariadb-embedded-develUpgrade mariadb-commonUpgrade mariadb-rocksdb-engineUpgrade mariadb-serverUpgrade mariadb-libsUpgrade mariadb-configUpgrade mariadb-develUpgrade mariadb-sphinx-engineUpgrade mariadb-cracklib-password-checkUpgrade mariadb-s3-engineUpgrade mariadb-testUpgrade mariadb-debuginfoUpgrade mariadbUpgrade mariadb-server-utilsUpgrade mariadb-gssapi-serverUpgrade mariadb-oqgraph-engineUpgrade mariadb-backupUpgrade mariadb-embeddedUpgrade mariadb-pamUpgrade mariadb-errmsgUpgrade mariadb-server-galeraUpgrade mariadb-connect-engine | Sep 28, 2023 | Jan 29, 2022 |
| Amazon_linux_2023 | — | Upgrade mariadb105-develUpgrade mariadb105-test-debuginfoUpgrade mariadb105-pam-debuginfoUpgrade mariadb105-backupUpgrade mariadb105-gssapi-server-debuginfoUpgrade mariadb105-server-utils-debuginfoUpgrade mariadb105-cracklib-password-check-debuginfoUpgrade mariadb105-cracklib-password-checkUpgrade mariadb105-server-debuginfoUpgrade mariadb105-errmsgUpgrade mariadb105-oqgraph-engine-debuginfoUpgrade mariadb105-connect-engineUpgrade mariadb105-sphinx-engineUpgrade mariadb105-debugsourceUpgrade mariadb105-gssapi-serverUpgrade mariadb105-testUpgrade mariadb105-serverUpgrade mariadb105-sphinx-engine-debuginfoUpgrade mariadb105-pamUpgrade mariadb105-oqgraph-engineUpgrade mariadb105-commonUpgrade mariadb105-rocksdb-engineUpgrade mariadb105Upgrade mariadb105-backup-debuginfoUpgrade mariadb105-debuginfoUpgrade mariadb105-connect-engine-debuginfoUpgrade mariadb105-server-utilsUpgrade mariadb105-rocksdb-engine-debuginfo | Feb 17, 2025 | May 10, 2021 |
| Centos_linux | — | Upgrade mariadb-backup-debuginfoUpgrade mariadb-gssapi-serverUpgrade JudyUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-debuginfoUpgrade mariadb-server-debuginfoUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-embedded-develUpgrade mariadb-embeddedUpgrade mariadb-pamUpgrade mariadb-server-utilsUpgrade mariadb-test-debuginfoUpgrade mariadb-develUpgrade Judy-debuginfoUpgrade mariadb-embedded-debuginfoUpgrade mariadb-debugsourceUpgrade galera-debuginfoUpgrade mariadb-commonUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-backupUpgrade galeraUpgrade mariadb-server-galeraUpgrade galera-debugsourceUpgrade mariadb-testUpgrade mariadb-serverUpgrade mariadb-pam-debuginfoUpgrade mariadb-errmsgUpgrade mariadbUpgrade Judy-debugsourceUpgrade mariadb-oqgraph-engine | Apr 27, 2022 | Jan 29, 2022 |
| Debian | — | Upgrade mariadb-10.5 | Jul 30, 2024 | Jan 29, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade mariadb-commonUpgrade mariadb-develUpgrade mariadb | Aug 18, 2022 | Jan 29, 2022 |
| Mariadb Mariadb | — | Upgrade MariaDB to the latest version | Mar 4, 2025 | Jan 29, 2022 |
| Oracle_linux | — | Upgrade mariadb-server-utilsUpgrade mariadb-gssapi-serverUpgrade mariadb-server-galeraUpgrade mariadbUpgrade mariadb-develUpgrade mariadb-embeddedUpgrade JudyUpgrade mariadb-oqgraph-engineUpgrade galeraUpgrade mariadb-serverUpgrade mariadb-testUpgrade mariadb-embedded-develUpgrade mariadb-pamUpgrade mariadb-backupUpgrade mariadb-commonUpgrade mariadb-errmsg | Apr 28, 2022 | May 10, 2021 |
| Redhat_linux | — | Upgrade Judy-debuginfoUpgrade Judy-debugsourceUpgrade mariadb-debuginfoUpgrade mariadb-errmsgUpgrade mariadb-pam-debuginfoUpgrade mariadb-embedded-debuginfoUpgrade mariadb-gssapi-serverUpgrade mariadbUpgrade mariadb-testUpgrade mariadb-embeddedUpgrade mariadb-backup-debuginfoUpgrade mariadb-debugsourceUpgrade mariadb-server-utilsUpgrade mariadb-server-galeraUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-pamUpgrade mariadb-develUpgrade mariadb-commonNo solution existsUpgrade mariadb-oqgraph-engineUpgrade galera-debuginfoUpgrade mariadb-serverUpgrade mariadb-server-debuginfoUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-embedded-develUpgrade JudyUpgrade mariadb-backupUpgrade mariadb-gssapi-server-debuginfoUpgrade galera-debugsourceUpgrade mariadb-test-debuginfoUpgrade galera | Apr 27, 2022 | Jan 29, 2022 |
| Rocky_linux | — | Upgrade mariadb-pamUpgrade galera-debuginfoUpgrade mariadb-server-utilsUpgrade mariadb-server-debuginfoUpgrade mariadb-backup-debuginfoUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-testUpgrade mariadbUpgrade JudyUpgrade mariadb-debugsourceUpgrade mariadb-oqgraph-engine-debuginfoUpgrade galeraUpgrade mariadb-oqgraph-engineUpgrade mariadb-gssapi-serverUpgrade mariadb-server-galeraUpgrade mariadb-debuginfoUpgrade Judy-debuginfoUpgrade mariadb-errmsgUpgrade mariadb-backupUpgrade mariadb-embedded-develUpgrade mariadb-pam-debuginfoUpgrade mariadb-serverUpgrade mariadb-test-debuginfoUpgrade galera-debugsourceUpgrade mariadb-embeddedUpgrade mariadb-commonUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-embedded-debuginfoUpgrade Judy-debugsourceUpgrade mariadb-devel | Mar 5, 2024 | Jan 29, 2022 |
| Suse | — | Upgrade mariadb-galeraUpgrade mariadb-clientUpgrade libmariadbd19Upgrade libmariadbd-develUpgrade mariadb-rpm-macrosUpgrade libmysqld19Upgrade mariadb-benchUpgrade libmysqld-develUpgrade mariadb-testUpgrade mariadb-errormessagesUpgrade mariadb-toolsUpgrade mariadb | Mar 5, 2022 | Jan 29, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 29, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub