MariaDB through 10.5.9 allows a set_var.cc application crash via certain uses of an UPDATE statement in conjunction with a nested subquery.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mariadb-server-utilsUpgrade mariadb-embedded-develUpgrade JudyUpgrade mariadb-gssapi-serverUpgrade mariadb-embeddedUpgrade mariadb-pamUpgrade mariadb-develUpgrade mariadb-errmsgUpgrade galeraUpgrade mariadb-testUpgrade mariadb-server-galeraUpgrade mariadb-backupUpgrade mariadb-serverUpgrade mariadb-oqgraph-engineUpgrade mariadbUpgrade mariadb-common | May 4, 2022 | Feb 1, 2022 |
| Alpine Linux | — | Upgrade mariadb | Mar 26, 2024 | Feb 1, 2022 |
| Amazon Linux Ami 2 | — | Upgrade mariadb-cracklib-password-checkUpgrade mariadb-serverUpgrade mariadb-oqgraph-engineUpgrade mariadb-configUpgrade mariadb-s3-engineUpgrade mariadb-server-galeraUpgrade mariadb-libsUpgrade mariadb-commonUpgrade mariadb-rocksdb-engineUpgrade mariadb-embedded-develUpgrade mariadb-backupUpgrade mariadb-develUpgrade mariadb-pamUpgrade mariadb-connect-engineUpgrade mariadb-embeddedUpgrade mariadb-debuginfoUpgrade mariadb-testUpgrade mariadb-gssapi-serverUpgrade mariadb-errmsgUpgrade mariadb-sphinx-engineUpgrade mariadbUpgrade mariadb-server-utils | Sep 28, 2023 | Feb 1, 2022 |
| Amazon_linux_2023 | — | Upgrade mariadb105-backupUpgrade mariadb105-gssapi-server-debuginfoUpgrade mariadb105-errmsgUpgrade mariadb105-debugsourceUpgrade mariadb105-gssapi-serverUpgrade mariadb105-cracklib-password-check-debuginfoUpgrade mariadb105-server-debuginfoUpgrade mariadb105-server-utils-debuginfoUpgrade mariadb105-test-debuginfoUpgrade mariadb105-develUpgrade mariadb105-debuginfoUpgrade mariadb105-connect-engine-debuginfoUpgrade mariadb105-testUpgrade mariadb105-pam-debuginfoUpgrade mariadb105-connect-engineUpgrade mariadb105-sphinx-engine-debuginfoUpgrade mariadb105-server-utilsUpgrade mariadb105-backup-debuginfoUpgrade mariadb105-pamUpgrade mariadb105-rocksdb-engineUpgrade mariadb105-cracklib-password-checkUpgrade mariadb105-oqgraph-engine-debuginfoUpgrade mariadb105-commonUpgrade mariadb105Upgrade mariadb105-oqgraph-engineUpgrade mariadb105-sphinx-engineUpgrade mariadb105-rocksdb-engine-debuginfoUpgrade mariadb105-server | Feb 17, 2025 | May 10, 2021 |
| Centos_linux | — | Upgrade mariadb-gssapi-serverUpgrade Judy-debuginfoUpgrade mariadb-debugsourceUpgrade mariadb-embedded-develUpgrade mariadb-pamUpgrade mariadb-server-debuginfoUpgrade mariadb-backup-debuginfoUpgrade mariadb-server-utilsUpgrade mariadb-testUpgrade JudyUpgrade galera-debuginfoUpgrade mariadb-server-galeraUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-develUpgrade mariadbUpgrade mariadb-test-debuginfoUpgrade mariadb-pam-debuginfoUpgrade mariadb-serverUpgrade mariadb-commonUpgrade mariadb-errmsgUpgrade mariadb-oqgraph-engineUpgrade mariadb-backupUpgrade mariadb-gssapi-server-debuginfoUpgrade galeraUpgrade mariadb-embedded-debuginfoUpgrade mariadb-embeddedUpgrade mariadb-debuginfoUpgrade Judy-debugsourceUpgrade mariadb-oqgraph-engine-debuginfoUpgrade galera-debugsource | Apr 27, 2022 | Feb 1, 2022 |
| Debian | — | Upgrade mariadb-10.5 | Jul 30, 2024 | Feb 1, 2022 |
| Gentoo Linux | — | Upgrade dev-db/mariadb. | May 10, 2024 | Feb 1, 2022 |
| Huawei Euleros 2_0_sp3 | — | Upgrade mariadb-serverUpgrade mariadb-libsUpgrade mariadbUpgrade mariadb-develUpgrade mariadb-bench | May 25, 2022 | Feb 1, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade mariadb-serverUpgrade mariadb-libsUpgrade mariadbUpgrade mariadb-benchUpgrade mariadb-devel | Apr 26, 2022 | Feb 1, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade mariadbUpgrade mariadb-develUpgrade mariadb-common | Aug 18, 2022 | Feb 1, 2022 |
| Mariadb Mariadb | — | Upgrade MariaDB to the latest version | Mar 4, 2025 | Feb 1, 2022 |
| Oracle_linux | — | Upgrade JudyUpgrade mariadb-embedded-develUpgrade mariadb-testUpgrade mariadbUpgrade mariadb-commonUpgrade mariadb-pamUpgrade mariadb-oqgraph-engineUpgrade mariadb-gssapi-serverUpgrade mariadb-develUpgrade mariadb-server-utilsUpgrade mariadb-errmsgUpgrade mariadb-embeddedUpgrade mariadb-server-galeraUpgrade mariadb-backupUpgrade galeraUpgrade mariadb-server | Apr 28, 2022 | May 10, 2021 |
| Redhat_linux | — | Upgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-backup-debuginfoUpgrade mariadb-embeddedUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-pamUpgrade galera-debugsourceUpgrade mariadb-debugsourceUpgrade mariadb-testUpgrade Judy-debuginfoUpgrade mariadb-pam-debuginfoUpgrade galera-debuginfoUpgrade mariadb-gssapi-serverUpgrade mariadb-debuginfoUpgrade Judy-debugsourceUpgrade mariadb-backupUpgrade mariadb-commonUpgrade mariadbUpgrade mariadb-serverUpgrade mariadb-server-debuginfoUpgrade JudyUpgrade mariadb-oqgraph-engineUpgrade mariadb-develUpgrade mariadb-server-utils-debuginfoNo solution existsUpgrade mariadb-server-utilsUpgrade mariadb-server-galeraUpgrade mariadb-embedded-debuginfoUpgrade mariadb-embedded-develUpgrade mariadb-test-debuginfoUpgrade mariadb-errmsgUpgrade galera | Apr 27, 2022 | Feb 1, 2022 |
| Rocky_linux | — | Upgrade mariadb-embedded-debuginfoUpgrade JudyUpgrade mariadbUpgrade mariadb-develUpgrade mariadb-commonUpgrade galera-debuginfoUpgrade mariadb-server-galeraUpgrade mariadb-backup-debuginfoUpgrade mariadb-pamUpgrade mariadb-errmsgUpgrade mariadb-test-debuginfoUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-embedded-develUpgrade Judy-debugsourceUpgrade mariadb-gssapi-serverUpgrade mariadb-debugsourceUpgrade galera-debugsourceUpgrade Judy-debuginfoUpgrade mariadb-debuginfoUpgrade mariadb-testUpgrade mariadb-serverUpgrade mariadb-server-utilsUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-oqgraph-engineUpgrade mariadb-embeddedUpgrade galeraUpgrade mariadb-pam-debuginfoUpgrade mariadb-server-debuginfoUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-backup | Mar 5, 2024 | Feb 1, 2022 |
| Ubuntu | — | Upgrade mariadb-10.3 | Nov 19, 2024 | Feb 1, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 1, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub