MariaDB through 10.5.9 allows a set_var.cc application crash via certain uses of an UPDATE statement in conjunction with a nested subquery.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade galeraUpgrade mariadbUpgrade mariadb-serverUpgrade mariadb-pamUpgrade mariadb-embedded-develUpgrade JudyUpgrade mariadb-embeddedUpgrade mariadb-commonUpgrade mariadb-server-galeraUpgrade mariadb-testUpgrade mariadb-errmsgUpgrade mariadb-backupUpgrade mariadb-oqgraph-engine | May 4, 2022 | Feb 1, 2022 |
| Alpine Linux | — | Upgrade mariadb | Mar 26, 2024 | Feb 1, 2022 |
| Amazon Linux Ami 2 | — | Upgrade mariadb-errmsgUpgrade mariadb-sphinx-engineUpgrade mariadb-pamUpgrade mariadb-testUpgrade mariadb-server-utilsUpgrade mariadb-embeddedUpgrade mariadb-connect-engineUpgrade mariadbUpgrade mariadb-gssapi-serverUpgrade mariadb-debuginfoUpgrade mariadb-s3-engineUpgrade mariadb-configUpgrade mariadb-server-galeraUpgrade mariadb-embedded-develUpgrade mariadb-rocksdb-engineUpgrade mariadb-serverUpgrade mariadb-cracklib-password-checkUpgrade mariadb-commonUpgrade mariadb-oqgraph-engineUpgrade mariadb-develUpgrade mariadb-backupUpgrade mariadb-libs | Sep 28, 2023 | Feb 1, 2022 |
| Amazon_linux_2023 | — | Upgrade mariadb105-backup-debuginfoUpgrade mariadb105-rocksdb-engine-debuginfoUpgrade mariadb105-cracklib-password-checkUpgrade mariadb105-oqgraph-engine-debuginfoUpgrade mariadb105-pamUpgrade mariadb105-server-utilsUpgrade mariadb105-sphinx-engine-debuginfoUpgrade mariadb105-commonUpgrade mariadb105-oqgraph-engineUpgrade mariadb105-rocksdb-engineUpgrade mariadb105-sphinx-engineUpgrade mariadb105-serverUpgrade mariadb105Upgrade mariadb105-develUpgrade mariadb105-debuginfoUpgrade mariadb105-gssapi-serverUpgrade mariadb105-server-utils-debuginfoUpgrade mariadb105-gssapi-server-debuginfoUpgrade mariadb105-debugsourceUpgrade mariadb105-cracklib-password-check-debuginfoUpgrade mariadb105-connect-engine-debuginfoUpgrade mariadb105-backupUpgrade mariadb105-errmsgUpgrade mariadb105-test-debuginfoUpgrade mariadb105-testUpgrade mariadb105-pam-debuginfoUpgrade mariadb105-connect-engineUpgrade mariadb105-server-debuginfo | Feb 17, 2025 | May 10, 2021 |
| Centos_linux | — | Upgrade mariadb-errmsgUpgrade galera-debugsourceUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-pam-debuginfoUpgrade mariadb-commonUpgrade mariadb-embeddedUpgrade mariadb-debuginfoUpgrade mariadb-embedded-debuginfoUpgrade galeraUpgrade mariadb-oqgraph-engineUpgrade Judy-debugsourceUpgrade mariadb-serverUpgrade mariadb-backupUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-server-galeraUpgrade mariadb-test-debuginfoUpgrade mariadb-server-utilsUpgrade mariadb-embedded-develUpgrade mariadb-debugsourceUpgrade mariadb-gssapi-serverUpgrade mariadbUpgrade Judy-debuginfoUpgrade JudyUpgrade mariadb-testUpgrade mariadb-pamUpgrade mariadb-backup-debuginfoUpgrade mariadb-server-debuginfoUpgrade mariadb-develUpgrade mariadb-server-utils-debuginfoUpgrade galera-debuginfo | Apr 27, 2022 | Feb 1, 2022 |
| Debian | — | Upgrade mariadb-10.5 | Jul 30, 2024 | Feb 1, 2022 |
| Gentoo Linux | — | Upgrade dev-db/mariadb. | May 10, 2024 | Feb 1, 2022 |
| Huawei Euleros 2_0_sp3 | — | Upgrade mariadb-develUpgrade mariadbUpgrade mariadb-benchUpgrade mariadb-serverUpgrade mariadb-libs | May 25, 2022 | Feb 1, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade mariadb-serverUpgrade mariadb-libsUpgrade mariadb-develUpgrade mariadbUpgrade mariadb-bench | Apr 26, 2022 | Feb 1, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade mariadb-develUpgrade mariadb-commonUpgrade mariadb | Aug 18, 2022 | Feb 1, 2022 |
| Mariadb Mariadb | — | Upgrade MariaDB to the latest version | Mar 4, 2025 | Feb 1, 2022 |
| Oracle_linux | — | Upgrade mariadb-errmsgUpgrade mariadb-serverUpgrade mariadb-embeddedUpgrade mariadb-gssapi-serverUpgrade mariadb-develUpgrade mariadb-server-galeraUpgrade mariadb-server-utilsUpgrade mariadb-backupUpgrade mariadb-oqgraph-engineUpgrade galeraUpgrade mariadb-embedded-develUpgrade mariadb-pamUpgrade JudyUpgrade mariadb-testUpgrade mariadb-commonUpgrade mariadb | Apr 28, 2022 | May 10, 2021 |
| Redhat_linux | — | Upgrade mariadb-serverUpgrade mariadbUpgrade mariadb-server-debuginfoUpgrade mariadb-embedded-develUpgrade mariadb-oqgraph-engineUpgrade mariadb-commonUpgrade mariadb-backupUpgrade galeraUpgrade mariadb-test-debuginfoUpgrade mariadb-embedded-debuginfoUpgrade mariadb-server-utils-debuginfoNo solution existsUpgrade mariadb-server-utilsUpgrade mariadb-develUpgrade JudyUpgrade mariadb-server-galeraUpgrade mariadb-errmsgUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-pam-debuginfoUpgrade Judy-debugsourceUpgrade Judy-debuginfoUpgrade mariadb-testUpgrade mariadb-backup-debuginfoUpgrade galera-debugsourceUpgrade mariadb-pamUpgrade mariadb-debugsourceUpgrade mariadb-gssapi-server-debuginfoUpgrade galera-debuginfoUpgrade mariadb-embeddedUpgrade mariadb-gssapi-serverUpgrade mariadb-debuginfo | Apr 27, 2022 | Feb 1, 2022 |
| Rocky_linux | — | Upgrade galera-debugsourceUpgrade Judy-debuginfoUpgrade mariadb-embeddedUpgrade mariadb-testUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-oqgraph-engineUpgrade mariadb-pam-debuginfoUpgrade mariadb-server-utilsUpgrade mariadb-gssapi-serverUpgrade mariadb-backupUpgrade mariadb-server-utils-debuginfoUpgrade galeraUpgrade mariadb-debugsourceUpgrade mariadb-server-debuginfoUpgrade mariadb-debuginfoUpgrade mariadb-serverUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-server-galeraUpgrade JudyUpgrade mariadb-embedded-debuginfoUpgrade galera-debuginfoUpgrade mariadb-test-debuginfoUpgrade mariadb-commonUpgrade Judy-debugsourceUpgrade mariadbUpgrade mariadb-develUpgrade mariadb-embedded-develUpgrade mariadb-pamUpgrade mariadb-errmsgUpgrade mariadb-backup-debuginfo | Mar 5, 2024 | Feb 1, 2022 |
| Ubuntu | — | Upgrade mariadb-10.3 | Nov 19, 2024 | Feb 1, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 1, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub