MariaDB through 10.5.9 allows a set_var.cc application crash via certain uses of an UPDATE statement in conjunction with a nested subquery.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mariadb-develUpgrade mariadb-server-utilsUpgrade mariadb-pamUpgrade mariadb-gssapi-serverUpgrade mariadb-embeddedUpgrade mariadb-embedded-develUpgrade mariadb-backupUpgrade mariadb-serverUpgrade mariadbUpgrade mariadb-oqgraph-engineUpgrade mariadb-server-galeraUpgrade mariadb-commonUpgrade galeraUpgrade mariadb-testUpgrade mariadb-errmsg | May 4, 2022 | Feb 1, 2022 |
| Alpine Linux | — | Upgrade mariadb | Mar 26, 2024 | Feb 1, 2022 |
| Amazon Linux Ami 2 | — | Upgrade mariadb-backupUpgrade mariadb-embedded-develUpgrade mariadb-libsUpgrade mariadb-configUpgrade mariadb-commonUpgrade mariadb-develUpgrade mariadb-oqgraph-engineUpgrade mariadb-server-utilsUpgrade mariadb-debuginfoUpgrade mariadb-server-galeraUpgrade mariadb-testUpgrade mariadb-embeddedUpgrade mariadb-pamUpgrade mariadb-cracklib-password-checkUpgrade mariadb-sphinx-engineUpgrade mariadb-gssapi-serverUpgrade mariadb-errmsgUpgrade mariadb-connect-engineUpgrade mariadb-s3-engineUpgrade mariadb-serverUpgrade mariadb-rocksdb-engineUpgrade mariadb | Sep 28, 2023 | Feb 1, 2022 |
| Amazon_linux_2023 | — | Upgrade mariadb105-test-debuginfoUpgrade mariadb105-gssapi-server-debuginfoUpgrade mariadb105-connect-engineUpgrade mariadb105-backupUpgrade mariadb105-errmsgUpgrade mariadb105-pam-debuginfoUpgrade mariadb105-debuginfoUpgrade mariadb105-testUpgrade mariadb105-debugsourceUpgrade mariadb105-connect-engine-debuginfoUpgrade mariadb105-cracklib-password-check-debuginfoUpgrade mariadb105-server-utils-debuginfoUpgrade mariadb105-server-debuginfoUpgrade mariadb105-develUpgrade mariadb105-gssapi-serverUpgrade mariadb105Upgrade mariadb105-oqgraph-engine-debuginfoUpgrade mariadb105-rocksdb-engineUpgrade mariadb105-serverUpgrade mariadb105-cracklib-password-checkUpgrade mariadb105-sphinx-engine-debuginfoUpgrade mariadb105-backup-debuginfoUpgrade mariadb105-rocksdb-engine-debuginfoUpgrade mariadb105-sphinx-engineUpgrade mariadb105-commonUpgrade mariadb105-oqgraph-engineUpgrade mariadb105-server-utilsUpgrade mariadb105-pam | Feb 17, 2025 | May 10, 2021 |
| Centos_linux | — | Upgrade mariadb-oqgraph-engine-debuginfoUpgrade Judy-debugsourceUpgrade mariadb-oqgraph-engineUpgrade mariadb-serverUpgrade mariadb-embeddedUpgrade mariadb-debuginfoUpgrade mariadb-pam-debuginfoUpgrade mariadb-commonUpgrade mariadb-backupUpgrade mariadb-errmsgUpgrade mariadb-embedded-debuginfoUpgrade mariadb-gssapi-server-debuginfoUpgrade galera-debugsourceUpgrade galeraUpgrade mariadb-backup-debuginfoUpgrade mariadb-server-utils-debuginfoUpgrade JudyUpgrade Judy-debuginfoUpgrade mariadb-pamUpgrade mariadb-server-debuginfoUpgrade mariadb-embedded-develUpgrade mariadb-debugsourceUpgrade mariadb-gssapi-serverUpgrade mariadb-server-galeraUpgrade galera-debuginfoUpgrade mariadbUpgrade mariadb-test-debuginfoUpgrade mariadb-testUpgrade mariadb-server-utilsUpgrade mariadb-devel | Apr 27, 2022 | Feb 1, 2022 |
| Debian | — | Upgrade mariadb-10.5 | Jul 30, 2024 | Feb 1, 2022 |
| Gentoo Linux | — | Upgrade dev-db/mariadb. | May 10, 2024 | Feb 1, 2022 |
| Huawei Euleros 2_0_sp3 | — | Upgrade mariadbUpgrade mariadb-develUpgrade mariadb-benchUpgrade mariadb-libsUpgrade mariadb-server | May 25, 2022 | Feb 1, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade mariadb-benchUpgrade mariadb-develUpgrade mariadbUpgrade mariadb-serverUpgrade mariadb-libs | Apr 26, 2022 | Feb 1, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade mariadbUpgrade mariadb-commonUpgrade mariadb-devel | Aug 18, 2022 | Feb 1, 2022 |
| Mariadb Mariadb | — | Upgrade MariaDB to the latest version | Mar 4, 2025 | Feb 1, 2022 |
| Oracle_linux | — | Upgrade mariadb-serverUpgrade mariadb-gssapi-serverUpgrade mariadb-errmsgUpgrade mariadb-embeddedUpgrade mariadb-backupUpgrade mariadb-oqgraph-engineUpgrade mariadb-develUpgrade mariadb-server-galeraUpgrade mariadb-server-utilsUpgrade galeraUpgrade JudyUpgrade mariadb-pamUpgrade mariadb-commonUpgrade mariadbUpgrade mariadb-testUpgrade mariadb-embedded-devel | Apr 28, 2022 | May 10, 2021 |
| Redhat_linux | — | Upgrade mariadb-errmsgUpgrade mariadb-backupUpgrade galeraUpgrade mariadb-server-galeraUpgrade mariadb-embedded-develUpgrade mariadb-commonUpgrade mariadb-embedded-debuginfoUpgrade mariadb-develUpgrade mariadb-server-debuginfoUpgrade mariadb-serverUpgrade mariadb-server-utils-debuginfoUpgrade JudyUpgrade mariadb-oqgraph-engineUpgrade mariadbUpgrade mariadb-test-debuginfoNo solution existsUpgrade mariadb-server-utilsUpgrade mariadb-debugsourceUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-pamUpgrade galera-debuginfoUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-embeddedUpgrade mariadb-backup-debuginfoUpgrade mariadb-gssapi-serverUpgrade galera-debugsourceUpgrade mariadb-debuginfoUpgrade mariadb-pam-debuginfoUpgrade Judy-debuginfoUpgrade mariadb-testUpgrade Judy-debugsource | Apr 27, 2022 | Feb 1, 2022 |
| Rocky_linux | — | Upgrade mariadb-backup-debuginfoUpgrade mariadb-pamUpgrade Judy-debugsourceUpgrade mariadb-test-debuginfoUpgrade mariadb-commonUpgrade mariadb-errmsgUpgrade galera-debuginfoUpgrade mariadb-embedded-develUpgrade mariadb-develUpgrade mariadbUpgrade mariadb-server-galeraUpgrade mariadb-embedded-debuginfoUpgrade JudyUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-debuginfoUpgrade mariadb-pam-debuginfoUpgrade mariadb-serverUpgrade mariadb-testUpgrade galera-debugsourceUpgrade mariadb-server-debuginfoUpgrade Judy-debuginfoUpgrade mariadb-embeddedUpgrade mariadb-debugsourceUpgrade galeraUpgrade mariadb-server-utilsUpgrade mariadb-oqgraph-engineUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-gssapi-serverUpgrade mariadb-backupUpgrade mariadb-server-utils-debuginfo | Mar 5, 2024 | Feb 1, 2022 |
| Ubuntu | — | Upgrade mariadb-10.3 | Nov 19, 2024 | Feb 1, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 1, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub