MariaDB through 10.5.9 allows attackers to trigger a convert_const_to_int use-after-free when the BIGINT data type is used.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade galeraUpgrade mariadb-embedded-develUpgrade mariadb-commonUpgrade mariadb-errmsgUpgrade mariadb-embeddedUpgrade mariadb-develUpgrade mariadb-serverUpgrade mariadb-oqgraph-engineUpgrade mariadb-backupUpgrade mariadb-server-galeraUpgrade mariadb-testUpgrade mariadb-pamUpgrade mariadbUpgrade JudyUpgrade mariadb-server-utilsUpgrade mariadb-gssapi-server | Aug 8, 2022 | Feb 1, 2022 |
| Alpine Linux | — | Upgrade mariadb | Mar 21, 2024 | Feb 1, 2022 |
| Amazon Linux Ami 2 | — | Upgrade mariadb-pamUpgrade mariadb-gssapi-serverUpgrade mariadbUpgrade mariadb-embeddedUpgrade mariadb-server-utilsUpgrade mariadb-sphinx-engineUpgrade mariadb-develUpgrade mariadb-cracklib-password-checkUpgrade mariadb-testUpgrade mariadb-debuginfoUpgrade mariadb-configUpgrade mariadb-embedded-develUpgrade mariadb-errmsgUpgrade mariadb-libsUpgrade mariadb-oqgraph-engineUpgrade mariadb-s3-engineUpgrade mariadb-backupUpgrade mariadb-commonUpgrade mariadb-server-galeraUpgrade mariadb-rocksdb-engineUpgrade mariadb-serverUpgrade mariadb-connect-engine | Sep 28, 2023 | Feb 1, 2022 |
| Amazon_linux_2023 | — | Upgrade mariadb105-commonUpgrade mariadb105-cracklib-password-checkUpgrade mariadb105-testUpgrade mariadb105-test-debuginfoUpgrade mariadb105-backupUpgrade mariadb105-gssapi-serverUpgrade mariadb105-cracklib-password-check-debuginfoUpgrade mariadb105-develUpgrade mariadb105-connect-engine-debuginfoUpgrade mariadb105-server-utils-debuginfoUpgrade mariadb105-server-debuginfoUpgrade mariadb105-pam-debuginfoUpgrade mariadb105-rocksdb-engineUpgrade mariadb105-debugsourceUpgrade mariadb105-oqgraph-engine-debuginfoUpgrade mariadb105-pamUpgrade mariadb105-server-utilsUpgrade mariadb105-serverUpgrade mariadb105-debuginfoUpgrade mariadb105-sphinx-engineUpgrade mariadb105-connect-engineUpgrade mariadb105-sphinx-engine-debuginfoUpgrade mariadb105-oqgraph-engineUpgrade mariadb105Upgrade mariadb105-rocksdb-engine-debuginfoUpgrade mariadb105-errmsgUpgrade mariadb105-backup-debuginfoUpgrade mariadb105-gssapi-server-debuginfo | Feb 17, 2025 | May 10, 2021 |
| Centos_linux | — | Upgrade mariadb-debuginfoUpgrade mariadb-server-galeraUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-pam-debuginfoUpgrade mariadb-embedded-develUpgrade mysql-selinuxUpgrade mariadb-backupUpgrade mariadb-develUpgrade galeraUpgrade mariadb-serverUpgrade mariadb-oqgraph-engineUpgrade Judy-debuginfoUpgrade mariadb-embeddedUpgrade galera-debugsourceUpgrade mariadb-errmsgUpgrade mariadb-embedded-debuginfoUpgrade mariadb-debugsourceUpgrade mariadb-gssapi-serverUpgrade mariadb-test-debuginfoUpgrade mariadb-backup-debuginfoUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-server-utilsUpgrade mariadb-server-debuginfoUpgrade mariadb-testUpgrade JudyUpgrade galera-debuginfoUpgrade Judy-debugsourceUpgrade mariadb-pamUpgrade mariadbUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-common | Aug 3, 2022 | Feb 1, 2022 |
| Debian | — | Upgrade mariadb-10.5 | Sep 19, 2022 | Feb 1, 2022 |
| Freebsd | — | Upgrade mariadb105-clientUpgrade mariadb103-serverUpgrade mariadb104-clientUpgrade mariadb105-serverUpgrade mariadb103-clientUpgrade mariadb106-serverUpgrade mariadb104-serverUpgrade mariadb106-client | Nov 4, 2022 | May 23, 2022 |
| Gentoo Linux | — | Upgrade dev-db/mariadb. | May 10, 2024 | Feb 1, 2022 |
| Mariadb Mariadb | — | Upgrade MariaDB to the latest version | Mar 4, 2025 | Feb 1, 2022 |
| Oracle_linux | — | Upgrade mariadb-errmsgUpgrade mariadb-commonUpgrade mariadb-pamUpgrade mariadb-backupUpgrade JudyUpgrade mariadb-testUpgrade mariadb-server-galeraUpgrade mariadb-develUpgrade mariadb-embedded-develUpgrade mariadbUpgrade mariadb-serverUpgrade mysql-selinuxUpgrade mariadb-server-utilsUpgrade mariadb-gssapi-serverUpgrade mariadb-embeddedUpgrade galeraUpgrade mariadb-oqgraph-engine | Aug 4, 2022 | May 10, 2021 |
| Redhat_linux | — | Upgrade mariadb-embeddedUpgrade mariadb-test-debuginfoUpgrade Judy-debuginfoUpgrade mysql-selinuxUpgrade mariadb-oqgraph-engineUpgrade mariadb-serverUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-debugsourceUpgrade mariadb-server-debuginfoUpgrade mariadb-pam-debuginfoUpgrade mariadb-server-galeraUpgrade galeraUpgrade mariadb-debuginfoUpgrade mariadb-embedded-debuginfoUpgrade mariadb-backupUpgrade mariadb-errmsgUpgrade mariadb-server-utilsUpgrade mariadb-develUpgrade mariadb-gssapi-serverUpgrade galera-debugsourceUpgrade mariadbUpgrade galera-debuginfoUpgrade mariadb-pamUpgrade mariadb-testUpgrade Judy-debugsourceUpgrade JudyUpgrade mariadb-commonUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-backup-debuginfoUpgrade mariadb-embedded-develNo solution exists | Aug 3, 2022 | Feb 1, 2022 |
| Rocky_linux | — | Upgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-server-utilsUpgrade galeraUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-embeddedUpgrade mariadb-debuginfoUpgrade mariadb-pam-debuginfoUpgrade Judy-debuginfoUpgrade mariadb-serverUpgrade galera-debugsourceUpgrade mariadb-gssapi-serverUpgrade mariadb-debugsourceUpgrade mariadb-backupUpgrade mariadb-oqgraph-engineUpgrade mariadb-testUpgrade mariadb-server-debuginfoUpgrade mariadb-test-debuginfoUpgrade mariadb-backup-debuginfoUpgrade mariadb-pamUpgrade mariadb-embedded-debuginfoUpgrade mariadbUpgrade mariadb-develUpgrade mariadb-embedded-develUpgrade Judy-debugsourceUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-commonUpgrade mariadb-server-galeraUpgrade JudyUpgrade mariadb-errmsgUpgrade galera-debuginfo | Mar 12, 2024 | Feb 1, 2022 |
| Suse | — | Upgrade libmariadbd-develUpgrade mariadb-rpm-macrosUpgrade libmariadbd19Upgrade libmysqld19Upgrade mariadb-errormessagesUpgrade mariadb-galeraUpgrade mariadb-testUpgrade libmysqld-develUpgrade mariadb-benchUpgrade mariadb-clientUpgrade mariadb-toolsUpgrade mariadb | Oct 26, 2022 | Feb 1, 2022 |
| Ubuntu | — | Upgrade mariadb-server | Nov 24, 2022 | Feb 1, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 1, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub