MariaDB through 10.5.9 allows attackers to trigger a convert_const_to_int use-after-free when the BIGINT data type is used.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade JudyUpgrade mariadb-gssapi-serverUpgrade mariadb-pamUpgrade mariadb-server-utilsUpgrade mariadb-testUpgrade mariadbUpgrade mariadb-server-galeraUpgrade mariadb-embedded-develUpgrade mariadb-serverUpgrade mariadb-commonUpgrade mariadb-oqgraph-engineUpgrade mariadb-develUpgrade mariadb-errmsgUpgrade mariadb-backupUpgrade mariadb-embeddedUpgrade galera | Aug 8, 2022 | Feb 1, 2022 |
| Alpine Linux | — | Upgrade mariadb | Mar 21, 2024 | Feb 1, 2022 |
| Amazon Linux Ami 2 | — | Upgrade mariadb-testUpgrade mariadb-sphinx-engineUpgrade mariadbUpgrade mariadb-server-utilsUpgrade mariadb-cracklib-password-checkUpgrade mariadb-debuginfoUpgrade mariadb-configUpgrade mariadb-gssapi-serverUpgrade mariadb-pamUpgrade mariadb-embeddedUpgrade mariadb-develUpgrade mariadb-embedded-develUpgrade mariadb-connect-engineUpgrade mariadb-rocksdb-engineUpgrade mariadb-oqgraph-engineUpgrade mariadb-s3-engineUpgrade mariadb-errmsgUpgrade mariadb-commonUpgrade mariadb-libsUpgrade mariadb-server-galeraUpgrade mariadb-backupUpgrade mariadb-server | Sep 28, 2023 | Feb 1, 2022 |
| Amazon_linux_2023 | — | Upgrade mariadb105-errmsgUpgrade mariadb105-backup-debuginfoUpgrade mariadb105-gssapi-server-debuginfoUpgrade mariadb105-debugsourceUpgrade mariadb105-server-utilsUpgrade mariadb105Upgrade mariadb105-serverUpgrade mariadb105-oqgraph-engineUpgrade mariadb105-oqgraph-engine-debuginfoUpgrade mariadb105-sphinx-engine-debuginfoUpgrade mariadb105-connect-engineUpgrade mariadb105-rocksdb-engine-debuginfoUpgrade mariadb105-pamUpgrade mariadb105-sphinx-engineUpgrade mariadb105-debuginfoUpgrade mariadb105-server-debuginfoUpgrade mariadb105-commonUpgrade mariadb105-test-debuginfoUpgrade mariadb105-cracklib-password-check-debuginfoUpgrade mariadb105-gssapi-serverUpgrade mariadb105-pam-debuginfoUpgrade mariadb105-server-utils-debuginfoUpgrade mariadb105-cracklib-password-checkUpgrade mariadb105-connect-engine-debuginfoUpgrade mariadb105-rocksdb-engineUpgrade mariadb105-backupUpgrade mariadb105-develUpgrade mariadb105-test | Feb 17, 2025 | May 10, 2021 |
| Centos_linux | — | Upgrade mariadb-debugsourceUpgrade mariadb-gssapi-serverUpgrade galeraUpgrade mariadb-serverUpgrade mariadb-embedded-debuginfoUpgrade mariadb-develUpgrade mariadb-test-debuginfoUpgrade mariadb-embeddedUpgrade galera-debugsourceUpgrade mariadb-errmsgUpgrade mysql-selinuxUpgrade mariadb-pam-debuginfoUpgrade mariadb-debuginfoUpgrade mariadb-backupUpgrade mariadb-embedded-develUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-oqgraph-engineUpgrade mariadb-server-galeraUpgrade Judy-debuginfoUpgrade mariadb-server-debuginfoUpgrade Judy-debugsourceUpgrade mariadbUpgrade mariadb-testUpgrade JudyUpgrade galera-debuginfoUpgrade mariadb-backup-debuginfoUpgrade mariadb-pamUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-commonUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-server-utils | Aug 3, 2022 | Feb 1, 2022 |
| Debian | — | Upgrade mariadb-10.5 | Sep 19, 2022 | Feb 1, 2022 |
| Freebsd | — | Upgrade mariadb106-clientUpgrade mariadb106-serverUpgrade mariadb104-serverUpgrade mariadb103-clientUpgrade mariadb104-clientUpgrade mariadb103-serverUpgrade mariadb105-clientUpgrade mariadb105-server | Nov 4, 2022 | May 23, 2022 |
| Gentoo Linux | — | Upgrade dev-db/mariadb. | May 10, 2024 | Feb 1, 2022 |
| Mariadb Mariadb | — | Upgrade MariaDB to the latest version | Mar 4, 2025 | Feb 1, 2022 |
| Oracle_linux | — | Upgrade mariadbUpgrade mariadb-serverUpgrade mariadb-server-utilsUpgrade mariadb-oqgraph-engineUpgrade mariadb-develUpgrade mysql-selinuxUpgrade mariadb-server-galeraUpgrade galeraUpgrade mariadb-gssapi-serverUpgrade mariadb-embedded-develUpgrade mariadb-embeddedUpgrade JudyUpgrade mariadb-pamUpgrade mariadb-errmsgUpgrade mariadb-backupUpgrade mariadb-commonUpgrade mariadb-test | Aug 4, 2022 | May 10, 2021 |
| Redhat_linux | — | Upgrade mariadb-commonNo solution existsUpgrade mariadb-testUpgrade mariadb-oqgraph-engine-debuginfoUpgrade JudyUpgrade Judy-debugsourceUpgrade mariadb-pamUpgrade mariadbUpgrade galera-debuginfoUpgrade mariadb-backup-debuginfoUpgrade mariadb-embedded-develUpgrade mariadb-embeddedUpgrade mariadb-server-utils-debuginfoUpgrade Judy-debuginfoUpgrade mariadb-server-utilsUpgrade mariadb-serverUpgrade mariadb-develUpgrade mariadb-errmsgUpgrade mariadb-server-debuginfoUpgrade mariadb-backupUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-oqgraph-engineUpgrade mariadb-gssapi-serverUpgrade mariadb-debugsourceUpgrade mariadb-server-galeraUpgrade mariadb-test-debuginfoUpgrade galera-debugsourceUpgrade mariadb-embedded-debuginfoUpgrade mariadb-pam-debuginfoUpgrade galeraUpgrade mariadb-debuginfoUpgrade mysql-selinux | Aug 3, 2022 | Feb 1, 2022 |
| Rocky_linux | — | Upgrade mariadb-testUpgrade galeraUpgrade mariadb-debuginfoUpgrade mariadb-pam-debuginfoUpgrade mariadb-gssapi-serverUpgrade galera-debugsourceUpgrade mariadb-oqgraph-engineUpgrade mariadb-embeddedUpgrade mariadb-backupUpgrade mariadb-serverUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-server-debuginfoUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-server-utilsUpgrade Judy-debuginfoUpgrade mariadb-debugsourceUpgrade mariadbUpgrade mariadb-server-galeraUpgrade mariadb-develUpgrade mariadb-errmsgUpgrade galera-debuginfoUpgrade mariadb-test-debuginfoUpgrade Judy-debugsourceUpgrade mariadb-commonUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-embedded-develUpgrade mariadb-backup-debuginfoUpgrade JudyUpgrade mariadb-pamUpgrade mariadb-embedded-debuginfo | Mar 12, 2024 | Feb 1, 2022 |
| Suse | — | Upgrade mariadb-clientUpgrade mariadbUpgrade mariadb-benchUpgrade mariadb-toolsUpgrade mariadb-rpm-macrosUpgrade libmysqld-develUpgrade mariadb-galeraUpgrade libmariadbd-develUpgrade mariadb-errormessagesUpgrade libmariadbd19Upgrade mariadb-testUpgrade libmysqld19 | Oct 26, 2022 | Feb 1, 2022 |
| Ubuntu | — | Upgrade mariadb-server | Nov 24, 2022 | Feb 1, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 1, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub