MariaDB through 10.5.9 allows attackers to trigger a convert_const_to_int use-after-free when the BIGINT data type is used.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mariadb-gssapi-serverUpgrade mariadb-testUpgrade mariadb-pamUpgrade JudyUpgrade mariadbUpgrade mariadb-server-utilsUpgrade mariadb-embeddedUpgrade mariadb-backupUpgrade mariadb-serverUpgrade mariadb-errmsgUpgrade mariadb-embedded-develUpgrade galeraUpgrade mariadb-develUpgrade mariadb-oqgraph-engineUpgrade mariadb-server-galeraUpgrade mariadb-common | Aug 8, 2022 | Feb 1, 2022 |
| Alpine Linux | — | Upgrade mariadb | Mar 21, 2024 | Feb 1, 2022 |
| Amazon Linux Ami 2 | — | Upgrade mariadb-cracklib-password-checkUpgrade mariadbUpgrade mariadb-develUpgrade mariadb-gssapi-serverUpgrade mariadb-configUpgrade mariadb-embeddedUpgrade mariadb-sphinx-engineUpgrade mariadb-testUpgrade mariadb-server-utilsUpgrade mariadb-debuginfoUpgrade mariadb-pamUpgrade mariadb-errmsgUpgrade mariadb-s3-engineUpgrade mariadb-libsUpgrade mariadb-server-galeraUpgrade mariadb-backupUpgrade mariadb-oqgraph-engineUpgrade mariadb-embedded-develUpgrade mariadb-rocksdb-engineUpgrade mariadb-connect-engineUpgrade mariadb-serverUpgrade mariadb-common | Sep 28, 2023 | Feb 1, 2022 |
| Amazon_linux_2023 | — | Upgrade mariadb105-commonUpgrade mariadb105-gssapi-serverUpgrade mariadb105-server-utils-debuginfoUpgrade mariadb105-pam-debuginfoUpgrade mariadb105-develUpgrade mariadb105-test-debuginfoUpgrade mariadb105-rocksdb-engineUpgrade mariadb105-cracklib-password-checkUpgrade mariadb105-cracklib-password-check-debuginfoUpgrade mariadb105-connect-engine-debuginfoUpgrade mariadb105-backupUpgrade mariadb105-server-debuginfoUpgrade mariadb105-testUpgrade mariadb105-sphinx-engineUpgrade mariadb105-debuginfoUpgrade mariadb105-oqgraph-engine-debuginfoUpgrade mariadb105-backup-debuginfoUpgrade mariadb105-gssapi-server-debuginfoUpgrade mariadb105-errmsgUpgrade mariadb105-server-utilsUpgrade mariadb105-serverUpgrade mariadb105-connect-engineUpgrade mariadb105-rocksdb-engine-debuginfoUpgrade mariadb105Upgrade mariadb105-debugsourceUpgrade mariadb105-sphinx-engine-debuginfoUpgrade mariadb105-oqgraph-engineUpgrade mariadb105-pam | Feb 17, 2025 | May 10, 2021 |
| Centos_linux | — | Upgrade mariadb-develUpgrade mariadb-embedded-debuginfoUpgrade galeraUpgrade mariadb-gssapi-serverUpgrade mariadb-debugsourceUpgrade mariadb-test-debuginfoUpgrade mariadb-serverUpgrade mariadb-backupUpgrade mariadb-errmsgUpgrade Judy-debuginfoUpgrade mariadb-oqgraph-engineUpgrade mariadb-embeddedUpgrade galera-debugsourceUpgrade mariadb-debuginfoUpgrade mariadb-server-galeraUpgrade mariadb-pam-debuginfoUpgrade mysql-selinuxUpgrade mariadb-embedded-develUpgrade mariadb-server-utils-debuginfoUpgrade JudyUpgrade mariadb-commonUpgrade mariadb-server-utilsUpgrade galera-debuginfoUpgrade Judy-debugsourceUpgrade mariadb-testUpgrade mariadb-backup-debuginfoUpgrade mariadb-server-debuginfoUpgrade mariadbUpgrade mariadb-pamUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-gssapi-server-debuginfo | Aug 3, 2022 | Feb 1, 2022 |
| Debian | — | Upgrade mariadb-10.5 | Sep 19, 2022 | Feb 1, 2022 |
| Freebsd | — | Upgrade mariadb104-clientUpgrade mariadb103-serverUpgrade mariadb105-clientUpgrade mariadb105-serverUpgrade mariadb103-clientUpgrade mariadb106-serverUpgrade mariadb106-clientUpgrade mariadb104-server | Nov 4, 2022 | May 23, 2022 |
| Gentoo Linux | — | Upgrade dev-db/mariadb. | May 10, 2024 | Feb 1, 2022 |
| Mariadb Mariadb | — | Upgrade MariaDB to the latest version | Mar 4, 2025 | Feb 1, 2022 |
| Oracle_linux | — | Upgrade mariadb-errmsgUpgrade mariadb-testUpgrade mariadb-pamUpgrade mariadb-commonUpgrade mariadb-backupUpgrade JudyUpgrade mariadb-develUpgrade mysql-selinuxUpgrade mariadb-gssapi-serverUpgrade galeraUpgrade mariadb-embedded-develUpgrade mariadb-embeddedUpgrade mariadbUpgrade mariadb-oqgraph-engineUpgrade mariadb-server-galeraUpgrade mariadb-server-utilsUpgrade mariadb-server | Aug 4, 2022 | May 10, 2021 |
| Redhat_linux | — | Upgrade mariadb-debugsourceUpgrade mysql-selinuxUpgrade mariadb-server-galeraUpgrade mariadb-develUpgrade mariadb-server-debuginfoUpgrade mariadb-debuginfoUpgrade mariadb-test-debuginfoUpgrade mariadb-gssapi-serverUpgrade mariadb-backupUpgrade galeraUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-oqgraph-engineUpgrade mariadb-embedded-debuginfoUpgrade galera-debugsourceUpgrade mariadb-serverUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-embeddedUpgrade Judy-debuginfoUpgrade mariadb-pam-debuginfoUpgrade mariadb-errmsgUpgrade mariadb-server-utilsUpgrade mariadb-backup-debuginfoUpgrade JudyUpgrade mariadb-testNo solution existsUpgrade mariadb-embedded-develUpgrade mariadb-commonUpgrade mariadb-pamUpgrade Judy-debugsourceUpgrade mariadbUpgrade galera-debuginfoUpgrade mariadb-oqgraph-engine-debuginfo | Aug 3, 2022 | Feb 1, 2022 |
| Rocky_linux | — | Upgrade mariadb-errmsgUpgrade mariadb-commonUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-backup-debuginfoUpgrade galera-debuginfoUpgrade mariadb-develUpgrade mariadb-embedded-debuginfoUpgrade mariadb-embedded-develUpgrade mariadb-pamUpgrade JudyUpgrade mariadb-server-galeraUpgrade Judy-debugsourceUpgrade mariadbUpgrade mariadb-test-debuginfoUpgrade mariadb-pam-debuginfoUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-oqgraph-engineUpgrade mariadb-gssapi-serverUpgrade mariadb-serverUpgrade mariadb-debuginfoUpgrade mariadb-server-debuginfoUpgrade galeraUpgrade mariadb-testUpgrade mariadb-debugsourceUpgrade mariadb-gssapi-server-debuginfoUpgrade Judy-debuginfoUpgrade mariadb-server-utilsUpgrade mariadb-backupUpgrade galera-debugsourceUpgrade mariadb-embedded | Mar 12, 2024 | Feb 1, 2022 |
| Suse | — | Upgrade mariadb-toolsUpgrade mariadb-clientUpgrade mariadbUpgrade mariadb-benchUpgrade mariadb-testUpgrade libmariadbd19Upgrade mariadb-errormessagesUpgrade mariadb-galeraUpgrade libmariadbd-develUpgrade libmysqld19Upgrade libmysqld-develUpgrade mariadb-rpm-macros | Oct 26, 2022 | Feb 1, 2022 |
| Ubuntu | — | Upgrade mariadb-server | Nov 24, 2022 | Feb 1, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 1, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub