The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
MariaDB CONNECT Storage Engine Stack-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL queries. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the service account. Was ZDI-CAN-16191.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mariadb-commonUpgrade mariadb-serverUpgrade mariadb-pamUpgrade mariadb-develUpgrade mariadb-oqgraph-engineUpgrade mariadb-server-galeraUpgrade mariadb-backupUpgrade mariadb-embedded-develUpgrade JudyUpgrade mariadbUpgrade mariadb-gssapi-serverUpgrade galeraUpgrade mariadb-embeddedUpgrade mariadb-testUpgrade mariadb-errmsgUpgrade mariadb-server-utils | Aug 8, 2022 | Feb 18, 2022 |
| Alpine Linux | — | Upgrade mariadb | Aug 22, 2024 | Feb 18, 2022 |
| Amazon Linux Ami 2 | — | Upgrade mariadb-debuginfoUpgrade mariadb-libsUpgrade mariadb-server-galeraUpgrade mariadb-commonUpgrade mariadb-connect-engineUpgrade mariadb-embeddedUpgrade mariadb-backupUpgrade mariadb-serverUpgrade mariadbUpgrade mariadb-s3-engineUpgrade mariadb-rocksdb-engineUpgrade mariadb-embedded-develUpgrade mariadb-oqgraph-engineUpgrade mariadb-errmsgUpgrade mariadb-server-utilsUpgrade mariadb-gssapi-serverUpgrade mariadb-pamUpgrade mariadb-develUpgrade mariadb-testUpgrade mariadb-configUpgrade mariadb-sphinx-engineUpgrade mariadb-cracklib-password-check | Sep 28, 2023 | Feb 18, 2022 |
| Amazon_linux_2023 | — | Upgrade mariadb105-backupUpgrade mariadb105-test-debuginfoUpgrade mariadb105-gssapi-server-debuginfoUpgrade mariadb105-connect-engine-debuginfoUpgrade mariadb105-server-debuginfoUpgrade mariadb105-debuginfoUpgrade mariadb105-errmsgUpgrade mariadb105-oqgraph-engineUpgrade mariadb105-pam-debuginfoUpgrade mariadb105-gssapi-serverUpgrade mariadb105-develUpgrade mariadb105-server-utils-debuginfoUpgrade mariadb105-cracklib-password-checkUpgrade mariadb105-cracklib-password-check-debuginfoUpgrade mariadb105-server-utilsUpgrade mariadb105-backup-debuginfoUpgrade mariadb105-sphinx-engine-debuginfoUpgrade mariadb105-serverUpgrade mariadb105-testUpgrade mariadb105Upgrade mariadb105-commonUpgrade mariadb105-pamUpgrade mariadb105-oqgraph-engine-debuginfoUpgrade mariadb105-rocksdb-engineUpgrade mariadb105-debugsourceUpgrade mariadb105-sphinx-engineUpgrade mariadb105-connect-engineUpgrade mariadb105-rocksdb-engine-debuginfo | Feb 17, 2025 | Feb 18, 2022 |
| Centos_linux | — | Upgrade mariadb-server-utils-debuginfoUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-pamUpgrade mariadb-pam-debuginfoUpgrade mariadb-server-debuginfoUpgrade galera-debugsourceUpgrade mariadb-commonUpgrade mariadb-testUpgrade mariadb-serverUpgrade mariadb-develUpgrade galera-debuginfoUpgrade mariadb-backup-debuginfoUpgrade JudyUpgrade mariadb-embedded-debuginfoUpgrade mariadb-server-galeraUpgrade mariadb-oqgraph-engineUpgrade mariadb-test-debuginfoUpgrade mariadb-server-utilsUpgrade mariadb-errmsgUpgrade mariadb-embedded-develUpgrade mariadb-debuginfoUpgrade Judy-debuginfoUpgrade mariadbUpgrade mariadb-embeddedUpgrade mariadb-debugsourceUpgrade Judy-debugsourceUpgrade galeraUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-gssapi-serverUpgrade mariadb-backupUpgrade mysql-selinux | Aug 3, 2022 | Feb 18, 2022 |
| Debian | — | Upgrade mariadb-10.5 | Jul 30, 2024 | Feb 18, 2022 |
| Freebsd | — | Upgrade mariadb104-clientUpgrade mariadb103-clientUpgrade mariadb104-serverUpgrade mariadb105-serverUpgrade mariadb105-clientUpgrade mariadb103-server | Nov 4, 2022 | Feb 10, 2022 |
| Gentoo Linux | — | Upgrade dev-db/mariadb. | May 10, 2024 | Feb 18, 2022 |
| Mariadb Mariadb | — | Upgrade MariaDB to the latest version | Mar 4, 2025 | Feb 18, 2022 |
| Oracle_linux | — | Upgrade mariadb-embeddedUpgrade galeraUpgrade mariadb-gssapi-serverUpgrade mariadb-server-utilsUpgrade mariadb-embedded-develUpgrade mariadb-errmsgUpgrade mariadb-backupUpgrade mariadb-server-galeraUpgrade mariadb-develUpgrade mysql-selinuxUpgrade mariadb-serverUpgrade mariadb-oqgraph-engineUpgrade mariadb-testUpgrade JudyUpgrade mariadbUpgrade mariadb-pamUpgrade mariadb-common | Aug 4, 2022 | Feb 18, 2022 |
| Redhat_linux | — | Upgrade mariadb-oqgraph-engine-debuginfoUpgrade galera-debuginfoUpgrade mariadb-server-utilsUpgrade mariadbUpgrade JudyUpgrade mariadb-develUpgrade mariadb-server-debuginfoUpgrade mariadb-embedded-develUpgrade mariadb-embedded-debuginfoUpgrade Judy-debugsourceUpgrade mariadb-errmsgUpgrade mariadb-server-galeraUpgrade mariadb-pamUpgrade mariadb-test-debuginfoUpgrade mariadb-commonUpgrade mariadb-backup-debuginfoUpgrade mariadb-serverUpgrade mariadb-gssapi-server-debuginfoUpgrade galera-debugsourceUpgrade mysql-selinuxUpgrade mariadb-testUpgrade mariadb-embeddedUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-gssapi-serverNo solution existsUpgrade Judy-debuginfoUpgrade mariadb-oqgraph-engineUpgrade mariadb-pam-debuginfoUpgrade mariadb-debuginfoUpgrade mariadb-debugsourceUpgrade galeraUpgrade mariadb-backup | Aug 3, 2022 | Feb 18, 2022 |
| Rocky_linux | — | Upgrade mariadb-backupUpgrade mariadb-oqgraph-engineUpgrade mariadb-pam-debuginfoUpgrade mariadb-develUpgrade mariadb-embeddedUpgrade mariadb-server-galeraUpgrade mariadb-serverUpgrade mariadb-test-debuginfoUpgrade mariadb-embedded-develUpgrade galeraUpgrade mariadbUpgrade mariadb-server-debuginfoUpgrade mariadb-embedded-debuginfoUpgrade mariadb-server-utils-debuginfoUpgrade Judy-debuginfoUpgrade mariadb-commonUpgrade mariadb-server-utilsUpgrade mariadb-errmsgUpgrade JudyUpgrade galera-debugsourceUpgrade mariadb-testUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-debugsourceUpgrade mariadb-gssapi-serverUpgrade mariadb-debuginfoUpgrade galera-debuginfoUpgrade Judy-debugsourceUpgrade mariadb-backup-debuginfoUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-pam | Mar 12, 2024 | Feb 18, 2022 |
| Suse | — | Upgrade libmariadbd19Upgrade mariadb-galeraUpgrade mariadb104-testUpgrade mariadb104-errormessagesUpgrade libmysqld-develUpgrade mariadb-testUpgrade mariadb-clientUpgrade mariadb104-clientUpgrade mariadb104-rpm-macrosUpgrade python3-mysqlclientUpgrade mariadb104Upgrade libmariadb-develUpgrade mariadb104-galeraUpgrade mariadb-errormessagesUpgrade mariadb104-benchUpgrade mariadb104-toolsUpgrade mariadb-rpm-macrosUpgrade mariadbUpgrade libmariadb_pluginsUpgrade mariadb-benchUpgrade mariadb-toolsUpgrade libmariadb3Upgrade libmariadbd104-develUpgrade liblz4-1Upgrade libmysqld19Upgrade libmariadbd-devel | Mar 5, 2022 | Feb 18, 2022 |
| Ubuntu | — | Upgrade mariadb-server | Mar 22, 2023 | Feb 18, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 18, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub