MariaDB CONNECT Storage Engine Stack-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL queries. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the service account. Was ZDI-CAN-16191.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
- CVSS 3.0 Base Score: 7
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mariadb-gssapi-serverUpgrade mariadb-errmsgUpgrade galeraUpgrade mariadbUpgrade mariadb-embeddedUpgrade mariadb-testUpgrade mariadb-server-utilsUpgrade mariadb-serverUpgrade JudyUpgrade mariadb-oqgraph-engineUpgrade mariadb-commonUpgrade mariadb-pamUpgrade mariadb-embedded-develUpgrade mariadb-develUpgrade mariadb-server-galeraUpgrade mariadb-backup | Aug 8, 2022 | Feb 18, 2022 |
| Alpine Linux | — | Upgrade mariadb | Aug 22, 2024 | Feb 18, 2022 |
| Amazon Linux Ami 2 | — | Upgrade mariadb-libsUpgrade mariadb-commonUpgrade mariadb-embedded-develUpgrade mariadbUpgrade mariadb-oqgraph-engineUpgrade mariadb-rocksdb-engineUpgrade mariadb-s3-engineUpgrade mariadb-errmsgUpgrade mariadb-embeddedUpgrade mariadb-serverUpgrade mariadb-backupUpgrade mariadb-connect-engineUpgrade mariadb-server-galeraUpgrade mariadb-debuginfoUpgrade mariadb-configUpgrade mariadb-pamUpgrade mariadb-sphinx-engineUpgrade mariadb-server-utilsUpgrade mariadb-develUpgrade mariadb-testUpgrade mariadb-gssapi-serverUpgrade mariadb-cracklib-password-check | Sep 28, 2023 | Feb 18, 2022 |
| Amazon_linux_2023 | — | Upgrade mariadb105-rocksdb-engineUpgrade mariadb105-rocksdb-engine-debuginfoUpgrade mariadb105-connect-engineUpgrade mariadb105-server-utilsUpgrade mariadb105-backup-debuginfoUpgrade mariadb105-testUpgrade mariadb105-sphinx-engine-debuginfoUpgrade mariadb105-commonUpgrade mariadb105-serverUpgrade mariadb105-sphinx-engineUpgrade mariadb105Upgrade mariadb105-debugsourceUpgrade mariadb105-oqgraph-engine-debuginfoUpgrade mariadb105-cracklib-password-check-debuginfoUpgrade mariadb105-pamUpgrade mariadb105-errmsgUpgrade mariadb105-debuginfoUpgrade mariadb105-gssapi-server-debuginfoUpgrade mariadb105-oqgraph-engineUpgrade mariadb105-test-debuginfoUpgrade mariadb105-backupUpgrade mariadb105-pam-debuginfoUpgrade mariadb105-develUpgrade mariadb105-connect-engine-debuginfoUpgrade mariadb105-server-utils-debuginfoUpgrade mariadb105-gssapi-serverUpgrade mariadb105-server-debuginfoUpgrade mariadb105-cracklib-password-check | Feb 17, 2025 | Feb 18, 2022 |
| Centos_linux | — | Upgrade galera-debugsourceUpgrade mariadb-commonUpgrade mariadb-serverUpgrade galera-debuginfoUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-pamUpgrade mariadb-backup-debuginfoUpgrade mariadb-testUpgrade mariadb-pam-debuginfoUpgrade mariadb-develUpgrade mariadb-server-debuginfoUpgrade mariadb-embeddedUpgrade mariadb-embedded-develUpgrade mariadb-debuginfoUpgrade mariadb-gssapi-serverUpgrade mariadb-backupUpgrade mariadbUpgrade mysql-selinuxUpgrade mariadb-server-galeraUpgrade mariadb-embedded-debuginfoUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-errmsgUpgrade mariadb-debugsourceUpgrade mariadb-test-debuginfoUpgrade mariadb-server-utilsUpgrade mariadb-oqgraph-engineUpgrade Judy-debugsourceUpgrade JudyUpgrade galeraUpgrade Judy-debuginfo | Aug 3, 2022 | Feb 18, 2022 |
| Debian | — | Upgrade mariadb-10.5 | Jul 30, 2024 | Feb 18, 2022 |
| Freebsd | — | Upgrade mariadb103-clientUpgrade mariadb104-serverUpgrade mariadb104-clientUpgrade mariadb103-serverUpgrade mariadb105-serverUpgrade mariadb105-client | Nov 4, 2022 | Feb 10, 2022 |
| Gentoo Linux | — | Upgrade dev-db/mariadb. | May 10, 2024 | Feb 18, 2022 |
| Mariadb Mariadb | — | Upgrade MariaDB to the latest version | Mar 4, 2025 | Feb 18, 2022 |
| Oracle_linux | — | Upgrade mariadb-commonUpgrade mariadb-testUpgrade mariadb-pamUpgrade JudyUpgrade mariadbUpgrade mariadb-oqgraph-engineUpgrade mariadb-errmsgUpgrade mariadb-embedded-develUpgrade mariadb-serverUpgrade mysql-selinuxUpgrade galeraUpgrade mariadb-develUpgrade mariadb-gssapi-serverUpgrade mariadb-server-utilsUpgrade mariadb-embeddedUpgrade mariadb-backupUpgrade mariadb-server-galera | Aug 4, 2022 | Feb 18, 2022 |
| Redhat_linux | — | Upgrade mariadb-test-debuginfoUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-server-utilsUpgrade mariadb-server-debuginfoUpgrade JudyUpgrade mariadb-pamUpgrade mariadb-embedded-debuginfoUpgrade mariadbUpgrade mariadb-errmsgUpgrade mariadb-embedded-develUpgrade mariadb-develUpgrade mariadb-server-galeraUpgrade mariadb-backup-debuginfoUpgrade mariadb-commonUpgrade galera-debuginfoUpgrade Judy-debugsourceUpgrade mariadb-pam-debuginfoUpgrade mariadb-oqgraph-engineUpgrade Judy-debuginfoUpgrade mariadb-testUpgrade mariadb-debugsourceUpgrade galeraUpgrade mariadb-serverUpgrade mysql-selinuxUpgrade mariadb-backupUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-gssapi-serverUpgrade mariadb-debuginfoUpgrade mariadb-embeddedUpgrade galera-debugsourceNo solution existsUpgrade mariadb-server-utils-debuginfo | Aug 3, 2022 | Feb 18, 2022 |
| Rocky_linux | — | Upgrade mariadb-debugsourceUpgrade mariadb-debuginfoUpgrade mariadb-pamUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-testUpgrade Judy-debugsourceUpgrade galera-debuginfoUpgrade mariadb-gssapi-serverUpgrade mariadb-backup-debuginfoUpgrade mariadb-develUpgrade mariadbUpgrade JudyUpgrade galeraUpgrade mariadb-server-debuginfoUpgrade mariadb-embeddedUpgrade mariadb-test-debuginfoUpgrade mariadb-server-utilsUpgrade mariadb-commonUpgrade galera-debugsourceUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-embedded-debuginfoUpgrade mariadb-embedded-develUpgrade mariadb-pam-debuginfoUpgrade mariadb-serverUpgrade mariadb-errmsgUpgrade Judy-debuginfoUpgrade mariadb-server-galeraUpgrade mariadb-oqgraph-engineUpgrade mariadb-backup | Mar 12, 2024 | Feb 18, 2022 |
| Suse | — | Upgrade mariadb-rpm-macrosUpgrade python3-mysqlclientUpgrade mariadb-errormessagesUpgrade libmariadbd19Upgrade mariadb104-clientUpgrade mariadb104-errormessagesUpgrade mariadb104-benchUpgrade mariadb104-rpm-macrosUpgrade libmariadb-develUpgrade mariadb104Upgrade libmysqld-develUpgrade mariadb104-toolsUpgrade mariadb-clientUpgrade mariadb-galeraUpgrade mariadb-testUpgrade mariadb104-testUpgrade mariadb104-galeraUpgrade libmariadbd104-develUpgrade mariadb-toolsUpgrade libmariadb3Upgrade libmariadbd-develUpgrade liblz4-1Upgrade libmariadb_pluginsUpgrade libmysqld19Upgrade mariadb-benchUpgrade mariadb | Mar 5, 2022 | Feb 18, 2022 |
| Ubuntu | — | Upgrade mariadb-server | Mar 22, 2023 | Feb 18, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 18, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub