MariaDB CONNECT Storage Engine Stack-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL queries. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the service account. Was ZDI-CAN-16191.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
- CVSS 3.0 Base Score: 7
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mariadb-commonUpgrade JudyUpgrade mariadb-pamUpgrade mariadb-backupUpgrade mariadb-develUpgrade mariadb-server-galeraUpgrade mariadb-embedded-develUpgrade mariadb-oqgraph-engineUpgrade mariadb-serverUpgrade mariadb-testUpgrade mariadb-server-utilsUpgrade mariadb-gssapi-serverUpgrade galeraUpgrade mariadbUpgrade mariadb-embeddedUpgrade mariadb-errmsg | Aug 8, 2022 | Feb 18, 2022 |
| Alpine Linux | — | Upgrade mariadb | Aug 22, 2024 | Feb 18, 2022 |
| Amazon Linux Ami 2 | — | Upgrade mariadb-backupUpgrade mariadb-s3-engineUpgrade mariadb-embedded-develUpgrade mariadb-connect-engineUpgrade mariadb-embeddedUpgrade mariadb-rocksdb-engineUpgrade mariadb-server-galeraUpgrade mariadbUpgrade mariadb-commonUpgrade mariadb-oqgraph-engineUpgrade mariadb-serverUpgrade mariadb-errmsgUpgrade mariadb-libsUpgrade mariadb-debuginfoUpgrade mariadb-testUpgrade mariadb-cracklib-password-checkUpgrade mariadb-server-utilsUpgrade mariadb-configUpgrade mariadb-pamUpgrade mariadb-develUpgrade mariadb-gssapi-serverUpgrade mariadb-sphinx-engine | Sep 28, 2023 | Feb 18, 2022 |
| Amazon_linux_2023 | — | Upgrade mariadb105-rocksdb-engine-debuginfoUpgrade mariadb105-rocksdb-engineUpgrade mariadb105-testUpgrade mariadb105Upgrade mariadb105-commonUpgrade mariadb105-serverUpgrade mariadb105-sphinx-engine-debuginfoUpgrade mariadb105-sphinx-engineUpgrade mariadb105-server-utilsUpgrade mariadb105-backup-debuginfoUpgrade mariadb105-connect-engineUpgrade mariadb105-debugsourceUpgrade mariadb105-oqgraph-engine-debuginfoUpgrade mariadb105-pamUpgrade mariadb105-cracklib-password-check-debuginfoUpgrade mariadb105-test-debuginfoUpgrade mariadb105-backupUpgrade mariadb105-pam-debuginfoUpgrade mariadb105-gssapi-server-debuginfoUpgrade mariadb105-errmsgUpgrade mariadb105-debuginfoUpgrade mariadb105-gssapi-serverUpgrade mariadb105-oqgraph-engineUpgrade mariadb105-connect-engine-debuginfoUpgrade mariadb105-server-utils-debuginfoUpgrade mariadb105-server-debuginfoUpgrade mariadb105-develUpgrade mariadb105-cracklib-password-check | Feb 17, 2025 | Feb 18, 2022 |
| Centos_linux | — | Upgrade galera-debugsourceUpgrade mariadb-pam-debuginfoUpgrade mariadb-server-debuginfoUpgrade mariadb-pamUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-serverUpgrade mariadb-commonUpgrade galera-debuginfoUpgrade mariadb-backup-debuginfoUpgrade mariadb-testUpgrade mariadb-develUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-embedded-debuginfoUpgrade mysql-selinuxUpgrade mariadb-server-galeraUpgrade mariadb-test-debuginfoUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-debuginfoUpgrade Judy-debuginfoUpgrade mariadb-gssapi-serverUpgrade mariadb-backupUpgrade mariadb-embedded-develUpgrade mariadb-embeddedUpgrade mariadbUpgrade mariadb-debugsourceUpgrade mariadb-errmsgUpgrade mariadb-oqgraph-engineUpgrade JudyUpgrade galeraUpgrade Judy-debugsourceUpgrade mariadb-server-utils | Aug 3, 2022 | Feb 18, 2022 |
| Debian | — | Upgrade mariadb-10.5 | Jul 30, 2024 | Feb 18, 2022 |
| Freebsd | — | Upgrade mariadb103-clientUpgrade mariadb104-clientUpgrade mariadb104-serverUpgrade mariadb105-serverUpgrade mariadb103-serverUpgrade mariadb105-client | Nov 4, 2022 | Feb 10, 2022 |
| Gentoo Linux | — | Upgrade dev-db/mariadb. | May 10, 2024 | Feb 18, 2022 |
| Mariadb Mariadb | — | Upgrade MariaDB to the latest version | Mar 4, 2025 | Feb 18, 2022 |
| Oracle_linux | — | Upgrade mariadb-gssapi-serverUpgrade mariadb-server-utilsUpgrade mariadb-embedded-develUpgrade mariadb-errmsgUpgrade mysql-selinuxUpgrade mariadb-oqgraph-engineUpgrade mariadb-serverUpgrade mariadb-backupUpgrade mariadb-embeddedUpgrade mariadb-server-galeraUpgrade galeraUpgrade mariadb-develUpgrade mariadb-testUpgrade mariadb-pamUpgrade mariadbUpgrade mariadb-commonUpgrade Judy | Aug 4, 2022 | Feb 18, 2022 |
| Redhat_linux | — | Upgrade mariadb-embedded-debuginfoUpgrade mariadb-commonUpgrade mariadb-server-galeraUpgrade mariadb-errmsgUpgrade galera-debuginfoUpgrade mariadb-pamUpgrade mariadb-server-utilsUpgrade mariadb-oqgraph-engine-debuginfoUpgrade JudyUpgrade mariadb-develUpgrade mariadb-server-debuginfoUpgrade mariadbUpgrade Judy-debugsourceUpgrade mariadb-test-debuginfoUpgrade mariadb-embedded-develUpgrade mariadb-backup-debuginfoUpgrade mariadb-oqgraph-engineUpgrade mariadb-pam-debuginfoUpgrade mariadb-gssapi-server-debuginfoUpgrade galeraUpgrade mariadb-testUpgrade mariadb-debuginfoNo solution existsUpgrade mariadb-serverUpgrade galera-debugsourceUpgrade mariadb-embeddedUpgrade mariadb-backupUpgrade Judy-debuginfoUpgrade mysql-selinuxUpgrade mariadb-gssapi-serverUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-debugsource | Aug 3, 2022 | Feb 18, 2022 |
| Rocky_linux | — | Upgrade mariadb-gssapi-serverUpgrade galera-debuginfoUpgrade mariadb-debugsourceUpgrade mariadb-pamUpgrade mariadb-backup-debuginfoUpgrade mariadb-debuginfoUpgrade Judy-debugsourceUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-testUpgrade mariadb-server-debuginfoUpgrade mariadb-commonUpgrade mariadb-backupUpgrade galeraUpgrade mariadbUpgrade mariadb-embeddedUpgrade JudyUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-embedded-debuginfoUpgrade mariadb-server-utilsUpgrade galera-debugsourceUpgrade mariadb-oqgraph-engineUpgrade Judy-debuginfoUpgrade mariadb-errmsgUpgrade mariadb-server-galeraUpgrade mariadb-serverUpgrade mariadb-pam-debuginfoUpgrade mariadb-embedded-develUpgrade mariadb-test-debuginfoUpgrade mariadb-devel | Mar 12, 2024 | Feb 18, 2022 |
| Suse | — | Upgrade mariadb104Upgrade mariadb-clientUpgrade libmariadbd19Upgrade mariadb104-rpm-macrosUpgrade libmariadb-develUpgrade mariadb104-galeraUpgrade mariadb104-toolsUpgrade mariadb104-clientUpgrade mariadb104-testUpgrade mariadb104-benchUpgrade python3-mysqlclientUpgrade mariadb-errormessagesUpgrade libmysqld-develUpgrade mariadb-testUpgrade mariadb-rpm-macrosUpgrade mariadb-galeraUpgrade mariadb104-errormessagesUpgrade libmariadb3Upgrade mariadbUpgrade libmysqld19Upgrade mariadb-toolsUpgrade libmariadbd104-develUpgrade libmariadb_pluginsUpgrade liblz4-1Upgrade libmariadbd-develUpgrade mariadb-bench | Mar 5, 2022 | Feb 18, 2022 |
| Ubuntu | — | Upgrade mariadb-server | Mar 22, 2023 | Feb 18, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 18, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub