MariaDB CONNECT Storage Engine Stack-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL queries. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the service account. Was ZDI-CAN-16191.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
- CVSS 3.0 Base Score: 7
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mariadbUpgrade mariadb-errmsgUpgrade mariadb-gssapi-serverUpgrade galeraUpgrade mariadb-testUpgrade mariadb-embeddedUpgrade mariadb-server-utilsUpgrade mariadb-pamUpgrade mariadb-backupUpgrade mariadb-oqgraph-engineUpgrade mariadb-server-galeraUpgrade mariadb-serverUpgrade mariadb-commonUpgrade mariadb-develUpgrade JudyUpgrade mariadb-embedded-devel | Aug 8, 2022 | Feb 18, 2022 |
| Alpine Linux | — | Upgrade mariadb | Aug 22, 2024 | Feb 18, 2022 |
| Amazon Linux Ami 2 | — | Upgrade mariadbUpgrade mariadb-libsUpgrade mariadb-backupUpgrade mariadb-commonUpgrade mariadb-rocksdb-engineUpgrade mariadb-oqgraph-engineUpgrade mariadb-server-galeraUpgrade mariadb-embeddedUpgrade mariadb-embedded-develUpgrade mariadb-errmsgUpgrade mariadb-debuginfoUpgrade mariadb-connect-engineUpgrade mariadb-s3-engineUpgrade mariadb-serverUpgrade mariadb-server-utilsUpgrade mariadb-pamUpgrade mariadb-sphinx-engineUpgrade mariadb-testUpgrade mariadb-develUpgrade mariadb-configUpgrade mariadb-cracklib-password-checkUpgrade mariadb-gssapi-server | Sep 28, 2023 | Feb 18, 2022 |
| Amazon_linux_2023 | — | Upgrade mariadb105-cracklib-password-checkUpgrade mariadb105-server-debuginfoUpgrade mariadb105-gssapi-server-debuginfoUpgrade mariadb105-errmsgUpgrade mariadb105-server-utils-debuginfoUpgrade mariadb105-connect-engine-debuginfoUpgrade mariadb105-develUpgrade mariadb105-backupUpgrade mariadb105-test-debuginfoUpgrade mariadb105-oqgraph-engineUpgrade mariadb105-gssapi-serverUpgrade mariadb105-pam-debuginfoUpgrade mariadb105-debuginfoUpgrade mariadb105Upgrade mariadb105-rocksdb-engine-debuginfoUpgrade mariadb105-commonUpgrade mariadb105-sphinx-engine-debuginfoUpgrade mariadb105-serverUpgrade mariadb105-debugsourceUpgrade mariadb105-sphinx-engineUpgrade mariadb105-pamUpgrade mariadb105-oqgraph-engine-debuginfoUpgrade mariadb105-cracklib-password-check-debuginfoUpgrade mariadb105-connect-engineUpgrade mariadb105-testUpgrade mariadb105-rocksdb-engineUpgrade mariadb105-server-utilsUpgrade mariadb105-backup-debuginfo | Feb 17, 2025 | Feb 18, 2022 |
| Centos_linux | — | Upgrade mariadb-errmsgUpgrade mariadb-backupUpgrade mariadb-gssapi-serverUpgrade mariadbUpgrade mariadb-server-galeraUpgrade mysql-selinuxUpgrade mariadb-embedded-develUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-debuginfoUpgrade mariadb-embeddedUpgrade mariadb-embedded-debuginfoUpgrade galeraUpgrade JudyUpgrade mariadb-test-debuginfoUpgrade Judy-debugsourceUpgrade Judy-debuginfoUpgrade mariadb-server-utilsUpgrade mariadb-oqgraph-engineUpgrade mariadb-debugsourceUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-server-utils-debuginfoUpgrade galera-debugsourceUpgrade mariadb-server-debuginfoUpgrade mariadb-pam-debuginfoUpgrade mariadb-backup-debuginfoUpgrade galera-debuginfoUpgrade mariadb-pamUpgrade mariadb-commonUpgrade mariadb-develUpgrade mariadb-testUpgrade mariadb-server | Aug 3, 2022 | Feb 18, 2022 |
| Debian | — | Upgrade mariadb-10.5 | Jul 30, 2024 | Feb 18, 2022 |
| Freebsd | — | Upgrade mariadb105-clientUpgrade mariadb103-serverUpgrade mariadb105-serverUpgrade mariadb104-clientUpgrade mariadb103-clientUpgrade mariadb104-server | Nov 4, 2022 | Feb 10, 2022 |
| Gentoo Linux | — | Upgrade dev-db/mariadb. | May 10, 2024 | Feb 18, 2022 |
| Mariadb Mariadb | — | Upgrade MariaDB to the latest version | Mar 4, 2025 | Feb 18, 2022 |
| Oracle_linux | — | Upgrade mariadb-oqgraph-engineUpgrade mariadb-develUpgrade mariadb-serverUpgrade galeraUpgrade mariadb-server-galeraUpgrade mariadb-gssapi-serverUpgrade mariadb-backupUpgrade mariadb-errmsgUpgrade mariadb-embedded-develUpgrade mariadb-embeddedUpgrade mariadb-server-utilsUpgrade mysql-selinuxUpgrade JudyUpgrade mariadbUpgrade mariadb-commonUpgrade mariadb-testUpgrade mariadb-pam | Aug 4, 2022 | Feb 18, 2022 |
| Redhat_linux | — | Upgrade mariadb-pamUpgrade mariadb-commonUpgrade mariadb-backup-debuginfoUpgrade mariadb-embedded-debuginfoUpgrade mariadbUpgrade mariadb-embedded-develUpgrade mariadb-server-debuginfoUpgrade mariadb-server-utilsUpgrade mariadb-oqgraph-engine-debuginfoUpgrade JudyUpgrade mariadb-develUpgrade galera-debuginfoUpgrade mariadb-server-galeraUpgrade Judy-debugsourceUpgrade mariadb-errmsgUpgrade mariadb-test-debuginfoUpgrade galeraUpgrade galera-debugsourceUpgrade mariadb-debugsourceUpgrade mariadb-serverNo solution existsUpgrade mariadb-pam-debuginfoUpgrade mariadb-debuginfoUpgrade mariadb-gssapi-serverUpgrade mariadb-testUpgrade mariadb-server-utils-debuginfoUpgrade mysql-selinuxUpgrade mariadb-gssapi-server-debuginfoUpgrade Judy-debuginfoUpgrade mariadb-oqgraph-engineUpgrade mariadb-embeddedUpgrade mariadb-backup | Aug 3, 2022 | Feb 18, 2022 |
| Rocky_linux | — | Upgrade mariadb-backup-debuginfoUpgrade mariadb-gssapi-server-debuginfoUpgrade Judy-debugsourceUpgrade mariadb-pamUpgrade mariadb-gssapi-serverUpgrade mariadb-debugsourceUpgrade galera-debuginfoUpgrade mariadb-debuginfoUpgrade mariadb-testUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadbUpgrade mariadb-server-galeraUpgrade mariadb-oqgraph-engineUpgrade mariadb-embeddedUpgrade mariadb-develUpgrade mariadb-server-debuginfoUpgrade mariadb-backupUpgrade mariadb-embedded-debuginfoUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-errmsgUpgrade mariadb-serverUpgrade Judy-debuginfoUpgrade mariadb-test-debuginfoUpgrade mariadb-pam-debuginfoUpgrade mariadb-embedded-develUpgrade mariadb-commonUpgrade galera-debugsourceUpgrade mariadb-server-utilsUpgrade JudyUpgrade galera | Mar 12, 2024 | Feb 18, 2022 |
| Suse | — | Upgrade libmariadbd-develUpgrade libmariadb3Upgrade mariadb-toolsUpgrade libmysqld19Upgrade mariadbUpgrade libmariadb_pluginsUpgrade mariadb-benchUpgrade libmariadbd104-develUpgrade liblz4-1Upgrade mariadb104-clientUpgrade mariadb-clientUpgrade mariadb104Upgrade mariadb-galeraUpgrade mariadb104-rpm-macrosUpgrade python3-mysqlclientUpgrade mariadb104-galeraUpgrade libmariadb-develUpgrade libmariadbd19Upgrade mariadb104-testUpgrade mariadb-rpm-macrosUpgrade mariadb-errormessagesUpgrade mariadb104-errormessagesUpgrade mariadb104-toolsUpgrade mariadb104-benchUpgrade libmysqld-develUpgrade mariadb-test | Mar 5, 2022 | Feb 18, 2022 |
| Ubuntu | — | Upgrade mariadb-server | Mar 22, 2023 | Feb 18, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 18, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub