MariaDB CONNECT Storage Engine Use-After-Free Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL queries. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the service account. Was ZDI-CAN-16207.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
- CVSS 3.0 Base Score: 7
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-galeraalma-upgrade-judyalma-upgrade-mariadbalma-upgrade-mariadb-backupalma-upgrade-mariadb-commonalma-upgrade-mariadb-develalma-upgrade-mariadb-embeddedalma-upgrade-mariadb-embedded-develalma-upgrade-mariadb-errmsgalma-upgrade-mariadb-gssapi-serveralma-upgrade-mariadb-oqgraph-enginealma-upgrade-mariadb-pamalma-upgrade-mariadb-serveralma-upgrade-mariadb-server-galeraalma-upgrade-mariadb-server-utilsalma-upgrade-mariadb-test | Aug 8, 2022 | Feb 18, 2022 | |
| Alpine Linux | alpine-linux-upgrade-mariadb | Aug 22, 2024 | Feb 18, 2022 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-mariadbamazon-linux-ami-2-upgrade-mariadb-backupamazon-linux-ami-2-upgrade-mariadb-commonamazon-linux-ami-2-upgrade-mariadb-configamazon-linux-ami-2-upgrade-mariadb-connect-engineamazon-linux-ami-2-upgrade-mariadb-cracklib-password-checkamazon-linux-ami-2-upgrade-mariadb-debuginfoamazon-linux-ami-2-upgrade-mariadb-develamazon-linux-ami-2-upgrade-mariadb-embeddedamazon-linux-ami-2-upgrade-mariadb-embedded-develamazon-linux-ami-2-upgrade-mariadb-errmsgamazon-linux-ami-2-upgrade-mariadb-gssapi-serveramazon-linux-ami-2-upgrade-mariadb-libsamazon-linux-ami-2-upgrade-mariadb-oqgraph-engineamazon-linux-ami-2-upgrade-mariadb-pamamazon-linux-ami-2-upgrade-mariadb-rocksdb-engineamazon-linux-ami-2-upgrade-mariadb-s3-engineamazon-linux-ami-2-upgrade-mariadb-serveramazon-linux-ami-2-upgrade-mariadb-server-galeraamazon-linux-ami-2-upgrade-mariadb-server-utilsamazon-linux-ami-2-upgrade-mariadb-sphinx-engineamazon-linux-ami-2-upgrade-mariadb-test | Sep 28, 2023 | Feb 18, 2022 | |
| Amazon_linux_2023 | amazon-linux-2023-upgrade-mariadb105amazon-linux-2023-upgrade-mariadb105-backupamazon-linux-2023-upgrade-mariadb105-backup-debuginfoamazon-linux-2023-upgrade-mariadb105-commonamazon-linux-2023-upgrade-mariadb105-connect-engineamazon-linux-2023-upgrade-mariadb105-connect-engine-debuginfoamazon-linux-2023-upgrade-mariadb105-cracklib-password-checkamazon-linux-2023-upgrade-mariadb105-cracklib-password-check-debuginfoamazon-linux-2023-upgrade-mariadb105-debuginfoamazon-linux-2023-upgrade-mariadb105-debugsourceamazon-linux-2023-upgrade-mariadb105-develamazon-linux-2023-upgrade-mariadb105-errmsgamazon-linux-2023-upgrade-mariadb105-gssapi-serveramazon-linux-2023-upgrade-mariadb105-gssapi-server-debuginfoamazon-linux-2023-upgrade-mariadb105-oqgraph-engineamazon-linux-2023-upgrade-mariadb105-oqgraph-engine-debuginfoamazon-linux-2023-upgrade-mariadb105-pamamazon-linux-2023-upgrade-mariadb105-pam-debuginfoamazon-linux-2023-upgrade-mariadb105-rocksdb-engineamazon-linux-2023-upgrade-mariadb105-rocksdb-engine-debuginfoamazon-linux-2023-upgrade-mariadb105-serveramazon-linux-2023-upgrade-mariadb105-server-debuginfoamazon-linux-2023-upgrade-mariadb105-server-utilsamazon-linux-2023-upgrade-mariadb105-server-utils-debuginfoamazon-linux-2023-upgrade-mariadb105-sphinx-engineamazon-linux-2023-upgrade-mariadb105-sphinx-engine-debuginfoamazon-linux-2023-upgrade-mariadb105-testamazon-linux-2023-upgrade-mariadb105-test-debuginfo | Feb 17, 2025 | Feb 18, 2022 | |
| Centos_linux | — | centos-upgrade-galeracentos-upgrade-galera-debuginfocentos-upgrade-galera-debugsourcecentos-upgrade-judycentos-upgrade-judy-debuginfocentos-upgrade-judy-debugsourcecentos-upgrade-mariadbcentos-upgrade-mariadb-backupcentos-upgrade-mariadb-backup-debuginfocentos-upgrade-mariadb-commoncentos-upgrade-mariadb-debuginfocentos-upgrade-mariadb-debugsourcecentos-upgrade-mariadb-develcentos-upgrade-mariadb-embeddedcentos-upgrade-mariadb-embedded-debuginfocentos-upgrade-mariadb-embedded-develcentos-upgrade-mariadb-errmsgcentos-upgrade-mariadb-gssapi-servercentos-upgrade-mariadb-gssapi-server-debuginfocentos-upgrade-mariadb-oqgraph-enginecentos-upgrade-mariadb-oqgraph-engine-debuginfocentos-upgrade-mariadb-pamcentos-upgrade-mariadb-pam-debuginfocentos-upgrade-mariadb-servercentos-upgrade-mariadb-server-debuginfocentos-upgrade-mariadb-server-galeracentos-upgrade-mariadb-server-utilscentos-upgrade-mariadb-server-utils-debuginfocentos-upgrade-mariadb-testcentos-upgrade-mariadb-test-debuginfocentos-upgrade-mysql-selinux | Aug 3, 2022 | Feb 18, 2022 |
| Debian | debian-upgrade-mariadb-10-5 | Jul 30, 2024 | Feb 18, 2022 | |
| Freebsd | freebsd-upgrade-package-mariadb103-clientfreebsd-upgrade-package-mariadb103-serverfreebsd-upgrade-package-mariadb104-clientfreebsd-upgrade-package-mariadb104-serverfreebsd-upgrade-package-mariadb105-clientfreebsd-upgrade-package-mariadb105-server | Nov 4, 2022 | Feb 10, 2022 | |
| Gentoo Linux | gentoo-linux-upgrade-dev-db-mariadb | May 10, 2024 | Feb 18, 2022 | |
| Mariadb Mariadb | mariadb-mariadb-upgrade-latest | Mar 4, 2025 | Feb 18, 2022 | |
| Oracle_linux | — | oracle-linux-upgrade-galeraoracle-linux-upgrade-judyoracle-linux-upgrade-mariadboracle-linux-upgrade-mariadb-backuporacle-linux-upgrade-mariadb-commonoracle-linux-upgrade-mariadb-develoracle-linux-upgrade-mariadb-embeddedoracle-linux-upgrade-mariadb-embedded-develoracle-linux-upgrade-mariadb-errmsgoracle-linux-upgrade-mariadb-gssapi-serveroracle-linux-upgrade-mariadb-oqgraph-engineoracle-linux-upgrade-mariadb-pamoracle-linux-upgrade-mariadb-serveroracle-linux-upgrade-mariadb-server-galeraoracle-linux-upgrade-mariadb-server-utilsoracle-linux-upgrade-mariadb-testoracle-linux-upgrade-mysql-selinux | Aug 4, 2022 | Feb 18, 2022 |
| Redhat_linux | no-fix-redhat-rpm-packageredhat-upgrade-galeraredhat-upgrade-galera-debuginforedhat-upgrade-galera-debugsourceredhat-upgrade-judyredhat-upgrade-judy-debuginforedhat-upgrade-judy-debugsourceredhat-upgrade-mariadbredhat-upgrade-mariadb-backupredhat-upgrade-mariadb-backup-debuginforedhat-upgrade-mariadb-commonredhat-upgrade-mariadb-debuginforedhat-upgrade-mariadb-debugsourceredhat-upgrade-mariadb-develredhat-upgrade-mariadb-embeddedredhat-upgrade-mariadb-embedded-debuginforedhat-upgrade-mariadb-embedded-develredhat-upgrade-mariadb-errmsgredhat-upgrade-mariadb-gssapi-serverredhat-upgrade-mariadb-gssapi-server-debuginforedhat-upgrade-mariadb-oqgraph-engineredhat-upgrade-mariadb-oqgraph-engine-debuginforedhat-upgrade-mariadb-pamredhat-upgrade-mariadb-pam-debuginforedhat-upgrade-mariadb-serverredhat-upgrade-mariadb-server-debuginforedhat-upgrade-mariadb-server-galeraredhat-upgrade-mariadb-server-utilsredhat-upgrade-mariadb-server-utils-debuginforedhat-upgrade-mariadb-testredhat-upgrade-mariadb-test-debuginforedhat-upgrade-mysql-selinux | Aug 3, 2022 | Feb 18, 2022 | |
| Rocky_linux | rocky-upgrade-galerarocky-upgrade-galera-debuginforocky-upgrade-galera-debugsourcerocky-upgrade-judyrocky-upgrade-judy-debuginforocky-upgrade-judy-debugsourcerocky-upgrade-mariadbrocky-upgrade-mariadb-backuprocky-upgrade-mariadb-backup-debuginforocky-upgrade-mariadb-commonrocky-upgrade-mariadb-debuginforocky-upgrade-mariadb-debugsourcerocky-upgrade-mariadb-develrocky-upgrade-mariadb-embeddedrocky-upgrade-mariadb-embedded-debuginforocky-upgrade-mariadb-embedded-develrocky-upgrade-mariadb-errmsgrocky-upgrade-mariadb-gssapi-serverrocky-upgrade-mariadb-gssapi-server-debuginforocky-upgrade-mariadb-oqgraph-enginerocky-upgrade-mariadb-oqgraph-engine-debuginforocky-upgrade-mariadb-pamrocky-upgrade-mariadb-pam-debuginforocky-upgrade-mariadb-serverrocky-upgrade-mariadb-server-debuginforocky-upgrade-mariadb-server-galerarocky-upgrade-mariadb-server-utilsrocky-upgrade-mariadb-server-utils-debuginforocky-upgrade-mariadb-testrocky-upgrade-mariadb-test-debuginfo | Mar 12, 2024 | Feb 18, 2022 | |
| Suse | — | suse-upgrade-liblz4-1suse-upgrade-libmariadb-develsuse-upgrade-libmariadb3suse-upgrade-libmariadb_pluginssuse-upgrade-libmariadbd-develsuse-upgrade-libmariadbd104-develsuse-upgrade-libmariadbd19suse-upgrade-libmysqld-develsuse-upgrade-libmysqld19suse-upgrade-mariadbsuse-upgrade-mariadb-benchsuse-upgrade-mariadb-clientsuse-upgrade-mariadb-errormessagessuse-upgrade-mariadb-galerasuse-upgrade-mariadb-rpm-macrossuse-upgrade-mariadb-testsuse-upgrade-mariadb-toolssuse-upgrade-mariadb104suse-upgrade-mariadb104-benchsuse-upgrade-mariadb104-clientsuse-upgrade-mariadb104-errormessagessuse-upgrade-mariadb104-galerasuse-upgrade-mariadb104-rpm-macrossuse-upgrade-mariadb104-testsuse-upgrade-mariadb104-toolssuse-upgrade-python3-mysqlclient | Mar 5, 2022 | Feb 18, 2022 |
| Ubuntu | ubuntu-upgrade-mariadb-server | Mar 22, 2023 | Feb 18, 2022 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Feb 18, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub