MariaDB CONNECT Storage Engine Use-After-Free Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL queries. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the service account. Was ZDI-CAN-16207.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
- CVSS 3.0 Base Score: 7
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mariadb-gssapi-serverUpgrade mariadb-testUpgrade mariadb-oqgraph-engineUpgrade mariadb-backupUpgrade mariadb-embeddedUpgrade galeraUpgrade mariadb-serverUpgrade mariadb-server-utilsUpgrade JudyUpgrade mariadb-develUpgrade mariadb-errmsgUpgrade mariadbUpgrade mariadb-server-galeraUpgrade mariadb-embedded-develUpgrade mariadb-commonUpgrade mariadb-pam | Aug 8, 2022 | Feb 18, 2022 |
| Alpine Linux | — | Upgrade mariadb | Aug 22, 2024 | Feb 18, 2022 |
| Amazon Linux Ami 2 | — | Upgrade mariadb-develUpgrade mariadb-pamUpgrade mariadb-s3-engineUpgrade mariadb-testUpgrade mariadb-configUpgrade mariadb-server-utilsUpgrade mariadb-embeddedUpgrade mariadb-rocksdb-engineUpgrade mariadb-sphinx-engineUpgrade mariadb-cracklib-password-checkUpgrade mariadb-backupUpgrade mariadbUpgrade mariadb-connect-engineUpgrade mariadb-commonUpgrade mariadb-debuginfoUpgrade mariadb-oqgraph-engineUpgrade mariadb-gssapi-serverUpgrade mariadb-errmsgUpgrade mariadb-libsUpgrade mariadb-server-galeraUpgrade mariadb-serverUpgrade mariadb-embedded-devel | Sep 28, 2023 | Feb 18, 2022 |
| Amazon_linux_2023 | — | Upgrade mariadb105-connect-engineUpgrade mariadb105-commonUpgrade mariadb105-pamUpgrade mariadb105-testUpgrade mariadb105-server-utilsUpgrade mariadb105-rocksdb-engine-debuginfoUpgrade mariadb105Upgrade mariadb105-cracklib-password-checkUpgrade mariadb105-backup-debuginfoUpgrade mariadb105-rocksdb-engineUpgrade mariadb105-connect-engine-debuginfoUpgrade mariadb105-oqgraph-engineUpgrade mariadb105-sphinx-engineUpgrade mariadb105-gssapi-server-debuginfoUpgrade mariadb105-serverUpgrade mariadb105-gssapi-serverUpgrade mariadb105-sphinx-engine-debuginfoUpgrade mariadb105-pam-debuginfoUpgrade mariadb105-debuginfoUpgrade mariadb105-cracklib-password-check-debuginfoUpgrade mariadb105-errmsgUpgrade mariadb105-test-debuginfoUpgrade mariadb105-server-debuginfoUpgrade mariadb105-develUpgrade mariadb105-oqgraph-engine-debuginfoUpgrade mariadb105-server-utils-debuginfoUpgrade mariadb105-backupUpgrade mariadb105-debugsource | Feb 17, 2025 | Feb 18, 2022 |
| Centos_linux | — | Upgrade mariadb-embedded-debuginfoUpgrade mariadb-errmsgUpgrade mariadb-debugsourceUpgrade mariadbUpgrade mariadb-gssapi-server-debuginfoUpgrade Judy-debuginfoUpgrade mariadb-backup-debuginfoUpgrade mariadb-server-utilsUpgrade mariadb-oqgraph-engineUpgrade mariadb-server-utils-debuginfoUpgrade galeraUpgrade galera-debugsourceUpgrade mariadb-serverUpgrade Judy-debugsourceUpgrade mariadb-embeddedUpgrade mysql-selinuxUpgrade mariadb-debuginfoUpgrade mariadb-testUpgrade mariadb-pam-debuginfoUpgrade mariadb-gssapi-serverUpgrade mariadb-pamUpgrade mariadb-develUpgrade mariadb-commonUpgrade mariadb-embedded-develUpgrade galera-debuginfoUpgrade mariadb-server-debuginfoUpgrade mariadb-server-galeraUpgrade mariadb-backupUpgrade JudyUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-test-debuginfo | Aug 3, 2022 | Feb 18, 2022 |
| Debian | — | Upgrade mariadb-10.5 | Jul 30, 2024 | Feb 18, 2022 |
| Freebsd | — | Upgrade mariadb104-clientUpgrade mariadb104-serverUpgrade mariadb103-serverUpgrade mariadb105-serverUpgrade mariadb103-clientUpgrade mariadb105-client | Nov 4, 2022 | Feb 10, 2022 |
| Gentoo Linux | — | Upgrade dev-db/mariadb. | May 10, 2024 | Feb 18, 2022 |
| Mariadb Mariadb | — | Upgrade MariaDB to the latest version | Mar 4, 2025 | Feb 18, 2022 |
| Oracle_linux | — | Upgrade mariadb-serverUpgrade mariadb-server-utilsUpgrade mariadb-gssapi-serverUpgrade mariadb-errmsgUpgrade mariadb-pamUpgrade mariadb-testUpgrade mariadb-backupUpgrade mariadbUpgrade mariadb-embeddedUpgrade mariadb-embedded-develUpgrade mysql-selinuxUpgrade mariadb-server-galeraUpgrade JudyUpgrade mariadb-oqgraph-engineUpgrade mariadb-commonUpgrade mariadb-develUpgrade galera | Aug 4, 2022 | Feb 18, 2022 |
| Redhat_linux | — | Upgrade mariadb-server-galeraNo solution existsUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-backupUpgrade mariadb-embedded-debuginfoUpgrade mariadb-test-debuginfoUpgrade mariadb-pamUpgrade mariadb-commonUpgrade galera-debuginfoUpgrade Judy-debugsourceUpgrade mariadb-errmsgUpgrade Judy-debuginfoUpgrade mariadb-gssapi-serverUpgrade mariadb-debuginfoUpgrade mysql-selinuxUpgrade mariadb-server-utilsUpgrade mariadb-gssapi-server-debuginfoUpgrade galeraUpgrade mariadb-serverUpgrade mariadb-debugsourceUpgrade mariadb-oqgraph-engineUpgrade mariadb-embeddedUpgrade mariadbUpgrade galera-debugsourceUpgrade mariadb-pam-debuginfoUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-server-debuginfoUpgrade mariadb-develUpgrade mariadb-embedded-develUpgrade JudyUpgrade mariadb-testUpgrade mariadb-backup-debuginfo | Aug 3, 2022 | Feb 18, 2022 |
| Rocky_linux | — | Upgrade mariadb-gssapi-serverUpgrade mariadb-develUpgrade mariadb-server-galeraUpgrade mariadb-test-debuginfoUpgrade galera-debugsourceUpgrade mariadbUpgrade mariadb-debuginfoUpgrade mariadb-pam-debuginfoUpgrade mariadb-embedded-debuginfoUpgrade mariadb-serverUpgrade mariadb-embeddedUpgrade mariadb-oqgraph-engineUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-server-utilsUpgrade mariadb-backupUpgrade mariadb-embedded-develUpgrade galeraUpgrade mariadb-errmsgUpgrade Judy-debuginfoUpgrade mariadb-server-debuginfoUpgrade mariadb-debugsourceUpgrade mariadb-testUpgrade Judy-debugsourceUpgrade mariadb-pamUpgrade mariadb-gssapi-server-debuginfoUpgrade JudyUpgrade galera-debuginfoUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-commonUpgrade mariadb-backup-debuginfo | Mar 12, 2024 | Feb 18, 2022 |
| Suse | — | Upgrade libmariadbd104-develUpgrade libmariadbd-develUpgrade mariadb-errormessagesUpgrade mariadb-benchUpgrade mariadb-clientUpgrade libmysqld19Upgrade python3-mysqlclientUpgrade mariadbUpgrade mariadb104-clientUpgrade mariadb104-testUpgrade libmariadb3Upgrade mariadb104-galeraUpgrade mariadb104-rpm-macrosUpgrade libmariadb_pluginsUpgrade mariadb-toolsUpgrade mariadb-galeraUpgrade libmysqld-develUpgrade mariadb104-toolsUpgrade mariadb-testUpgrade mariadb104-errormessagesUpgrade mariadb-rpm-macrosUpgrade mariadb104Upgrade libmariadbd19Upgrade liblz4-1Upgrade libmariadb-develUpgrade mariadb104-bench | Mar 5, 2022 | Feb 18, 2022 |
| Ubuntu | — | Upgrade mariadb-server | Mar 22, 2023 | Feb 18, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 18, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub