MariaDB CONNECT Storage Engine Use-After-Free Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL queries. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the service account. Was ZDI-CAN-16207.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
- CVSS 3.0 Base Score: 7
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mariadb-server-utilsUpgrade mariadb-serverUpgrade mariadb-testUpgrade mariadb-oqgraph-engineUpgrade galeraUpgrade mariadb-embeddedUpgrade mariadb-backupUpgrade mariadb-gssapi-serverUpgrade mariadb-commonUpgrade mariadb-embedded-develUpgrade mariadb-develUpgrade JudyUpgrade mariadb-pamUpgrade mariadbUpgrade mariadb-errmsgUpgrade mariadb-server-galera | Aug 8, 2022 | Feb 18, 2022 |
| Alpine Linux | — | Upgrade mariadb | Aug 22, 2024 | Feb 18, 2022 |
| Amazon Linux Ami 2 | — | Upgrade mariadb-cracklib-password-checkUpgrade mariadb-pamUpgrade mariadb-sphinx-engineUpgrade mariadb-embeddedUpgrade mariadb-testUpgrade mariadb-rocksdb-engineUpgrade mariadb-configUpgrade mariadb-develUpgrade mariadb-s3-engineUpgrade mariadb-server-utilsUpgrade mariadb-commonUpgrade mariadb-embedded-develUpgrade mariadb-debuginfoUpgrade mariadb-serverUpgrade mariadb-gssapi-serverUpgrade mariadb-errmsgUpgrade mariadb-server-galeraUpgrade mariadb-connect-engineUpgrade mariadb-libsUpgrade mariadbUpgrade mariadb-oqgraph-engineUpgrade mariadb-backup | Sep 28, 2023 | Feb 18, 2022 |
| Amazon_linux_2023 | — | Upgrade mariadb105-serverUpgrade mariadb105-gssapi-serverUpgrade mariadb105Upgrade mariadb105-rocksdb-engine-debuginfoUpgrade mariadb105-backup-debuginfoUpgrade mariadb105-server-utilsUpgrade mariadb105-cracklib-password-checkUpgrade mariadb105-pamUpgrade mariadb105-oqgraph-engineUpgrade mariadb105-gssapi-server-debuginfoUpgrade mariadb105-rocksdb-engineUpgrade mariadb105-connect-engine-debuginfoUpgrade mariadb105-sphinx-engineUpgrade mariadb105-connect-engineUpgrade mariadb105-commonUpgrade mariadb105-testUpgrade mariadb105-sphinx-engine-debuginfoUpgrade mariadb105-oqgraph-engine-debuginfoUpgrade mariadb105-debuginfoUpgrade mariadb105-pam-debuginfoUpgrade mariadb105-test-debuginfoUpgrade mariadb105-server-utils-debuginfoUpgrade mariadb105-backupUpgrade mariadb105-debugsourceUpgrade mariadb105-cracklib-password-check-debuginfoUpgrade mariadb105-errmsgUpgrade mariadb105-server-debuginfoUpgrade mariadb105-devel | Feb 17, 2025 | Feb 18, 2022 |
| Centos_linux | — | Upgrade mariadb-oqgraph-engineUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-server-utilsUpgrade mariadb-embeddedUpgrade Judy-debugsourceUpgrade Judy-debuginfoUpgrade mariadb-backup-debuginfoUpgrade mysql-selinuxUpgrade mariadb-debuginfoUpgrade mariadb-embedded-debuginfoUpgrade mariadb-errmsgUpgrade mariadb-debugsourceUpgrade mariadb-testUpgrade mariadbUpgrade mariadb-gssapi-serverUpgrade galeraUpgrade galera-debugsourceUpgrade mariadb-serverUpgrade mariadb-pam-debuginfoUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-develUpgrade mariadb-pamUpgrade galera-debuginfoUpgrade mariadb-server-galeraUpgrade mariadb-oqgraph-engine-debuginfoUpgrade JudyUpgrade mariadb-backupUpgrade mariadb-embedded-develUpgrade mariadb-commonUpgrade mariadb-test-debuginfoUpgrade mariadb-server-debuginfo | Aug 3, 2022 | Feb 18, 2022 |
| Debian | — | Upgrade mariadb-10.5 | Jul 30, 2024 | Feb 18, 2022 |
| Freebsd | — | Upgrade mariadb104-clientUpgrade mariadb104-serverUpgrade mariadb103-clientUpgrade mariadb105-serverUpgrade mariadb105-clientUpgrade mariadb103-server | Nov 4, 2022 | Feb 10, 2022 |
| Gentoo Linux | — | Upgrade dev-db/mariadb. | May 10, 2024 | Feb 18, 2022 |
| Mariadb Mariadb | — | Upgrade MariaDB to the latest version | Mar 4, 2025 | Feb 18, 2022 |
| Oracle_linux | — | Upgrade mariadbUpgrade mariadb-backupUpgrade mariadb-pamUpgrade mariadb-testUpgrade mariadb-server-utilsUpgrade mariadb-embeddedUpgrade mariadb-gssapi-serverUpgrade mariadb-serverUpgrade mariadb-errmsgUpgrade mariadb-develUpgrade mariadb-oqgraph-engineUpgrade mariadb-commonUpgrade mariadb-embedded-develUpgrade mysql-selinuxUpgrade JudyUpgrade mariadb-server-galeraUpgrade galera | Aug 4, 2022 | Feb 18, 2022 |
| Redhat_linux | — | Upgrade mariadb-embeddedUpgrade mariadb-debugsourceUpgrade mariadb-gssapi-server-debuginfoUpgrade Judy-debuginfoUpgrade mariadb-server-debuginfoUpgrade mariadb-oqgraph-engineUpgrade galeraUpgrade mariadb-debuginfoUpgrade mariadb-server-utilsUpgrade mariadb-errmsgUpgrade mariadb-server-utils-debuginfoUpgrade mysql-selinuxUpgrade mariadb-gssapi-serverUpgrade mariadb-serverUpgrade mariadbUpgrade mariadb-pam-debuginfoUpgrade galera-debugsourceUpgrade mariadb-backupUpgrade Judy-debugsourceUpgrade galera-debuginfoUpgrade mariadb-embedded-debuginfoUpgrade JudyUpgrade mariadb-embedded-develUpgrade mariadb-backup-debuginfoUpgrade mariadb-server-galeraUpgrade mariadb-testUpgrade mariadb-test-debuginfoUpgrade mariadb-commonUpgrade mariadb-pamUpgrade mariadb-oqgraph-engine-debuginfoNo solution existsUpgrade mariadb-devel | Aug 3, 2022 | Feb 18, 2022 |
| Rocky_linux | — | Upgrade mariadb-testUpgrade mariadb-backup-debuginfoUpgrade mariadb-oqgraph-engine-debuginfoUpgrade JudyUpgrade mariadb-commonUpgrade mariadb-gssapi-server-debuginfoUpgrade galera-debuginfoUpgrade Judy-debugsourceUpgrade mariadb-pamUpgrade mariadb-server-debuginfoUpgrade mariadb-debugsourceUpgrade mariadb-serverUpgrade mariadb-oqgraph-engineUpgrade mariadb-backupUpgrade mariadb-server-galeraUpgrade mariadb-debuginfoUpgrade mariadb-develUpgrade mariadb-gssapi-serverUpgrade mariadb-errmsgUpgrade galeraUpgrade mariadb-embedded-develUpgrade mariadb-embeddedUpgrade mariadb-test-debuginfoUpgrade mariadbUpgrade mariadb-server-utilsUpgrade mariadb-pam-debuginfoUpgrade galera-debugsourceUpgrade mariadb-embedded-debuginfoUpgrade Judy-debuginfoUpgrade mariadb-server-utils-debuginfo | Mar 12, 2024 | Feb 18, 2022 |
| Suse | — | Upgrade mariadb-rpm-macrosUpgrade mariadb104-toolsUpgrade mariadb-galeraUpgrade libmysqld-develUpgrade mariadb-testUpgrade mariadb-toolsUpgrade mariadb104-benchUpgrade mariadb104-errormessagesUpgrade liblz4-1Upgrade mariadb104Upgrade libmariadbd19Upgrade libmariadb-develUpgrade mariadb-clientUpgrade libmysqld19Upgrade mariadbUpgrade libmariadb3Upgrade mariadb104-clientUpgrade python3-mysqlclientUpgrade mariadb-errormessagesUpgrade mariadb104-galeraUpgrade libmariadb_pluginsUpgrade libmariadbd104-develUpgrade mariadb104-rpm-macrosUpgrade mariadb104-testUpgrade libmariadbd-develUpgrade mariadb-bench | Mar 5, 2022 | Feb 18, 2022 |
| Ubuntu | — | Upgrade mariadb-server | Mar 22, 2023 | Feb 18, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 18, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub