MariaDB CONNECT Storage Engine Use-After-Free Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL queries. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the service account. Was ZDI-CAN-16207.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
- CVSS 3.0 Base Score: 7
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mariadb-embedded-develUpgrade JudyUpgrade mariadbUpgrade mariadb-errmsgUpgrade mariadb-develUpgrade mariadb-pamUpgrade mariadb-server-galeraUpgrade mariadb-commonUpgrade mariadb-serverUpgrade mariadb-server-utilsUpgrade mariadb-gssapi-serverUpgrade mariadb-testUpgrade mariadb-embeddedUpgrade galeraUpgrade mariadb-backupUpgrade mariadb-oqgraph-engine | Aug 8, 2022 | Feb 18, 2022 |
| Alpine Linux | — | Upgrade mariadb | Aug 22, 2024 | Feb 18, 2022 |
| Amazon Linux Ami 2 | — | Upgrade mariadb-sphinx-engineUpgrade mariadb-configUpgrade mariadb-s3-engineUpgrade mariadb-pamUpgrade mariadb-rocksdb-engineUpgrade mariadb-embeddedUpgrade mariadb-develUpgrade mariadb-server-utilsUpgrade mariadb-cracklib-password-checkUpgrade mariadb-testUpgrade mariadb-errmsgUpgrade mariadb-gssapi-serverUpgrade mariadb-libsUpgrade mariadbUpgrade mariadb-embedded-develUpgrade mariadb-backupUpgrade mariadb-debuginfoUpgrade mariadb-commonUpgrade mariadb-connect-engineUpgrade mariadb-serverUpgrade mariadb-server-galeraUpgrade mariadb-oqgraph-engine | Sep 28, 2023 | Feb 18, 2022 |
| Amazon_linux_2023 | — | Upgrade mariadb105-connect-engineUpgrade mariadb105Upgrade mariadb105-rocksdb-engine-debuginfoUpgrade mariadb105-server-utilsUpgrade mariadb105-connect-engine-debuginfoUpgrade mariadb105-rocksdb-engineUpgrade mariadb105-sphinx-engine-debuginfoUpgrade mariadb105-sphinx-engineUpgrade mariadb105-pamUpgrade mariadb105-gssapi-server-debuginfoUpgrade mariadb105-cracklib-password-checkUpgrade mariadb105-backup-debuginfoUpgrade mariadb105-gssapi-serverUpgrade mariadb105-testUpgrade mariadb105-commonUpgrade mariadb105-oqgraph-engineUpgrade mariadb105-serverUpgrade mariadb105-test-debuginfoUpgrade mariadb105-develUpgrade mariadb105-errmsgUpgrade mariadb105-server-debuginfoUpgrade mariadb105-oqgraph-engine-debuginfoUpgrade mariadb105-pam-debuginfoUpgrade mariadb105-server-utils-debuginfoUpgrade mariadb105-cracklib-password-check-debuginfoUpgrade mariadb105-debugsourceUpgrade mariadb105-debuginfoUpgrade mariadb105-backup | Feb 17, 2025 | Feb 18, 2022 |
| Centos_linux | — | Upgrade mariadb-debuginfoUpgrade mysql-selinuxUpgrade mariadb-embedded-debuginfoUpgrade mariadb-errmsgUpgrade mariadb-debugsourceUpgrade mariadbUpgrade Judy-debuginfoUpgrade mariadb-testUpgrade galera-debugsourceUpgrade galeraUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-gssapi-serverUpgrade Judy-debugsourceUpgrade mariadb-oqgraph-engineUpgrade mariadb-server-utilsUpgrade mariadb-pam-debuginfoUpgrade mariadb-serverUpgrade mariadb-embeddedUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-backup-debuginfoUpgrade mariadb-develUpgrade mariadb-pamUpgrade galera-debuginfoUpgrade mariadb-embedded-develUpgrade mariadb-backupUpgrade JudyUpgrade mariadb-server-galeraUpgrade mariadb-commonUpgrade mariadb-test-debuginfoUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-server-debuginfo | Aug 3, 2022 | Feb 18, 2022 |
| Debian | — | Upgrade mariadb-10.5 | Jul 30, 2024 | Feb 18, 2022 |
| Freebsd | — | Upgrade mariadb104-clientUpgrade mariadb104-serverUpgrade mariadb103-serverUpgrade mariadb105-serverUpgrade mariadb105-clientUpgrade mariadb103-client | Nov 4, 2022 | Feb 10, 2022 |
| Gentoo Linux | — | Upgrade dev-db/mariadb. | May 10, 2024 | Feb 18, 2022 |
| Mariadb Mariadb | — | Upgrade MariaDB to the latest version | Mar 4, 2025 | Feb 18, 2022 |
| Oracle_linux | — | Upgrade galeraUpgrade mariadb-oqgraph-engineUpgrade mariadb-server-galeraUpgrade mariadb-commonUpgrade JudyUpgrade mariadb-develUpgrade mysql-selinuxUpgrade mariadb-embedded-develUpgrade mariadbUpgrade mariadb-pamUpgrade mariadb-backupUpgrade mariadb-serverUpgrade mariadb-testUpgrade mariadb-server-utilsUpgrade mariadb-errmsgUpgrade mariadb-gssapi-serverUpgrade mariadb-embedded | Aug 4, 2022 | Feb 18, 2022 |
| Redhat_linux | — | Upgrade mariadb-embeddedUpgrade mariadb-server-utilsUpgrade mariadb-oqgraph-engineUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-errmsgUpgrade galeraUpgrade Judy-debuginfoUpgrade mariadb-serverUpgrade mariadb-pam-debuginfoUpgrade mariadb-debugsourceUpgrade galera-debugsourceUpgrade mariadb-server-debuginfoUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-debuginfoUpgrade mariadbUpgrade mysql-selinuxUpgrade mariadb-gssapi-serverUpgrade mariadb-backup-debuginfoUpgrade mariadb-pamUpgrade Judy-debugsourceUpgrade galera-debuginfoNo solution existsUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-embedded-debuginfoUpgrade mariadb-develUpgrade mariadb-commonUpgrade JudyUpgrade mariadb-test-debuginfoUpgrade mariadb-embedded-develUpgrade mariadb-testUpgrade mariadb-backupUpgrade mariadb-server-galera | Aug 3, 2022 | Feb 18, 2022 |
| Rocky_linux | — | Upgrade mariadb-backup-debuginfoUpgrade mariadb-commonUpgrade mariadb-pamUpgrade Judy-debugsourceUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-server-debuginfoUpgrade JudyUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-testUpgrade mariadb-debugsourceUpgrade galera-debuginfoUpgrade galeraUpgrade mariadb-server-utilsUpgrade mariadb-test-debuginfoUpgrade Judy-debuginfoUpgrade mariadb-serverUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-oqgraph-engineUpgrade mariadb-embedded-develUpgrade mariadb-develUpgrade mariadb-debuginfoUpgrade mariadb-server-galeraUpgrade mariadb-gssapi-serverUpgrade mariadb-errmsgUpgrade mariadbUpgrade galera-debugsourceUpgrade mariadb-pam-debuginfoUpgrade mariadb-embedded-debuginfoUpgrade mariadb-embeddedUpgrade mariadb-backup | Mar 12, 2024 | Feb 18, 2022 |
| Suse | — | Upgrade libmysqld-develUpgrade mariadb104-toolsUpgrade libmariadb-develUpgrade liblz4-1Upgrade mariadb-rpm-macrosUpgrade mariadb104-benchUpgrade mariadb104-errormessagesUpgrade mariadb-galeraUpgrade mariadb104Upgrade mariadb-toolsUpgrade mariadb-testUpgrade libmariadbd19Upgrade libmariadb3Upgrade libmysqld19Upgrade mariadb-benchUpgrade mariadb104-rpm-macrosUpgrade mariadb104-clientUpgrade mariadb-errormessagesUpgrade mariadb-clientUpgrade python3-mysqlclientUpgrade mariadb104-testUpgrade mariadbUpgrade mariadb104-galeraUpgrade libmariadbd104-develUpgrade libmariadbd-develUpgrade libmariadb_plugins | Mar 5, 2022 | Feb 18, 2022 |
| Ubuntu | — | Upgrade mariadb-server | Mar 22, 2023 | Feb 18, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 18, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub