MariaDB CONNECT Storage Engine Use-After-Free Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL queries. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the service account. Was ZDI-CAN-16207.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mariadb-embedded-develUpgrade mariadbUpgrade mariadb-errmsgUpgrade mariadb-commonUpgrade mariadb-server-galeraUpgrade mariadb-pamUpgrade mariadb-develUpgrade JudyUpgrade mariadb-oqgraph-engineUpgrade mariadb-gssapi-serverUpgrade galeraUpgrade mariadb-testUpgrade mariadb-embeddedUpgrade mariadb-backupUpgrade mariadb-serverUpgrade mariadb-server-utils | Aug 8, 2022 | Feb 18, 2022 |
| Alpine Linux | — | Upgrade mariadb | Aug 22, 2024 | Feb 18, 2022 |
| Amazon Linux Ami 2 | — | Upgrade mariadb-develUpgrade mariadb-cracklib-password-checkUpgrade mariadb-rocksdb-engineUpgrade mariadb-embeddedUpgrade mariadb-pamUpgrade mariadb-sphinx-engineUpgrade mariadb-testUpgrade mariadb-configUpgrade mariadb-s3-engineUpgrade mariadb-server-utilsUpgrade mariadb-gssapi-serverUpgrade mariadb-backupUpgrade mariadb-connect-engineUpgrade mariadb-oqgraph-engineUpgrade mariadb-errmsgUpgrade mariadb-embedded-develUpgrade mariadb-serverUpgrade mariadb-commonUpgrade mariadb-server-galeraUpgrade mariadb-libsUpgrade mariadbUpgrade mariadb-debuginfo | Sep 28, 2023 | Feb 18, 2022 |
| Amazon_linux_2023 | — | Upgrade mariadb105-server-debuginfoUpgrade mariadb105-cracklib-password-check-debuginfoUpgrade mariadb105-debugsourceUpgrade mariadb105-test-debuginfoUpgrade mariadb105-errmsgUpgrade mariadb105-debuginfoUpgrade mariadb105-backupUpgrade mariadb105-oqgraph-engine-debuginfoUpgrade mariadb105-server-utils-debuginfoUpgrade mariadb105-pam-debuginfoUpgrade mariadb105-develUpgrade mariadb105-oqgraph-engineUpgrade mariadb105-rocksdb-engineUpgrade mariadb105-commonUpgrade mariadb105-connect-engine-debuginfoUpgrade mariadb105-gssapi-server-debuginfoUpgrade mariadb105Upgrade mariadb105-rocksdb-engine-debuginfoUpgrade mariadb105-backup-debuginfoUpgrade mariadb105-cracklib-password-checkUpgrade mariadb105-gssapi-serverUpgrade mariadb105-serverUpgrade mariadb105-server-utilsUpgrade mariadb105-connect-engineUpgrade mariadb105-sphinx-engine-debuginfoUpgrade mariadb105-pamUpgrade mariadb105-sphinx-engineUpgrade mariadb105-test | Feb 17, 2025 | Feb 18, 2022 |
| Centos_linux | — | Upgrade mariadb-oqgraph-engineUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-backup-debuginfoUpgrade Judy-debuginfoUpgrade mariadb-gssapi-serverUpgrade galeraUpgrade galera-debugsourceUpgrade mariadb-debuginfoUpgrade mariadb-server-utilsUpgrade mariadb-embeddedUpgrade mysql-selinuxUpgrade Judy-debugsourceUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-pam-debuginfoUpgrade mariadbUpgrade mariadb-debugsourceUpgrade mariadb-embedded-debuginfoUpgrade mariadb-errmsgUpgrade mariadb-testUpgrade mariadb-serverUpgrade mariadb-oqgraph-engine-debuginfoUpgrade JudyUpgrade mariadb-server-galeraUpgrade galera-debuginfoUpgrade mariadb-pamUpgrade mariadb-server-debuginfoUpgrade mariadb-develUpgrade mariadb-backupUpgrade mariadb-test-debuginfoUpgrade mariadb-commonUpgrade mariadb-embedded-devel | Aug 3, 2022 | Feb 18, 2022 |
| Debian | — | Upgrade mariadb-10.5 | Jul 30, 2024 | Feb 18, 2022 |
| Freebsd | — | Upgrade mariadb103-serverUpgrade mariadb105-clientUpgrade mariadb105-serverUpgrade mariadb103-clientUpgrade mariadb104-clientUpgrade mariadb104-server | Nov 4, 2022 | Feb 10, 2022 |
| Gentoo Linux | — | Upgrade dev-db/mariadb. | May 10, 2024 | Feb 18, 2022 |
| Mariadb Mariadb | — | Upgrade MariaDB to the latest version | Mar 4, 2025 | Feb 18, 2022 |
| Oracle_linux | — | Upgrade mariadb-server-galeraUpgrade mariadb-oqgraph-engineUpgrade mariadb-commonUpgrade mariadb-develUpgrade galeraUpgrade mariadb-embedded-develUpgrade JudyUpgrade mysql-selinuxUpgrade mariadbUpgrade mariadb-server-utilsUpgrade mariadb-pamUpgrade mariadb-embeddedUpgrade mariadb-serverUpgrade mariadb-backupUpgrade mariadb-gssapi-serverUpgrade mariadb-testUpgrade mariadb-errmsg | Aug 4, 2022 | Feb 18, 2022 |
| Redhat_linux | — | Upgrade mariadbUpgrade Judy-debuginfoUpgrade mariadb-debugsourceUpgrade mariadb-errmsgUpgrade mysql-selinuxUpgrade mariadb-server-utilsUpgrade mariadb-server-debuginfoUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-embeddedUpgrade mariadb-oqgraph-engineUpgrade galera-debugsourceUpgrade mariadb-serverUpgrade mariadb-gssapi-serverUpgrade mariadb-pam-debuginfoUpgrade galeraUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-debuginfoUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-testUpgrade mariadb-pamUpgrade mariadb-backup-debuginfoUpgrade JudyUpgrade mariadb-embedded-develNo solution existsUpgrade mariadb-develUpgrade mariadb-backupUpgrade galera-debuginfoUpgrade mariadb-commonUpgrade Judy-debugsourceUpgrade mariadb-test-debuginfoUpgrade mariadb-server-galeraUpgrade mariadb-embedded-debuginfo | Aug 3, 2022 | Feb 18, 2022 |
| Rocky_linux | — | Upgrade mariadb-embedded-debuginfoUpgrade mariadb-backupUpgrade mariadb-test-debuginfoUpgrade mariadb-embeddedUpgrade mariadbUpgrade mariadb-pam-debuginfoUpgrade mariadb-gssapi-serverUpgrade mariadb-serverUpgrade mariadb-server-utilsUpgrade mariadb-debuginfoUpgrade mariadb-oqgraph-engineUpgrade mariadb-server-galeraUpgrade mariadb-server-utils-debuginfoUpgrade Judy-debuginfoUpgrade galera-debugsourceUpgrade mariadb-embedded-develUpgrade mariadb-errmsgUpgrade galeraUpgrade mariadb-develUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-pamUpgrade mariadb-commonUpgrade galera-debuginfoUpgrade Judy-debugsourceUpgrade JudyUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-testUpgrade mariadb-debugsourceUpgrade mariadb-server-debuginfoUpgrade mariadb-backup-debuginfo | Mar 12, 2024 | Feb 18, 2022 |
| Suse | — | Upgrade mariadb104-toolsUpgrade mariadb-testUpgrade mariadb-toolsUpgrade libmysqld-develUpgrade mariadb-rpm-macrosUpgrade mariadb104Upgrade mariadb-galeraUpgrade mariadb104-errormessagesUpgrade liblz4-1Upgrade mariadb104-benchUpgrade libmariadb-develUpgrade libmariadbd19Upgrade libmariadbd104-develUpgrade libmysqld19Upgrade mariadb104-galeraUpgrade mariadb-errormessagesUpgrade mariadbUpgrade python3-mysqlclientUpgrade mariadb104-clientUpgrade libmariadbd-develUpgrade mariadb104-testUpgrade mariadb-clientUpgrade mariadb-benchUpgrade libmariadb3Upgrade libmariadb_pluginsUpgrade mariadb104-rpm-macros | Mar 5, 2022 | Feb 18, 2022 |
| Ubuntu | — | Upgrade mariadb-server | Mar 22, 2023 | Feb 18, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 18, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub