MariaDB CONNECT Storage Engine Use-After-Free Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL queries. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the service account. Was ZDI-CAN-16207.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
- CVSS 3.0 Base Score: 7
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mariadb-commonUpgrade mariadb-embedded-develUpgrade mariadb-server-galeraUpgrade JudyUpgrade mariadb-develUpgrade mariadb-errmsgUpgrade mariadb-pamUpgrade mariadbUpgrade mariadb-serverUpgrade mariadb-server-utilsUpgrade mariadb-oqgraph-engineUpgrade galeraUpgrade mariadb-testUpgrade mariadb-gssapi-serverUpgrade mariadb-backupUpgrade mariadb-embedded | Aug 8, 2022 | Feb 18, 2022 |
| Alpine Linux | — | Upgrade mariadb | Aug 22, 2024 | Feb 18, 2022 |
| Amazon Linux Ami 2 | — | Upgrade mariadb-testUpgrade mariadb-develUpgrade mariadb-s3-engineUpgrade mariadb-cracklib-password-checkUpgrade mariadb-sphinx-engineUpgrade mariadb-server-utilsUpgrade mariadb-configUpgrade mariadb-pamUpgrade mariadb-rocksdb-engineUpgrade mariadb-embeddedUpgrade mariadbUpgrade mariadb-server-galeraUpgrade mariadb-serverUpgrade mariadb-oqgraph-engineUpgrade mariadb-backupUpgrade mariadb-errmsgUpgrade mariadb-gssapi-serverUpgrade mariadb-libsUpgrade mariadb-commonUpgrade mariadb-debuginfoUpgrade mariadb-embedded-develUpgrade mariadb-connect-engine | Sep 28, 2023 | Feb 18, 2022 |
| Amazon_linux_2023 | — | Upgrade mariadb105-pam-debuginfoUpgrade mariadb105-server-utils-debuginfoUpgrade mariadb105-oqgraph-engine-debuginfoUpgrade mariadb105-test-debuginfoUpgrade mariadb105-debuginfoUpgrade mariadb105-develUpgrade mariadb105-debugsourceUpgrade mariadb105-server-debuginfoUpgrade mariadb105-backupUpgrade mariadb105-errmsgUpgrade mariadb105-cracklib-password-check-debuginfoUpgrade mariadb105-gssapi-serverUpgrade mariadb105Upgrade mariadb105-connect-engineUpgrade mariadb105-sphinx-engineUpgrade mariadb105-oqgraph-engineUpgrade mariadb105-backup-debuginfoUpgrade mariadb105-gssapi-server-debuginfoUpgrade mariadb105-rocksdb-engineUpgrade mariadb105-connect-engine-debuginfoUpgrade mariadb105-cracklib-password-checkUpgrade mariadb105-server-utilsUpgrade mariadb105-rocksdb-engine-debuginfoUpgrade mariadb105-serverUpgrade mariadb105-pamUpgrade mariadb105-commonUpgrade mariadb105-testUpgrade mariadb105-sphinx-engine-debuginfo | Feb 17, 2025 | Feb 18, 2022 |
| Centos_linux | — | Upgrade mariadb-gssapi-serverUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-pam-debuginfoUpgrade galeraUpgrade galera-debugsourceUpgrade mariadb-debuginfoUpgrade mariadb-oqgraph-engineUpgrade Judy-debugsourceUpgrade mariadbUpgrade mariadb-server-utilsUpgrade mariadb-serverUpgrade mariadb-embeddedUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-debugsourceUpgrade mariadb-embedded-debuginfoUpgrade mariadb-errmsgUpgrade mariadb-testUpgrade Judy-debuginfoUpgrade mariadb-backup-debuginfoUpgrade mysql-selinuxUpgrade galera-debuginfoUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-backupUpgrade mariadb-server-debuginfoUpgrade mariadb-develUpgrade mariadb-pamUpgrade mariadb-embedded-develUpgrade mariadb-commonUpgrade mariadb-test-debuginfoUpgrade JudyUpgrade mariadb-server-galera | Aug 3, 2022 | Feb 18, 2022 |
| Debian | — | Upgrade mariadb-10.5 | Jul 30, 2024 | Feb 18, 2022 |
| Freebsd | — | Upgrade mariadb103-clientUpgrade mariadb103-serverUpgrade mariadb105-clientUpgrade mariadb105-serverUpgrade mariadb104-clientUpgrade mariadb104-server | Nov 4, 2022 | Feb 10, 2022 |
| Gentoo Linux | — | Upgrade dev-db/mariadb. | May 10, 2024 | Feb 18, 2022 |
| Mariadb Mariadb | — | Upgrade MariaDB to the latest version | Mar 4, 2025 | Feb 18, 2022 |
| Oracle_linux | — | Upgrade mariadb-testUpgrade mariadb-pamUpgrade mariadb-serverUpgrade mariadb-backupUpgrade mariadb-errmsgUpgrade mariadb-server-utilsUpgrade mariadb-gssapi-serverUpgrade mariadb-embeddedUpgrade mariadbUpgrade JudyUpgrade mariadb-server-galeraUpgrade mysql-selinuxUpgrade mariadb-develUpgrade mariadb-commonUpgrade mariadb-embedded-develUpgrade galeraUpgrade mariadb-oqgraph-engine | Aug 4, 2022 | Feb 18, 2022 |
| Redhat_linux | — | Upgrade mariadb-server-galeraUpgrade JudyNo solution existsUpgrade mariadb-embedded-debuginfoUpgrade mariadb-develUpgrade mariadb-backup-debuginfoUpgrade mariadb-test-debuginfoUpgrade mariadb-testUpgrade mariadb-embedded-develUpgrade mariadb-pamUpgrade mariadb-commonUpgrade mariadb-oqgraph-engine-debuginfoUpgrade Judy-debugsourceUpgrade galera-debuginfoUpgrade mariadb-backupUpgrade mariadb-gssapi-serverUpgrade mariadb-gssapi-server-debuginfoUpgrade mysql-selinuxUpgrade mariadb-errmsgUpgrade mariadb-debuginfoUpgrade galeraUpgrade mariadb-serverUpgrade mariadb-debugsourceUpgrade Judy-debuginfoUpgrade mariadb-embeddedUpgrade mariadb-server-debuginfoUpgrade mariadb-server-utils-debuginfoUpgrade mariadbUpgrade galera-debugsourceUpgrade mariadb-pam-debuginfoUpgrade mariadb-server-utilsUpgrade mariadb-oqgraph-engine | Aug 3, 2022 | Feb 18, 2022 |
| Rocky_linux | — | Upgrade mariadb-embedded-debuginfoUpgrade mariadb-develUpgrade galeraUpgrade mariadb-gssapi-serverUpgrade mariadb-test-debuginfoUpgrade mariadb-pam-debuginfoUpgrade mariadb-embeddedUpgrade mariadb-embedded-develUpgrade mariadb-debuginfoUpgrade mariadb-server-galeraUpgrade mariadb-errmsgUpgrade galera-debugsourceUpgrade mariadbUpgrade mariadb-server-utilsUpgrade mariadb-server-utils-debuginfoUpgrade Judy-debuginfoUpgrade mariadb-backupUpgrade mariadb-oqgraph-engineUpgrade mariadb-serverUpgrade mariadb-pamUpgrade mariadb-gssapi-server-debuginfoUpgrade JudyUpgrade mariadb-backup-debuginfoUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-testUpgrade mariadb-server-debuginfoUpgrade mariadb-commonUpgrade mariadb-debugsourceUpgrade galera-debuginfoUpgrade Judy-debugsource | Mar 12, 2024 | Feb 18, 2022 |
| Suse | — | Upgrade libmysqld19Upgrade mariadb-clientUpgrade mariadb104-rpm-macrosUpgrade libmariadbd104-develUpgrade mariadb-errormessagesUpgrade libmariadb_pluginsUpgrade mariadb104-clientUpgrade libmariadbd-develUpgrade mariadb-benchUpgrade mariadbUpgrade python3-mysqlclientUpgrade mariadb104-testUpgrade libmariadb3Upgrade mariadb104-galeraUpgrade mariadb-testUpgrade mariadb104Upgrade mariadb-rpm-macrosUpgrade libmariadbd19Upgrade libmariadb-develUpgrade mariadb104-benchUpgrade liblz4-1Upgrade mariadb-galeraUpgrade mariadb104-toolsUpgrade libmysqld-develUpgrade mariadb-toolsUpgrade mariadb104-errormessages | Mar 5, 2022 | Feb 18, 2022 |
| Ubuntu | — | Upgrade mariadb-server | Mar 22, 2023 | Feb 18, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 18, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub