The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
MariaDB CONNECT Storage Engine Format String Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL queries. The issue results from the lack of proper validation of a user-supplied string before using it as a format specifier. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the service account. Was ZDI-CAN-16193.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mariadb-commonUpgrade mariadb-pamUpgrade mariadb-testUpgrade mariadb-develUpgrade mariadb-server-utilsUpgrade mariadb-gssapi-serverUpgrade mariadb-oqgraph-engineUpgrade mariadb-backupUpgrade mariadbUpgrade galeraUpgrade mariadb-serverUpgrade JudyUpgrade mariadb-embedded-develUpgrade mariadb-errmsgUpgrade mariadb-embeddedUpgrade mariadb-server-galera | Aug 8, 2022 | Feb 18, 2022 |
| Alpine Linux | — | Upgrade mariadb | Aug 22, 2024 | Feb 18, 2022 |
| Amazon Linux Ami 2 | — | Upgrade mariadb-errmsgUpgrade mariadb-pamUpgrade mariadb-backupUpgrade mariadb-s3-engineUpgrade mariadb-libsUpgrade mariadb-serverUpgrade mariadb-testUpgrade mariadb-connect-engineUpgrade mariadb-embedded-develUpgrade mariadb-commonUpgrade mariadb-gssapi-serverUpgrade mariadb-sphinx-engineUpgrade mariadb-server-utilsUpgrade mariadbUpgrade mariadb-oqgraph-engineUpgrade mariadb-cracklib-password-checkUpgrade mariadb-embeddedUpgrade mariadb-develUpgrade mariadb-debuginfoUpgrade mariadb-server-galeraUpgrade mariadb-configUpgrade mariadb-rocksdb-engine | Sep 28, 2023 | Feb 18, 2022 |
| Amazon_linux_2023 | — | Upgrade mariadb105-backup-debuginfoUpgrade mariadb105-sphinx-engine-debuginfoUpgrade mariadb105-oqgraph-engineUpgrade mariadb105-server-debuginfoUpgrade mariadb105-cracklib-password-check-debuginfoUpgrade mariadb105-server-utils-debuginfoUpgrade mariadb105-oqgraph-engine-debuginfoUpgrade mariadb105Upgrade mariadb105-errmsgUpgrade mariadb105-backupUpgrade mariadb105-develUpgrade mariadb105-cracklib-password-checkUpgrade mariadb105-test-debuginfoUpgrade mariadb105-gssapi-server-debuginfoUpgrade mariadb105-rocksdb-engine-debuginfoUpgrade mariadb105-debuginfoUpgrade mariadb105-pam-debuginfoUpgrade mariadb105-gssapi-serverUpgrade mariadb105-sphinx-engineUpgrade mariadb105-commonUpgrade mariadb105-pamUpgrade mariadb105-serverUpgrade mariadb105-server-utilsUpgrade mariadb105-debugsourceUpgrade mariadb105-connect-engineUpgrade mariadb105-rocksdb-engineUpgrade mariadb105-connect-engine-debuginfoUpgrade mariadb105-test | Feb 17, 2025 | Feb 18, 2022 |
| Centos_linux | — | Upgrade mysql-selinuxUpgrade mariadb-serverUpgrade mariadb-embeddedUpgrade mariadbUpgrade mariadb-develUpgrade galera-debugsourceUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-debuginfoUpgrade mariadb-gssapi-serverUpgrade mariadb-server-debuginfoUpgrade Judy-debuginfoUpgrade mariadb-oqgraph-engineUpgrade mariadb-pam-debuginfoUpgrade mariadb-server-utilsUpgrade galeraUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-debugsourceUpgrade mariadb-backup-debuginfoUpgrade mariadb-pamUpgrade mariadb-backupUpgrade Judy-debugsourceUpgrade mariadb-testUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-errmsgUpgrade mariadb-embedded-debuginfoUpgrade JudyUpgrade mariadb-test-debuginfoUpgrade mariadb-embedded-develUpgrade galera-debuginfoUpgrade mariadb-server-galeraUpgrade mariadb-common | Aug 3, 2022 | Feb 18, 2022 |
| Debian | — | Upgrade mariadb-10.5 | Jul 30, 2024 | Feb 18, 2022 |
| Freebsd | — | Upgrade mariadb103-serverUpgrade mariadb105-serverUpgrade mariadb105-clientUpgrade mariadb104-serverUpgrade mariadb104-clientUpgrade mariadb103-client | Nov 4, 2022 | Feb 10, 2022 |
| Gentoo Linux | — | Upgrade dev-db/mariadb. | May 10, 2024 | Feb 18, 2022 |
| Mariadb Mariadb | — | Upgrade MariaDB to the latest version | Mar 4, 2025 | Feb 18, 2022 |
| Oracle_linux | — | Upgrade mariadb-pamUpgrade mariadb-server-galeraUpgrade mariadb-server-utilsUpgrade mariadb-gssapi-serverUpgrade mariadbUpgrade mariadb-develUpgrade mariadb-embeddedUpgrade JudyUpgrade mariadb-oqgraph-engineUpgrade mariadb-serverUpgrade mariadb-testUpgrade mariadb-backupUpgrade mariadb-embedded-develUpgrade mysql-selinuxUpgrade mariadb-errmsgUpgrade galeraUpgrade mariadb-common | Aug 4, 2022 | Feb 18, 2022 |
| Redhat_linux | — | Upgrade galera-debuginfoUpgrade mariadb-server-galeraUpgrade galera-debugsourceUpgrade mariadb-pam-debuginfoUpgrade mysql-selinuxUpgrade mariadb-oqgraph-engineUpgrade galeraUpgrade Judy-debugsourceUpgrade mariadb-serverUpgrade mariadb-debugsourceUpgrade mariadb-errmsgUpgrade mariadb-embedded-develUpgrade mariadb-embedded-debuginfoUpgrade mariadb-commonUpgrade mariadb-backupUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadbNo solution existsUpgrade Judy-debuginfoUpgrade mariadb-testUpgrade mariadb-server-debuginfoUpgrade mariadb-pamUpgrade JudyUpgrade mariadb-debuginfoUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-gssapi-serverUpgrade mariadb-develUpgrade mariadb-server-utilsUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-embeddedUpgrade mariadb-test-debuginfoUpgrade mariadb-backup-debuginfo | Aug 3, 2022 | Feb 18, 2022 |
| Rocky_linux | — | Upgrade galera-debugsourceUpgrade mariadb-debugsourceUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-embeddedUpgrade mariadb-server-utilsUpgrade Judy-debugsourceUpgrade mariadb-testUpgrade mariadb-gssapi-serverUpgrade mariadb-debuginfoUpgrade Judy-debuginfoUpgrade mariadb-backup-debuginfoUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-pam-debuginfoUpgrade mariadb-serverUpgrade galeraUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-pamUpgrade mariadb-server-galeraUpgrade mariadb-backupUpgrade mariadb-develUpgrade galera-debuginfoUpgrade mariadb-test-debuginfoUpgrade mariadb-embedded-develUpgrade mariadb-commonUpgrade mariadb-server-debuginfoUpgrade mariadb-errmsgUpgrade mariadbUpgrade mariadb-oqgraph-engineUpgrade mariadb-embedded-debuginfoUpgrade Judy | Mar 12, 2024 | Feb 18, 2022 |
| Suse | — | Upgrade libmariadb_pluginsUpgrade mariadb104Upgrade mariadb104-galeraUpgrade mariadbUpgrade mariadb-toolsUpgrade python3-mysqlclientUpgrade mariadb104-errormessagesUpgrade mariadb104-rpm-macrosUpgrade mariadb104-benchUpgrade mariadb-clientUpgrade mariadb-testUpgrade mariadb-errormessagesUpgrade libmariadbd-develUpgrade libmariadb-develUpgrade liblz4-1Upgrade mariadb104-clientUpgrade mariadb-benchUpgrade libmariadbd104-develUpgrade mariadb104-testUpgrade libmariadb3Upgrade mariadb104-toolsUpgrade mariadb-rpm-macrosUpgrade libmariadbd19Upgrade libmysqld19Upgrade mariadb-galeraUpgrade libmysqld-devel | Mar 5, 2022 | Feb 18, 2022 |
| Ubuntu | — | Upgrade mariadb-server | Mar 22, 2023 | Feb 18, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 18, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub