MariaDB CONNECT Storage Engine Format String Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL queries. The issue results from the lack of proper validation of a user-supplied string before using it as a format specifier. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the service account. Was ZDI-CAN-16193.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
- CVSS 3.0 Base Score: 7
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mariadb-commonUpgrade mariadb-develUpgrade mariadb-testUpgrade mariadb-pamUpgrade mariadb-server-utilsUpgrade mariadb-oqgraph-engineUpgrade mariadb-backupUpgrade galeraUpgrade mariadbUpgrade mariadb-server-galeraUpgrade mariadb-errmsgUpgrade mariadb-embedded-develUpgrade mariadb-embeddedUpgrade JudyUpgrade mariadb-gssapi-serverUpgrade mariadb-server | Aug 8, 2022 | Feb 18, 2022 |
| Alpine Linux | — | Upgrade mariadb | Aug 22, 2024 | Feb 18, 2022 |
| Amazon Linux Ami 2 | — | Upgrade mariadb-debuginfoUpgrade mariadb-embeddedUpgrade mariadb-sphinx-engineUpgrade mariadb-cracklib-password-checkUpgrade mariadbUpgrade mariadb-rocksdb-engineUpgrade mariadb-configUpgrade mariadb-gssapi-serverUpgrade mariadb-develUpgrade mariadb-server-utilsUpgrade mariadb-server-galeraUpgrade mariadb-oqgraph-engineUpgrade mariadb-pamUpgrade mariadb-embedded-develUpgrade mariadb-testUpgrade mariadb-libsUpgrade mariadb-connect-engineUpgrade mariadb-commonUpgrade mariadb-errmsgUpgrade mariadb-s3-engineUpgrade mariadb-backupUpgrade mariadb-server | Sep 28, 2023 | Feb 18, 2022 |
| Amazon_linux_2023 | — | Upgrade mariadb105-oqgraph-engine-debuginfoUpgrade mariadb105-sphinx-engine-debuginfoUpgrade mariadb105-oqgraph-engineUpgrade mariadb105Upgrade mariadb105-cracklib-password-checkUpgrade mariadb105-develUpgrade mariadb105-backup-debuginfoUpgrade mariadb105-backupUpgrade mariadb105-test-debuginfoUpgrade mariadb105-cracklib-password-check-debuginfoUpgrade mariadb105-server-debuginfoUpgrade mariadb105-server-utils-debuginfoUpgrade mariadb105-errmsgUpgrade mariadb105-commonUpgrade mariadb105-debugsourceUpgrade mariadb105-connect-engineUpgrade mariadb105-rocksdb-engineUpgrade mariadb105-pam-debuginfoUpgrade mariadb105-sphinx-engineUpgrade mariadb105-debuginfoUpgrade mariadb105-pamUpgrade mariadb105-gssapi-serverUpgrade mariadb105-rocksdb-engine-debuginfoUpgrade mariadb105-connect-engine-debuginfoUpgrade mariadb105-testUpgrade mariadb105-gssapi-server-debuginfoUpgrade mariadb105-serverUpgrade mariadb105-server-utils | Feb 17, 2025 | Feb 18, 2022 |
| Centos_linux | — | Upgrade mariadb-server-utils-debuginfoUpgrade mariadb-server-utilsUpgrade mariadb-embeddedUpgrade galeraUpgrade mariadb-serverUpgrade mariadb-debugsourceUpgrade mariadb-pam-debuginfoUpgrade mariadb-develUpgrade mariadbUpgrade mariadb-debuginfoUpgrade mysql-selinuxUpgrade Judy-debuginfoUpgrade mariadb-oqgraph-engineUpgrade mariadb-server-debuginfoUpgrade mariadb-gssapi-server-debuginfoUpgrade galera-debugsourceUpgrade mariadb-gssapi-serverUpgrade mariadb-pamUpgrade JudyUpgrade mariadb-testUpgrade mariadb-test-debuginfoUpgrade Judy-debugsourceUpgrade mariadb-backupUpgrade mariadb-errmsgUpgrade mariadb-embedded-debuginfoUpgrade mariadb-backup-debuginfoUpgrade mariadb-server-galeraUpgrade galera-debuginfoUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-embedded-develUpgrade mariadb-common | Aug 3, 2022 | Feb 18, 2022 |
| Debian | — | Upgrade mariadb-10.5 | Jul 30, 2024 | Feb 18, 2022 |
| Freebsd | — | Upgrade mariadb104-clientUpgrade mariadb103-clientUpgrade mariadb103-serverUpgrade mariadb104-serverUpgrade mariadb105-clientUpgrade mariadb105-server | Nov 4, 2022 | Feb 10, 2022 |
| Gentoo Linux | — | Upgrade dev-db/mariadb. | May 10, 2024 | Feb 18, 2022 |
| Mariadb Mariadb | — | Upgrade MariaDB to the latest version | Mar 4, 2025 | Feb 18, 2022 |
| Oracle_linux | — | Upgrade mariadb-develUpgrade JudyUpgrade mariadb-embeddedUpgrade mariadbUpgrade mariadb-pamUpgrade mariadb-server-galeraUpgrade mariadb-server-utilsUpgrade mariadb-gssapi-serverUpgrade mariadb-testUpgrade mariadb-oqgraph-engineUpgrade mariadb-embedded-develUpgrade mariadb-serverUpgrade mariadb-commonUpgrade mariadb-backupUpgrade mysql-selinuxUpgrade mariadb-errmsgUpgrade galera | Aug 4, 2022 | Feb 18, 2022 |
| Redhat_linux | — | Upgrade mysql-selinuxUpgrade mariadb-serverUpgrade galeraUpgrade mariadb-server-galeraUpgrade mariadb-debugsourceUpgrade galera-debugsourceUpgrade Judy-debugsourceUpgrade galera-debuginfoUpgrade mariadb-oqgraph-engineUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-embedded-develUpgrade mariadbNo solution existsUpgrade mariadb-errmsgUpgrade mariadb-embedded-debuginfoUpgrade mariadb-backupUpgrade mariadb-commonUpgrade mariadb-pam-debuginfoUpgrade mariadb-backup-debuginfoUpgrade mariadb-pamUpgrade mariadb-test-debuginfoUpgrade mariadb-debuginfoUpgrade mariadb-gssapi-server-debuginfoUpgrade JudyUpgrade mariadb-server-utilsUpgrade mariadb-server-debuginfoUpgrade mariadb-server-utils-debuginfoUpgrade Judy-debuginfoUpgrade mariadb-gssapi-serverUpgrade mariadb-develUpgrade mariadb-embeddedUpgrade mariadb-test | Aug 3, 2022 | Feb 18, 2022 |
| Rocky_linux | — | Upgrade Judy-debugsourceUpgrade mariadb-server-utilsUpgrade mariadb-testUpgrade galera-debugsourceUpgrade mariadb-debugsourceUpgrade galeraUpgrade mariadb-gssapi-serverUpgrade mariadb-debuginfoUpgrade mariadb-serverUpgrade mariadb-gssapi-server-debuginfoUpgrade Judy-debuginfoUpgrade mariadb-embeddedUpgrade mariadb-pam-debuginfoUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-backup-debuginfoUpgrade mariadb-backupUpgrade mariadb-develUpgrade mariadbUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-server-galeraUpgrade mariadb-server-debuginfoUpgrade mariadb-embedded-debuginfoUpgrade mariadb-errmsgUpgrade mariadb-test-debuginfoUpgrade galera-debuginfoUpgrade mariadb-commonUpgrade mariadb-oqgraph-engineUpgrade JudyUpgrade mariadb-embedded-develUpgrade mariadb-pam | Mar 12, 2024 | Feb 18, 2022 |
| Suse | — | Upgrade libmariadbd104-develUpgrade mariadb104-clientUpgrade libmysqld-develUpgrade mariadb-rpm-macrosUpgrade mariadb-galeraUpgrade libmysqld19Upgrade mariadb104-testUpgrade liblz4-1Upgrade libmariadb3Upgrade libmariadbd19Upgrade libmariadb-develUpgrade mariadb104-toolsUpgrade mariadb-benchUpgrade mariadb-testUpgrade mariadb-toolsUpgrade libmariadb_pluginsUpgrade mariadb104-benchUpgrade libmariadbd-develUpgrade mariadb104Upgrade mariadb-errormessagesUpgrade mariadb104-rpm-macrosUpgrade mariadb104-galeraUpgrade mariadbUpgrade python3-mysqlclientUpgrade mariadb104-errormessagesUpgrade mariadb-client | Mar 5, 2022 | Feb 18, 2022 |
| Ubuntu | — | Upgrade mariadb-server | Mar 22, 2023 | Feb 18, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 18, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub