MariaDB CONNECT Storage Engine Format String Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL queries. The issue results from the lack of proper validation of a user-supplied string before using it as a format specifier. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the service account. Was ZDI-CAN-16193.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
- CVSS 3.0 Base Score: 7
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mariadb-serverUpgrade mariadb-errmsgUpgrade mariadb-server-galeraUpgrade mariadb-oqgraph-engineUpgrade galeraUpgrade mariadb-gssapi-serverUpgrade mariadb-backupUpgrade JudyUpgrade mariadbUpgrade mariadb-embeddedUpgrade mariadb-embedded-develUpgrade mariadb-server-utilsUpgrade mariadb-commonUpgrade mariadb-testUpgrade mariadb-pamUpgrade mariadb-devel | Aug 8, 2022 | Feb 18, 2022 |
| Alpine Linux | — | Upgrade mariadb | Aug 22, 2024 | Feb 18, 2022 |
| Amazon Linux Ami 2 | — | Upgrade mariadb-backupUpgrade mariadb-embedded-develUpgrade mariadb-errmsgUpgrade mariadb-commonUpgrade mariadb-s3-engineUpgrade mariadb-connect-engineUpgrade mariadb-libsUpgrade mariadb-testUpgrade mariadb-pamUpgrade mariadb-serverUpgrade mariadb-server-utilsUpgrade mariadb-develUpgrade mariadb-configUpgrade mariadb-gssapi-serverUpgrade mariadb-rocksdb-engineUpgrade mariadb-sphinx-engineUpgrade mariadbUpgrade mariadb-oqgraph-engineUpgrade mariadb-server-galeraUpgrade mariadb-embeddedUpgrade mariadb-debuginfoUpgrade mariadb-cracklib-password-check | Sep 28, 2023 | Feb 18, 2022 |
| Amazon_linux_2023 | — | Upgrade mariadb105-connect-engineUpgrade mariadb105-serverUpgrade mariadb105-sphinx-engineUpgrade mariadb105-rocksdb-engine-debuginfoUpgrade mariadb105-debugsourceUpgrade mariadb105-gssapi-serverUpgrade mariadb105-pamUpgrade mariadb105-commonUpgrade mariadb105-rocksdb-engineUpgrade mariadb105-debuginfoUpgrade mariadb105-server-utilsUpgrade mariadb105-connect-engine-debuginfoUpgrade mariadb105-gssapi-server-debuginfoUpgrade mariadb105-testUpgrade mariadb105-pam-debuginfoUpgrade mariadb105-cracklib-password-checkUpgrade mariadb105-sphinx-engine-debuginfoUpgrade mariadb105-server-debuginfoUpgrade mariadb105-develUpgrade mariadb105-server-utils-debuginfoUpgrade mariadb105Upgrade mariadb105-cracklib-password-check-debuginfoUpgrade mariadb105-oqgraph-engine-debuginfoUpgrade mariadb105-backupUpgrade mariadb105-oqgraph-engineUpgrade mariadb105-backup-debuginfoUpgrade mariadb105-test-debuginfoUpgrade mariadb105-errmsg | Feb 17, 2025 | Feb 18, 2022 |
| Centos_linux | — | Upgrade mariadb-pam-debuginfoUpgrade mariadb-debugsourceUpgrade mysql-selinuxUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-embeddedUpgrade mariadb-oqgraph-engineUpgrade mariadb-serverUpgrade galeraUpgrade mariadb-server-debuginfoUpgrade Judy-debuginfoUpgrade mariadb-develUpgrade mariadb-server-utilsUpgrade galera-debugsourceUpgrade mariadb-server-utils-debuginfoUpgrade mariadbUpgrade mariadb-gssapi-serverUpgrade mariadb-debuginfoUpgrade mariadb-server-galeraUpgrade mariadb-backup-debuginfoUpgrade galera-debuginfoUpgrade mariadb-testUpgrade mariadb-pamUpgrade mariadb-embedded-develUpgrade mariadb-commonUpgrade mariadb-errmsgUpgrade mariadb-embedded-debuginfoUpgrade mariadb-oqgraph-engine-debuginfoUpgrade Judy-debugsourceUpgrade JudyUpgrade mariadb-test-debuginfoUpgrade mariadb-backup | Aug 3, 2022 | Feb 18, 2022 |
| Debian | — | Upgrade mariadb-10.5 | Jul 30, 2024 | Feb 18, 2022 |
| Freebsd | — | Upgrade mariadb103-serverUpgrade mariadb105-serverUpgrade mariadb105-clientUpgrade mariadb104-serverUpgrade mariadb104-clientUpgrade mariadb103-client | Nov 4, 2022 | Feb 10, 2022 |
| Gentoo Linux | — | Upgrade dev-db/mariadb. | May 10, 2024 | Feb 18, 2022 |
| Mariadb Mariadb | — | Upgrade MariaDB to the latest version | Mar 4, 2025 | Feb 18, 2022 |
| Oracle_linux | — | Upgrade mysql-selinuxUpgrade mariadb-oqgraph-engineUpgrade mariadb-testUpgrade mariadb-serverUpgrade mariadb-embedded-develUpgrade mariadb-errmsgUpgrade galeraUpgrade mariadb-commonUpgrade mariadb-backupUpgrade mariadb-server-utilsUpgrade mariadb-pamUpgrade mariadb-gssapi-serverUpgrade mariadb-server-galeraUpgrade JudyUpgrade mariadb-embeddedUpgrade mariadb-develUpgrade mariadb | Aug 4, 2022 | Feb 18, 2022 |
| Redhat_linux | — | Upgrade mariadb-commonUpgrade mysql-selinuxUpgrade mariadb-backupUpgrade mariadb-debugsourceUpgrade mariadb-oqgraph-engineUpgrade galera-debugsourceUpgrade Judy-debugsourceUpgrade mariadb-pam-debuginfoUpgrade mariadb-oqgraph-engine-debuginfoNo solution existsUpgrade mariadb-errmsgUpgrade mariadbUpgrade mariadb-embedded-debuginfoUpgrade galeraUpgrade mariadb-server-galeraUpgrade mariadb-serverUpgrade mariadb-embedded-develUpgrade galera-debuginfoUpgrade mariadb-server-utilsUpgrade mariadb-gssapi-serverUpgrade Judy-debuginfoUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-server-debuginfoUpgrade mariadb-debuginfoUpgrade mariadb-pamUpgrade JudyUpgrade mariadb-backup-debuginfoUpgrade mariadb-embeddedUpgrade mariadb-test-debuginfoUpgrade mariadb-testUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-devel | Aug 3, 2022 | Feb 18, 2022 |
| Rocky_linux | — | Upgrade mariadb-test-debuginfoUpgrade mariadb-backupUpgrade mariadb-develUpgrade JudyUpgrade mariadb-oqgraph-engineUpgrade mariadb-pamUpgrade galera-debuginfoUpgrade mariadbUpgrade mariadb-errmsgUpgrade mariadb-server-debuginfoUpgrade mariadb-embedded-debuginfoUpgrade mariadb-commonUpgrade mariadb-embedded-develUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-server-galeraUpgrade mariadb-gssapi-server-debuginfoUpgrade galera-debugsourceUpgrade mariadb-server-utilsUpgrade mariadb-debugsourceUpgrade Judy-debugsourceUpgrade mariadb-backup-debuginfoUpgrade mariadb-pam-debuginfoUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-debuginfoUpgrade Judy-debuginfoUpgrade mariadb-serverUpgrade mariadb-embeddedUpgrade galeraUpgrade mariadb-gssapi-serverUpgrade mariadb-test | Mar 12, 2024 | Feb 18, 2022 |
| Suse | — | Upgrade mariadb104-errormessagesUpgrade mariadb-clientUpgrade mariadb104Upgrade mariadb104-rpm-macrosUpgrade mariadb-testUpgrade mariadb-errormessagesUpgrade mariadb-toolsUpgrade libmariadbd-develUpgrade mariadb104-benchUpgrade python3-mysqlclientUpgrade mariadbUpgrade mariadb104-galeraUpgrade libmariadb_pluginsUpgrade libmariadb-develUpgrade mariadb-benchUpgrade mariadb-rpm-macrosUpgrade mariadb104-testUpgrade liblz4-1Upgrade mariadb-galeraUpgrade mariadb104-clientUpgrade libmariadb3Upgrade libmariadbd19Upgrade mariadb104-toolsUpgrade libmysqld-develUpgrade libmariadbd104-develUpgrade libmysqld19 | Mar 5, 2022 | Feb 18, 2022 |
| Ubuntu | — | Upgrade mariadb-server | Mar 22, 2023 | Feb 18, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 18, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub