MariaDB CONNECT Storage Engine Heap-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL queries. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the service account. Was ZDI-CAN-16190.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
- CVSS 3.0 Base Score: 7
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mariadb-errmsgUpgrade mariadb-embeddedUpgrade mariadbUpgrade mariadb-backupUpgrade mariadb-oqgraph-engineUpgrade mariadb-serverUpgrade mariadb-develUpgrade mariadb-server-utilsUpgrade galeraUpgrade mariadb-embedded-develUpgrade mariadb-server-galeraUpgrade mariadb-commonUpgrade mariadb-testUpgrade mariadb-pamUpgrade mariadb-gssapi-serverUpgrade Judy | Aug 8, 2022 | Feb 18, 2022 |
| Alpine Linux | — | Upgrade mariadb | Aug 22, 2024 | Feb 18, 2022 |
| Amazon Linux Ami 2 | — | Upgrade mariadbUpgrade mariadb-server-utilsUpgrade mariadb-develUpgrade mariadb-configUpgrade mariadb-gssapi-serverUpgrade mariadb-debuginfoUpgrade mariadb-pamUpgrade mariadb-server-galeraUpgrade mariadb-rocksdb-engineUpgrade mariadb-embeddedUpgrade mariadb-sphinx-engineUpgrade mariadb-cracklib-password-checkUpgrade mariadb-s3-engineUpgrade mariadb-embedded-develUpgrade mariadb-serverUpgrade mariadb-oqgraph-engineUpgrade mariadb-commonUpgrade mariadb-testUpgrade mariadb-backupUpgrade mariadb-libsUpgrade mariadb-errmsgUpgrade mariadb-connect-engine | Sep 28, 2023 | Feb 18, 2022 |
| Amazon_linux_2023 | — | Upgrade mariadb105-serverUpgrade mariadb105-develUpgrade mariadb105-cracklib-password-check-debuginfoUpgrade mariadb105-oqgraph-engineUpgrade mariadb105-debuginfoUpgrade mariadb105-backup-debuginfoUpgrade mariadb105-connect-engineUpgrade mariadb105-commonUpgrade mariadb105-debugsourceUpgrade mariadb105-pam-debuginfoUpgrade mariadb105-connect-engine-debuginfoUpgrade mariadb105-gssapi-server-debuginfoUpgrade mariadb105-gssapi-serverUpgrade mariadb105Upgrade mariadb105-test-debuginfoUpgrade mariadb105-rocksdb-engine-debuginfoUpgrade mariadb105-oqgraph-engine-debuginfoUpgrade mariadb105-server-utilsUpgrade mariadb105-backupUpgrade mariadb105-pamUpgrade mariadb105-testUpgrade mariadb105-rocksdb-engineUpgrade mariadb105-errmsgUpgrade mariadb105-sphinx-engine-debuginfoUpgrade mariadb105-server-debuginfoUpgrade mariadb105-server-utils-debuginfoUpgrade mariadb105-sphinx-engineUpgrade mariadb105-cracklib-password-check | Feb 17, 2025 | Feb 18, 2022 |
| Centos_linux | — | Upgrade mariadb-debuginfoUpgrade mariadb-develUpgrade galeraUpgrade mariadb-pam-debuginfoUpgrade mariadb-gssapi-serverUpgrade mariadb-server-utilsUpgrade mariadb-server-debuginfoUpgrade mysql-selinuxUpgrade mariadb-server-galeraUpgrade mariadb-oqgraph-engineUpgrade Judy-debuginfoUpgrade mariadb-embedded-develUpgrade mariadb-backup-debuginfoUpgrade galera-debugsourceUpgrade mariadb-test-debuginfoUpgrade mariadb-serverUpgrade mariadb-embeddedUpgrade mariadb-server-utils-debuginfoUpgrade mariadbUpgrade JudyUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-errmsgUpgrade mariadb-debugsourceUpgrade mariadb-backupUpgrade Judy-debugsourceUpgrade mariadb-pamUpgrade mariadb-embedded-debuginfoUpgrade mariadb-commonUpgrade mariadb-testUpgrade mariadb-gssapi-server-debuginfoUpgrade galera-debuginfo | Aug 3, 2022 | Feb 18, 2022 |
| Debian | — | Upgrade mariadb-10.5 | Jul 30, 2024 | Feb 18, 2022 |
| Freebsd | — | Upgrade mariadb104-clientUpgrade mariadb104-serverUpgrade mariadb105-clientUpgrade mariadb103-serverUpgrade mariadb105-serverUpgrade mariadb103-client | Nov 4, 2022 | Feb 10, 2022 |
| Gentoo Linux | — | Upgrade dev-db/mariadb. | May 10, 2024 | Feb 18, 2022 |
| Mariadb Mariadb | — | Upgrade MariaDB to the latest version | Mar 4, 2025 | Feb 18, 2022 |
| Oracle_linux | — | Upgrade mariadb-commonUpgrade mariadb-serverUpgrade mariadbUpgrade mariadb-errmsgUpgrade mariadb-backupUpgrade mariadb-pamUpgrade mariadb-testUpgrade JudyUpgrade mariadb-server-galeraUpgrade mariadb-gssapi-serverUpgrade mariadb-oqgraph-engineUpgrade mariadb-embeddedUpgrade mariadb-embedded-develUpgrade mariadb-server-utilsUpgrade galeraUpgrade mariadb-develUpgrade mysql-selinux | Aug 4, 2022 | Feb 18, 2022 |
| Redhat_linux | — | Upgrade Judy-debugsourceUpgrade mariadb-debuginfoUpgrade mariadb-testUpgrade mariadb-backup-debuginfoUpgrade mariadb-server-utilsUpgrade mariadb-embeddedUpgrade mariadbUpgrade mariadb-debugsourceUpgrade mariadb-pam-debuginfoUpgrade galera-debugsourceUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-serverUpgrade galeraUpgrade mariadb-gssapi-serverUpgrade Judy-debuginfoUpgrade mysql-selinuxUpgrade mariadb-embedded-debuginfoUpgrade mariadb-commonUpgrade mariadb-develUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-errmsgUpgrade mariadb-server-debuginfoUpgrade mariadb-pamUpgrade mariadb-test-debuginfoNo solution existsUpgrade mariadb-backupUpgrade mariadb-server-galeraUpgrade galera-debuginfoUpgrade mariadb-oqgraph-engineUpgrade JudyUpgrade mariadb-embedded-devel | Aug 3, 2022 | Feb 18, 2022 |
| Rocky_linux | — | Upgrade mariadb-debugsourceUpgrade mariadb-pam-debuginfoUpgrade mariadb-errmsgUpgrade galeraUpgrade galera-debugsourceUpgrade mariadb-commonUpgrade galera-debuginfoUpgrade Judy-debugsourceUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-gssapi-serverUpgrade mariadb-backupUpgrade mariadb-oqgraph-engineUpgrade mariadb-server-galeraUpgrade mariadb-serverUpgrade mariadb-embedded-debuginfoUpgrade mariadbUpgrade mariadb-testUpgrade JudyUpgrade mariadb-server-debuginfoUpgrade mariadb-test-debuginfoUpgrade mariadb-pamUpgrade mariadb-embeddedUpgrade mariadb-backup-debuginfoUpgrade mariadb-develUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-debuginfoUpgrade mariadb-server-utilsUpgrade Judy-debuginfoUpgrade mariadb-embedded-develUpgrade mariadb-gssapi-server-debuginfo | Mar 12, 2024 | Feb 18, 2022 |
| Suse | — | Upgrade liblz4-1Upgrade libmysqld19Upgrade mariadb-toolsUpgrade mariadb-benchUpgrade libmariadbd104-develUpgrade libmariadb_pluginsUpgrade libmariadb-develUpgrade mariadbUpgrade libmariadbd-develUpgrade mariadb104-galeraUpgrade libmariadb3Upgrade mariadb-clientUpgrade python3-mysqlclientUpgrade mariadb-galeraUpgrade mariadb104-clientUpgrade mariadb104-rpm-macrosUpgrade mariadb-rpm-macrosUpgrade mariadb104-benchUpgrade mariadb104-testUpgrade mariadb-testUpgrade libmariadbd19Upgrade mariadb104-toolsUpgrade mariadb104-errormessagesUpgrade libmysqld-develUpgrade mariadb-errormessagesUpgrade mariadb104 | Mar 5, 2022 | Feb 18, 2022 |
| Ubuntu | — | Upgrade mariadb-server | Mar 22, 2023 | Feb 18, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 18, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub