MariaDB CONNECT Storage Engine Heap-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL queries. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the service account. Was ZDI-CAN-16190.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
- CVSS 3.0 Base Score: 7
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mariadb-gssapi-serverUpgrade mariadb-commonUpgrade JudyUpgrade mariadb-testUpgrade mariadb-pamUpgrade galeraUpgrade mariadb-embeddedUpgrade mariadb-server-utilsUpgrade mariadb-embedded-develUpgrade mariadb-backupUpgrade mariadb-develUpgrade mariadb-server-galeraUpgrade mariadb-errmsgUpgrade mariadb-serverUpgrade mariadbUpgrade mariadb-oqgraph-engine | Aug 8, 2022 | Feb 18, 2022 |
| Alpine Linux | — | Upgrade mariadb | Aug 22, 2024 | Feb 18, 2022 |
| Amazon Linux Ami 2 | — | Upgrade mariadb-cracklib-password-checkUpgrade mariadb-pamUpgrade mariadb-embeddedUpgrade mariadb-configUpgrade mariadb-sphinx-engineUpgrade mariadb-develUpgrade mariadb-gssapi-serverUpgrade mariadb-server-utilsUpgrade mariadbUpgrade mariadb-rocksdb-engineUpgrade mariadb-debuginfoUpgrade mariadb-server-galeraUpgrade mariadb-embedded-develUpgrade mariadb-s3-engineUpgrade mariadb-oqgraph-engineUpgrade mariadb-commonUpgrade mariadb-testUpgrade mariadb-connect-engineUpgrade mariadb-backupUpgrade mariadb-errmsgUpgrade mariadb-serverUpgrade mariadb-libs | Sep 28, 2023 | Feb 18, 2022 |
| Amazon_linux_2023 | — | Upgrade mariadb105-testUpgrade mariadb105Upgrade mariadb105-backupUpgrade mariadb105-errmsgUpgrade mariadb105-oqgraph-engine-debuginfoUpgrade mariadb105-rocksdb-engineUpgrade mariadb105-server-utilsUpgrade mariadb105-cracklib-password-checkUpgrade mariadb105-sphinx-engineUpgrade mariadb105-pamUpgrade mariadb105-test-debuginfoUpgrade mariadb105-server-utils-debuginfoUpgrade mariadb105-sphinx-engine-debuginfoUpgrade mariadb105-rocksdb-engine-debuginfoUpgrade mariadb105-server-debuginfoUpgrade mariadb105-pam-debuginfoUpgrade mariadb105-develUpgrade mariadb105-debugsourceUpgrade mariadb105-debuginfoUpgrade mariadb105-commonUpgrade mariadb105-connect-engineUpgrade mariadb105-gssapi-server-debuginfoUpgrade mariadb105-oqgraph-engineUpgrade mariadb105-gssapi-serverUpgrade mariadb105-serverUpgrade mariadb105-cracklib-password-check-debuginfoUpgrade mariadb105-connect-engine-debuginfoUpgrade mariadb105-backup-debuginfo | Feb 17, 2025 | Feb 18, 2022 |
| Centos_linux | — | Upgrade mariadb-backupUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-errmsgUpgrade Judy-debugsourceUpgrade galera-debuginfoUpgrade mariadb-testUpgrade JudyUpgrade mariadb-pamUpgrade mariadb-debugsourceUpgrade mariadbUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-embedded-debuginfoUpgrade mariadb-commonUpgrade mariadb-pam-debuginfoUpgrade mariadb-server-debuginfoUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-embedded-develUpgrade mariadb-oqgraph-engineUpgrade mariadb-develUpgrade mariadb-debuginfoUpgrade mysql-selinuxUpgrade mariadb-server-utilsUpgrade galeraUpgrade mariadb-test-debuginfoUpgrade mariadb-gssapi-serverUpgrade mariadb-embeddedUpgrade Judy-debuginfoUpgrade mariadb-serverUpgrade mariadb-server-galeraUpgrade mariadb-backup-debuginfoUpgrade galera-debugsource | Aug 3, 2022 | Feb 18, 2022 |
| Debian | — | Upgrade mariadb-10.5 | Jul 30, 2024 | Feb 18, 2022 |
| Freebsd | — | Upgrade mariadb105-clientUpgrade mariadb103-serverUpgrade mariadb103-clientUpgrade mariadb105-serverUpgrade mariadb104-clientUpgrade mariadb104-server | Nov 4, 2022 | Feb 10, 2022 |
| Gentoo Linux | — | Upgrade dev-db/mariadb. | May 10, 2024 | Feb 18, 2022 |
| Mariadb Mariadb | — | Upgrade MariaDB to the latest version | Mar 4, 2025 | Feb 18, 2022 |
| Oracle_linux | — | Upgrade mariadbUpgrade mariadb-commonUpgrade mariadb-pamUpgrade mariadb-backupUpgrade JudyUpgrade mariadb-testUpgrade mariadb-serverUpgrade mariadb-errmsgUpgrade mariadb-embeddedUpgrade galeraUpgrade mariadb-server-utilsUpgrade mariadb-embedded-develUpgrade mysql-selinuxUpgrade mariadb-develUpgrade mariadb-server-galeraUpgrade mariadb-oqgraph-engineUpgrade mariadb-gssapi-server | Aug 4, 2022 | Feb 18, 2022 |
| Redhat_linux | — | Upgrade mariadb-commonUpgrade mariadb-server-debuginfoUpgrade mariadb-pamUpgrade mariadb-oqgraph-engineUpgrade JudyUpgrade mariadb-test-debuginfoUpgrade mariadb-embedded-develNo solution existsUpgrade mariadb-develUpgrade mysql-selinuxUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-server-galeraUpgrade mariadb-backupUpgrade galera-debuginfoUpgrade mariadb-errmsgUpgrade mariadb-embedded-debuginfoUpgrade mariadb-embeddedUpgrade mariadb-server-utilsUpgrade mariadb-backup-debuginfoUpgrade mariadb-oqgraph-engine-debuginfoUpgrade Judy-debuginfoUpgrade galera-debugsourceUpgrade mariadb-testUpgrade mariadb-pam-debuginfoUpgrade mariadb-gssapi-serverUpgrade Judy-debugsourceUpgrade galeraUpgrade mariadb-debuginfoUpgrade mariadb-debugsourceUpgrade mariadb-serverUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb | Aug 3, 2022 | Feb 18, 2022 |
| Rocky_linux | — | Upgrade mariadb-backup-debuginfoUpgrade mariadb-server-debuginfoUpgrade mariadb-debuginfoUpgrade mariadb-pamUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-test-debuginfoUpgrade mariadb-embedded-develUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-embeddedUpgrade mariadb-server-utilsUpgrade Judy-debuginfoUpgrade mariadb-develUpgrade mariadb-testUpgrade JudyUpgrade galera-debugsourceUpgrade mariadb-errmsgUpgrade mariadb-backupUpgrade mariadb-oqgraph-engine-debuginfoUpgrade galera-debuginfoUpgrade mariadb-pam-debuginfoUpgrade mariadb-debugsourceUpgrade Judy-debugsourceUpgrade mariadb-serverUpgrade mariadb-server-galeraUpgrade mariadb-oqgraph-engineUpgrade mariadb-gssapi-serverUpgrade galeraUpgrade mariadb-embedded-debuginfoUpgrade mariadb-commonUpgrade mariadb | Mar 12, 2024 | Feb 18, 2022 |
| Suse | — | Upgrade mariadb-toolsUpgrade libmariadb_pluginsUpgrade libmariadbd-develUpgrade liblz4-1Upgrade mariadb-clientUpgrade mariadb104-galeraUpgrade libmariadb-develUpgrade libmariadb3Upgrade libmariadbd104-develUpgrade mariadb-benchUpgrade libmysqld19Upgrade mariadbUpgrade mariadb-rpm-macrosUpgrade mariadb104-benchUpgrade mariadb-testUpgrade mariadb-galeraUpgrade python3-mysqlclientUpgrade mariadb104-clientUpgrade mariadb104-testUpgrade mariadb104-rpm-macrosUpgrade mariadb104-errormessagesUpgrade mariadb104-toolsUpgrade libmysqld-develUpgrade mariadb-errormessagesUpgrade libmariadbd19Upgrade mariadb104 | Mar 5, 2022 | Feb 18, 2022 |
| Ubuntu | — | Upgrade mariadb-server | Mar 22, 2023 | Feb 18, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 18, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub