MariaDB CONNECT Storage Engine Heap-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL queries. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the service account. Was ZDI-CAN-16190.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
- CVSS 3.0 Base Score: 7
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade galeraUpgrade mariadb-develUpgrade mariadb-errmsgUpgrade mariadb-serverUpgrade mariadb-server-galeraUpgrade mariadb-oqgraph-engineUpgrade mariadb-embeddedUpgrade mariadb-backupUpgrade mariadbUpgrade mariadb-server-utilsUpgrade mariadb-embedded-develUpgrade mariadb-gssapi-serverUpgrade mariadb-pamUpgrade mariadb-testUpgrade mariadb-commonUpgrade Judy | Aug 8, 2022 | Feb 18, 2022 |
| Alpine Linux | — | Upgrade mariadb | Aug 22, 2024 | Feb 18, 2022 |
| Amazon Linux Ami 2 | — | Upgrade mariadb-backupUpgrade mariadb-errmsgUpgrade mariadb-commonUpgrade mariadb-embedded-develUpgrade mariadb-s3-engineUpgrade mariadb-serverUpgrade mariadb-libsUpgrade mariadb-testUpgrade mariadb-oqgraph-engineUpgrade mariadb-connect-engineUpgrade mariadb-sphinx-engineUpgrade mariadb-server-galeraUpgrade mariadb-debuginfoUpgrade mariadb-embeddedUpgrade mariadb-pamUpgrade mariadb-configUpgrade mariadb-server-utilsUpgrade mariadb-cracklib-password-checkUpgrade mariadb-develUpgrade mariadbUpgrade mariadb-gssapi-serverUpgrade mariadb-rocksdb-engine | Sep 28, 2023 | Feb 18, 2022 |
| Amazon_linux_2023 | — | Upgrade mariadb105-commonUpgrade mariadb105-gssapi-server-debuginfoUpgrade mariadb105-debugsourceUpgrade mariadb105-debuginfoUpgrade mariadb105-connect-engine-debuginfoUpgrade mariadb105-gssapi-serverUpgrade mariadb105-pam-debuginfoUpgrade mariadb105-develUpgrade mariadb105-oqgraph-engineUpgrade mariadb105-serverUpgrade mariadb105-cracklib-password-check-debuginfoUpgrade mariadb105-backup-debuginfoUpgrade mariadb105-connect-engineUpgrade mariadb105-pamUpgrade mariadb105-server-debuginfoUpgrade mariadb105-sphinx-engine-debuginfoUpgrade mariadb105-rocksdb-engine-debuginfoUpgrade mariadb105-sphinx-engineUpgrade mariadb105-cracklib-password-checkUpgrade mariadb105-test-debuginfoUpgrade mariadb105-backupUpgrade mariadb105Upgrade mariadb105-server-utilsUpgrade mariadb105-testUpgrade mariadb105-rocksdb-engineUpgrade mariadb105-errmsgUpgrade mariadb105-server-utils-debuginfoUpgrade mariadb105-oqgraph-engine-debuginfo | Feb 17, 2025 | Feb 18, 2022 |
| Centos_linux | — | Upgrade mariadb-gssapi-serverUpgrade mariadb-test-debuginfoUpgrade mariadb-embeddedUpgrade mariadb-debuginfoUpgrade Judy-debuginfoUpgrade mariadb-develUpgrade mariadb-oqgraph-engineUpgrade mariadb-pam-debuginfoUpgrade galeraUpgrade mysql-selinuxUpgrade mariadb-server-galeraUpgrade mariadb-serverUpgrade mariadb-server-debuginfoUpgrade galera-debugsourceUpgrade mariadb-backup-debuginfoUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-server-utilsUpgrade mariadb-embedded-develUpgrade mariadbUpgrade mariadb-embedded-debuginfoUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-pamUpgrade Judy-debugsourceUpgrade mariadb-errmsgUpgrade mariadb-debugsourceUpgrade mariadb-backupUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-testUpgrade mariadb-commonUpgrade JudyUpgrade galera-debuginfo | Aug 3, 2022 | Feb 18, 2022 |
| Debian | — | Upgrade mariadb-10.5 | Jul 30, 2024 | Feb 18, 2022 |
| Freebsd | — | Upgrade mariadb103-clientUpgrade mariadb105-clientUpgrade mariadb103-serverUpgrade mariadb105-serverUpgrade mariadb104-serverUpgrade mariadb104-client | Nov 4, 2022 | Feb 10, 2022 |
| Gentoo Linux | — | Upgrade dev-db/mariadb. | May 10, 2024 | Feb 18, 2022 |
| Mariadb Mariadb | — | Upgrade MariaDB to the latest version | Mar 4, 2025 | Feb 18, 2022 |
| Oracle_linux | — | Upgrade mysql-selinuxUpgrade mariadb-develUpgrade galeraUpgrade mariadb-server-galeraUpgrade mariadb-server-utilsUpgrade mariadb-oqgraph-engineUpgrade mariadb-embeddedUpgrade mariadb-gssapi-serverUpgrade mariadb-embedded-develUpgrade mariadb-serverUpgrade JudyUpgrade mariadb-errmsgUpgrade mariadb-pamUpgrade mariadb-testUpgrade mariadbUpgrade mariadb-commonUpgrade mariadb-backup | Aug 4, 2022 | Feb 18, 2022 |
| Redhat_linux | — | Upgrade mariadb-develUpgrade mariadb-test-debuginfoUpgrade mysql-selinuxUpgrade mariadb-embedded-develNo solution existsUpgrade mariadb-pamUpgrade mariadb-commonUpgrade mariadb-server-galeraUpgrade mariadb-embedded-debuginfoUpgrade mariadb-errmsgUpgrade mariadb-backupUpgrade JudyUpgrade mariadb-oqgraph-engineUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-server-debuginfoUpgrade galera-debuginfoUpgrade mariadb-pam-debuginfoUpgrade mariadb-server-utilsUpgrade mariadb-serverUpgrade Judy-debuginfoUpgrade galeraUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-gssapi-serverUpgrade mariadb-backup-debuginfoUpgrade mariadbUpgrade mariadb-embeddedUpgrade galera-debugsourceUpgrade mariadb-debuginfoUpgrade mariadb-debugsourceUpgrade Judy-debugsourceUpgrade mariadb-test | Aug 3, 2022 | Feb 18, 2022 |
| Rocky_linux | — | Upgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-server-debuginfoUpgrade mariadb-develUpgrade JudyUpgrade mariadb-pamUpgrade mariadb-backup-debuginfoUpgrade Judy-debuginfoUpgrade mariadb-debuginfoUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-testUpgrade mariadb-embedded-develUpgrade mariadb-server-utilsUpgrade mariadb-embeddedUpgrade mariadb-test-debuginfoUpgrade mariadb-pam-debuginfoUpgrade mariadb-serverUpgrade mariadb-commonUpgrade mariadbUpgrade galeraUpgrade mariadb-embedded-debuginfoUpgrade mariadb-backupUpgrade mariadb-gssapi-serverUpgrade Judy-debugsourceUpgrade mariadb-server-galeraUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-oqgraph-engineUpgrade galera-debuginfoUpgrade mariadb-debugsourceUpgrade mariadb-errmsgUpgrade galera-debugsource | Mar 12, 2024 | Feb 18, 2022 |
| Suse | — | Upgrade libmysqld19Upgrade mariadbUpgrade libmariadbd104-develUpgrade mariadb-benchUpgrade libmariadb_pluginsUpgrade mariadb-clientUpgrade mariadb104-galeraUpgrade libmariadbd-develUpgrade mariadb-toolsUpgrade libmariadb3Upgrade liblz4-1Upgrade libmariadb-develUpgrade mariadb-testUpgrade mariadb-rpm-macrosUpgrade mariadb104Upgrade libmariadbd19Upgrade mariadb104-testUpgrade mariadb104-benchUpgrade python3-mysqlclientUpgrade mariadb104-clientUpgrade mariadb-errormessagesUpgrade mariadb104-rpm-macrosUpgrade mariadb104-errormessagesUpgrade libmysqld-develUpgrade mariadb104-toolsUpgrade mariadb-galera | Mar 5, 2022 | Feb 18, 2022 |
| Ubuntu | — | Upgrade mariadb-server | Mar 22, 2023 | Feb 18, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 18, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub