MariaDB CONNECT Storage Engine Heap-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL queries. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the service account. Was ZDI-CAN-16190.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
- CVSS 3.0 Base Score: 7
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mariadbUpgrade mariadb-embeddedUpgrade mariadb-server-galeraUpgrade mariadb-develUpgrade mariadb-embedded-develUpgrade mariadb-errmsgUpgrade mariadb-oqgraph-engineUpgrade mariadb-server-utilsUpgrade galeraUpgrade mariadb-serverUpgrade mariadb-backupUpgrade mariadb-pamUpgrade mariadb-gssapi-serverUpgrade mariadb-testUpgrade mariadb-commonUpgrade Judy | Aug 8, 2022 | Feb 18, 2022 |
| Alpine Linux | — | Upgrade mariadb | Aug 22, 2024 | Feb 18, 2022 |
| Amazon Linux Ami 2 | — | Upgrade mariadb-serverUpgrade mariadb-oqgraph-engineUpgrade mariadb-errmsgUpgrade mariadb-connect-engineUpgrade mariadb-commonUpgrade mariadb-testUpgrade mariadb-embedded-develUpgrade mariadb-libsUpgrade mariadb-backupUpgrade mariadb-s3-engineUpgrade mariadb-embeddedUpgrade mariadb-configUpgrade mariadbUpgrade mariadb-rocksdb-engineUpgrade mariadb-server-galeraUpgrade mariadb-cracklib-password-checkUpgrade mariadb-server-utilsUpgrade mariadb-sphinx-engineUpgrade mariadb-pamUpgrade mariadb-debuginfoUpgrade mariadb-develUpgrade mariadb-gssapi-server | Sep 28, 2023 | Feb 18, 2022 |
| Amazon_linux_2023 | — | Upgrade mariadb105-backup-debuginfoUpgrade mariadb105-debugsourceUpgrade mariadb105-connect-engineUpgrade mariadb105-commonUpgrade mariadb105-pam-debuginfoUpgrade mariadb105-gssapi-server-debuginfoUpgrade mariadb105-debuginfoUpgrade mariadb105-serverUpgrade mariadb105-cracklib-password-check-debuginfoUpgrade mariadb105-develUpgrade mariadb105-connect-engine-debuginfoUpgrade mariadb105-gssapi-serverUpgrade mariadb105-oqgraph-engineUpgrade mariadb105-sphinx-engine-debuginfoUpgrade mariadb105-sphinx-engineUpgrade mariadb105-cracklib-password-checkUpgrade mariadb105-testUpgrade mariadb105-server-utilsUpgrade mariadb105-backupUpgrade mariadb105Upgrade mariadb105-pamUpgrade mariadb105-oqgraph-engine-debuginfoUpgrade mariadb105-rocksdb-engineUpgrade mariadb105-errmsgUpgrade mariadb105-server-utils-debuginfoUpgrade mariadb105-rocksdb-engine-debuginfoUpgrade mariadb105-server-debuginfoUpgrade mariadb105-test-debuginfo | Feb 17, 2025 | Feb 18, 2022 |
| Centos_linux | — | Upgrade mariadb-embedded-debuginfoUpgrade mariadb-pamUpgrade mariadb-testUpgrade Judy-debugsourceUpgrade JudyUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-backupUpgrade mariadb-commonUpgrade mariadb-errmsgUpgrade mariadb-debugsourceUpgrade mariadbUpgrade mariadb-oqgraph-engine-debuginfoUpgrade galera-debuginfoUpgrade mariadb-embeddedUpgrade galera-debugsourceUpgrade mariadb-server-utilsUpgrade mariadb-server-galeraUpgrade mariadb-test-debuginfoUpgrade mariadb-gssapi-serverUpgrade mariadb-server-utils-debuginfoUpgrade Judy-debuginfoUpgrade mariadb-embedded-develUpgrade mariadb-oqgraph-engineUpgrade mariadb-serverUpgrade mariadb-server-debuginfoUpgrade mariadb-backup-debuginfoUpgrade mariadb-pam-debuginfoUpgrade mariadb-develUpgrade mariadb-debuginfoUpgrade mysql-selinuxUpgrade galera | Aug 3, 2022 | Feb 18, 2022 |
| Debian | — | Upgrade mariadb-10.5 | Jul 30, 2024 | Feb 18, 2022 |
| Freebsd | — | Upgrade mariadb103-clientUpgrade mariadb105-clientUpgrade mariadb103-serverUpgrade mariadb105-serverUpgrade mariadb104-serverUpgrade mariadb104-client | Nov 4, 2022 | Feb 10, 2022 |
| Gentoo Linux | — | Upgrade dev-db/mariadb. | May 10, 2024 | Feb 18, 2022 |
| Mariadb Mariadb | — | Upgrade MariaDB to the latest version | Mar 4, 2025 | Feb 18, 2022 |
| Oracle_linux | — | Upgrade mariadbUpgrade mariadb-pamUpgrade mariadb-testUpgrade mariadb-errmsgUpgrade mariadb-serverUpgrade JudyUpgrade mariadb-backupUpgrade mariadb-commonUpgrade mariadb-server-galeraUpgrade galeraUpgrade mariadb-embedded-develUpgrade mysql-selinuxUpgrade mariadb-develUpgrade mariadb-oqgraph-engineUpgrade mariadb-embeddedUpgrade mariadb-gssapi-serverUpgrade mariadb-server-utils | Aug 4, 2022 | Feb 18, 2022 |
| Redhat_linux | — | Upgrade mariadb-embedded-debuginfoUpgrade mariadb-embedded-develUpgrade mariadb-server-galeraUpgrade mariadb-develUpgrade mysql-selinuxUpgrade mariadb-pamNo solution existsUpgrade mariadb-test-debuginfoUpgrade mariadb-backupUpgrade mariadb-server-debuginfoUpgrade mariadb-commonUpgrade mariadb-server-utils-debuginfoUpgrade JudyUpgrade mariadb-oqgraph-engineUpgrade mariadb-errmsgUpgrade galera-debuginfoUpgrade galera-debugsourceUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-server-utilsUpgrade mariadb-backup-debuginfoUpgrade mariadbUpgrade mariadb-serverUpgrade mariadb-debuginfoUpgrade mariadb-debugsourceUpgrade Judy-debugsourceUpgrade mariadb-pam-debuginfoUpgrade mariadb-embeddedUpgrade Judy-debuginfoUpgrade galeraUpgrade mariadb-gssapi-serverUpgrade mariadb-test | Aug 3, 2022 | Feb 18, 2022 |
| Rocky_linux | — | Upgrade galera-debugsourceUpgrade mariadb-errmsgUpgrade mariadb-debugsourceUpgrade mariadb-pam-debuginfoUpgrade mariadb-embedded-debuginfoUpgrade mariadbUpgrade galera-debuginfoUpgrade mariadb-backupUpgrade mariadb-gssapi-serverUpgrade mariadb-oqgraph-engineUpgrade mariadb-oqgraph-engine-debuginfoUpgrade galeraUpgrade mariadb-server-galeraUpgrade Judy-debugsourceUpgrade mariadb-commonUpgrade mariadb-serverUpgrade mariadb-test-debuginfoUpgrade mariadb-develUpgrade mariadb-backup-debuginfoUpgrade mariadb-testUpgrade mariadb-server-utils-debuginfoUpgrade JudyUpgrade mariadb-server-debuginfoUpgrade mariadb-server-utilsUpgrade mariadb-pamUpgrade mariadb-embedded-develUpgrade mariadb-embeddedUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-debuginfoUpgrade Judy-debuginfo | Mar 12, 2024 | Feb 18, 2022 |
| Suse | — | Upgrade mariadb104-clientUpgrade python3-mysqlclientUpgrade mariadb104-benchUpgrade mariadb104-toolsUpgrade mariadb104Upgrade libmysqld-develUpgrade libmariadbd19Upgrade mariadb104-errormessagesUpgrade mariadb104-rpm-macrosUpgrade mariadb104-testUpgrade mariadb-testUpgrade mariadb-errormessagesUpgrade mariadb-galeraUpgrade mariadb-rpm-macrosUpgrade libmariadbd-develUpgrade libmariadb-develUpgrade liblz4-1Upgrade mariadbUpgrade mariadb104-galeraUpgrade libmysqld19Upgrade libmariadb_pluginsUpgrade mariadb-toolsUpgrade libmariadb3Upgrade mariadb-clientUpgrade mariadb-benchUpgrade libmariadbd104-devel | Mar 5, 2022 | Feb 18, 2022 |
| Ubuntu | — | Upgrade mariadb-server | Mar 22, 2023 | Feb 18, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 18, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub