MariaDB CONNECT Storage Engine Heap-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL queries. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the service account. Was ZDI-CAN-16190.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
- CVSS 3.0 Base Score: 7
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mariadb-commonUpgrade JudyUpgrade mariadb-gssapi-serverUpgrade mariadb-testUpgrade mariadb-pamUpgrade mariadb-backupUpgrade mariadb-embedded-develUpgrade mariadb-serverUpgrade mariadb-server-utilsUpgrade galeraUpgrade mariadb-server-galeraUpgrade mariadb-errmsgUpgrade mariadb-develUpgrade mariadbUpgrade mariadb-oqgraph-engineUpgrade mariadb-embedded | Aug 8, 2022 | Feb 18, 2022 |
| Alpine Linux | — | Upgrade mariadb | Aug 22, 2024 | Feb 18, 2022 |
| Amazon Linux Ami 2 | — | Upgrade mariadb-pamUpgrade mariadb-cracklib-password-checkUpgrade mariadb-server-galeraUpgrade mariadb-gssapi-serverUpgrade mariadb-configUpgrade mariadbUpgrade mariadb-sphinx-engineUpgrade mariadb-debuginfoUpgrade mariadb-develUpgrade mariadb-server-utilsUpgrade mariadb-embeddedUpgrade mariadb-rocksdb-engineUpgrade mariadb-embedded-develUpgrade mariadb-serverUpgrade mariadb-libsUpgrade mariadb-oqgraph-engineUpgrade mariadb-errmsgUpgrade mariadb-commonUpgrade mariadb-backupUpgrade mariadb-testUpgrade mariadb-s3-engineUpgrade mariadb-connect-engine | Sep 28, 2023 | Feb 18, 2022 |
| Amazon_linux_2023 | — | Upgrade mariadb105-server-utilsUpgrade mariadb105-backupUpgrade mariadb105-test-debuginfoUpgrade mariadb105-cracklib-password-checkUpgrade mariadb105-sphinx-engineUpgrade mariadb105-server-utils-debuginfoUpgrade mariadb105-pamUpgrade mariadb105Upgrade mariadb105-rocksdb-engine-debuginfoUpgrade mariadb105-rocksdb-engineUpgrade mariadb105-sphinx-engine-debuginfoUpgrade mariadb105-errmsgUpgrade mariadb105-server-debuginfoUpgrade mariadb105-oqgraph-engine-debuginfoUpgrade mariadb105-testUpgrade mariadb105-connect-engineUpgrade mariadb105-oqgraph-engineUpgrade mariadb105-backup-debuginfoUpgrade mariadb105-cracklib-password-check-debuginfoUpgrade mariadb105-pam-debuginfoUpgrade mariadb105-serverUpgrade mariadb105-connect-engine-debuginfoUpgrade mariadb105-debugsourceUpgrade mariadb105-commonUpgrade mariadb105-gssapi-server-debuginfoUpgrade mariadb105-develUpgrade mariadb105-gssapi-serverUpgrade mariadb105-debuginfo | Feb 17, 2025 | Feb 18, 2022 |
| Centos_linux | — | Upgrade mariadb-backupUpgrade Judy-debugsourceUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-pamUpgrade mariadb-embedded-debuginfoUpgrade mariadb-debugsourceUpgrade mariadb-errmsgUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-testUpgrade galera-debuginfoUpgrade JudyUpgrade mariadbUpgrade mariadb-commonUpgrade mariadb-embeddedUpgrade mysql-selinuxUpgrade mariadb-server-galeraUpgrade galeraUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-server-debuginfoUpgrade mariadb-serverUpgrade mariadb-oqgraph-engineUpgrade Judy-debuginfoUpgrade mariadb-test-debuginfoUpgrade galera-debugsourceUpgrade mariadb-backup-debuginfoUpgrade mariadb-develUpgrade mariadb-debuginfoUpgrade mariadb-server-utilsUpgrade mariadb-pam-debuginfoUpgrade mariadb-embedded-develUpgrade mariadb-gssapi-server | Aug 3, 2022 | Feb 18, 2022 |
| Debian | — | Upgrade mariadb-10.5 | Jul 30, 2024 | Feb 18, 2022 |
| Freebsd | — | Upgrade mariadb104-serverUpgrade mariadb104-clientUpgrade mariadb105-clientUpgrade mariadb103-serverUpgrade mariadb105-serverUpgrade mariadb103-client | Nov 4, 2022 | Feb 10, 2022 |
| Gentoo Linux | — | Upgrade dev-db/mariadb. | May 10, 2024 | Feb 18, 2022 |
| Mariadb Mariadb | — | Upgrade MariaDB to the latest version | Mar 4, 2025 | Feb 18, 2022 |
| Oracle_linux | — | Upgrade mariadb-embeddedUpgrade galeraUpgrade mariadb-server-galeraUpgrade mariadb-develUpgrade mysql-selinuxUpgrade mariadb-oqgraph-engineUpgrade mariadb-gssapi-serverUpgrade mariadb-server-utilsUpgrade mariadb-embedded-develUpgrade mariadb-errmsgUpgrade mariadbUpgrade mariadb-testUpgrade JudyUpgrade mariadb-pamUpgrade mariadb-commonUpgrade mariadb-backupUpgrade mariadb-server | Aug 4, 2022 | Feb 18, 2022 |
| Redhat_linux | — | Upgrade mariadb-server-galeraUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-test-debuginfoUpgrade mariadb-embedded-debuginfoUpgrade mariadb-backupUpgrade mysql-selinuxNo solution existsUpgrade mariadb-embedded-develUpgrade galera-debuginfoUpgrade mariadb-pamUpgrade mariadb-server-debuginfoUpgrade mariadb-develUpgrade mariadb-oqgraph-engineUpgrade mariadb-commonUpgrade mariadb-errmsgUpgrade JudyUpgrade mariadb-testUpgrade mariadb-debuginfoUpgrade mariadb-backup-debuginfoUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-oqgraph-engine-debuginfoUpgrade Judy-debugsourceUpgrade mariadb-pam-debuginfoUpgrade mariadb-gssapi-serverUpgrade galera-debugsourceUpgrade mariadb-debugsourceUpgrade mariadb-server-utilsUpgrade mariadb-serverUpgrade Judy-debuginfoUpgrade mariadb-embeddedUpgrade galeraUpgrade mariadb | Aug 3, 2022 | Feb 18, 2022 |
| Rocky_linux | — | Upgrade mariadb-serverUpgrade mariadb-pam-debuginfoUpgrade mariadb-backupUpgrade galera-debugsourceUpgrade mariadb-oqgraph-engineUpgrade mariadb-debugsourceUpgrade mariadb-server-galeraUpgrade Judy-debugsourceUpgrade mariadb-gssapi-serverUpgrade mariadb-errmsgUpgrade galeraUpgrade mariadbUpgrade mariadb-commonUpgrade galera-debuginfoUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-embedded-debuginfoUpgrade Judy-debuginfoUpgrade mariadb-embeddedUpgrade mariadb-test-debuginfoUpgrade mariadb-debuginfoUpgrade JudyUpgrade mariadb-develUpgrade mariadb-server-debuginfoUpgrade mariadb-testUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-backup-debuginfoUpgrade mariadb-pamUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-embedded-develUpgrade mariadb-server-utils | Mar 12, 2024 | Feb 18, 2022 |
| Suse | — | Upgrade libmysqld-develUpgrade mariadb104Upgrade mariadb104-clientUpgrade mariadb104-toolsUpgrade mariadb-galeraUpgrade mariadb-errormessagesUpgrade libmariadbd19Upgrade mariadb104-errormessagesUpgrade mariadb104-benchUpgrade mariadb-rpm-macrosUpgrade mariadb-testUpgrade mariadb104-rpm-macrosUpgrade python3-mysqlclientUpgrade mariadb104-testUpgrade libmariadb_pluginsUpgrade libmariadbd-develUpgrade libmariadbd104-develUpgrade libmariadb3Upgrade mariadb104-galeraUpgrade mariadb-toolsUpgrade mariadb-benchUpgrade mariadb-clientUpgrade liblz4-1Upgrade mariadbUpgrade libmariadb-develUpgrade libmysqld19 | Mar 5, 2022 | Feb 18, 2022 |
| Ubuntu | — | Upgrade mariadb-server | Mar 22, 2023 | Feb 18, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 18, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub