MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component Item_func_in::cleanup(), which is exploited via specially crafted SQL statements.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mariadb-backupUpgrade JudyUpgrade mariadb-develUpgrade mariadb-commonUpgrade mariadb-server-galeraUpgrade mariadb-pamUpgrade mariadb-embedded-develUpgrade mariadb-testUpgrade mariadb-embeddedUpgrade mariadb-serverUpgrade mariadb-gssapi-serverUpgrade galeraUpgrade mariadbUpgrade mariadb-oqgraph-engineUpgrade mariadb-server-utilsUpgrade mariadb-errmsg | Aug 8, 2022 | Apr 12, 2022 |
| Alpine Linux | — | Upgrade mariadb | Mar 26, 2024 | Apr 12, 2022 |
| Amazon Linux Ami 2 | — | Upgrade mariadbUpgrade mariadb-develUpgrade mariadb-embedded-develUpgrade mariadb-libsUpgrade mariadb-oqgraph-engineUpgrade mariadb-connect-engineUpgrade mariadb-server-galeraUpgrade mariadb-commonUpgrade mariadb-server-utilsUpgrade mariadb-backupUpgrade mariadb-errmsgUpgrade mariadb-rocksdb-engineUpgrade mariadb-embeddedUpgrade mariadb-sphinx-engineUpgrade mariadb-testUpgrade mariadb-configUpgrade mariadb-pamUpgrade mariadb-debuginfoUpgrade mariadb-cracklib-password-checkUpgrade mariadb-s3-engineUpgrade mariadb-gssapi-serverUpgrade mariadb-server | Sep 28, 2023 | Apr 12, 2022 |
| Amazon_linux_2023 | — | Upgrade mariadb105Upgrade mariadb105-rocksdb-engineUpgrade mariadb105-serverUpgrade mariadb105-gssapi-serverUpgrade mariadb105-connect-engineUpgrade mariadb105-sphinx-engine-debuginfoUpgrade mariadb105-sphinx-engineUpgrade mariadb105-debugsourceUpgrade mariadb105-rocksdb-engine-debuginfoUpgrade mariadb105-pamUpgrade mariadb105-debuginfoUpgrade mariadb105-commonUpgrade mariadb105-server-utilsUpgrade mariadb105-connect-engine-debuginfoUpgrade mariadb105-cracklib-password-check-debuginfoUpgrade mariadb105-errmsgUpgrade mariadb105-oqgraph-engineUpgrade mariadb105-develUpgrade mariadb105-oqgraph-engine-debuginfoUpgrade mariadb105-cracklib-password-checkUpgrade mariadb105-server-utils-debuginfoUpgrade mariadb105-backup-debuginfoUpgrade mariadb105-test-debuginfoUpgrade mariadb105-backupUpgrade mariadb105-pam-debuginfoUpgrade mariadb105-testUpgrade mariadb105-gssapi-server-debuginfoUpgrade mariadb105-server-debuginfo | Feb 17, 2025 | Jul 30, 2021 |
| Centos_linux | — | Upgrade mariadb-embeddedUpgrade galera-debugsourceUpgrade mariadb-server-galeraUpgrade mariadb-gssapi-serverUpgrade mariadb-oqgraph-engineUpgrade mariadb-server-utilsUpgrade galeraUpgrade mariadbUpgrade mariadb-debuginfoUpgrade mariadb-backupUpgrade mysql-selinuxUpgrade mariadb-embedded-debuginfoUpgrade mariadb-errmsgUpgrade Judy-debuginfoUpgrade mariadb-embedded-develUpgrade mariadb-pam-debuginfoUpgrade mariadb-serverUpgrade mariadb-test-debuginfoUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-develUpgrade mariadb-debugsourceUpgrade galera-debuginfoUpgrade mariadb-pamUpgrade mariadb-commonUpgrade mariadb-gssapi-server-debuginfoUpgrade JudyUpgrade mariadb-backup-debuginfoUpgrade mariadb-testUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-server-debuginfoUpgrade Judy-debugsource | Aug 3, 2022 | Apr 12, 2022 |
| Debian | — | Upgrade mariadb-10.5 | Sep 19, 2022 | Apr 12, 2022 |
| Freebsd | — | Upgrade mariadb106-clientUpgrade mariadb105-clientUpgrade mariadb103-clientUpgrade mariadb105-serverUpgrade mariadb103-serverUpgrade mariadb104-serverUpgrade mariadb106-serverUpgrade mariadb104-client | Nov 4, 2022 | May 23, 2022 |
| Gentoo Linux | — | Upgrade dev-db/mariadb. | May 10, 2024 | Apr 12, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade mariadbUpgrade mariadb-commonUpgrade mariadb-devel | Jun 22, 2022 | Apr 12, 2022 |
| Mariadb Mariadb | — | Upgrade MariaDB to the latest version | Mar 4, 2025 | Apr 12, 2022 |
| Oracle_linux | — | Upgrade mariadb-develUpgrade mariadb-serverUpgrade mariadb-embeddedUpgrade mariadb-oqgraph-engineUpgrade galeraUpgrade mariadb-gssapi-serverUpgrade mariadbUpgrade mariadb-server-utilsUpgrade mysql-selinuxUpgrade mariadb-server-galeraUpgrade mariadb-commonUpgrade mariadb-errmsgUpgrade mariadb-embedded-develUpgrade mariadb-pamUpgrade mariadb-backupUpgrade JudyUpgrade mariadb-test | Aug 4, 2022 | Jul 30, 2021 |
| Redhat_linux | — | Upgrade Judy-debugsourceUpgrade mariadb-gssapi-serverUpgrade mariadbUpgrade mariadb-embeddedUpgrade Judy-debuginfoUpgrade galera-debuginfoUpgrade mariadb-pam-debuginfoUpgrade mariadb-backup-debuginfoUpgrade mariadb-pamUpgrade mariadb-serverUpgrade mariadb-server-utilsUpgrade mariadb-testUpgrade galera-debugsourceUpgrade mariadb-debuginfoUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-debugsourceUpgrade mariadb-commonNo solution existsUpgrade mariadb-embedded-develUpgrade mariadb-errmsgUpgrade mariadb-embedded-debuginfoUpgrade mariadb-server-utils-debuginfoUpgrade mysql-selinuxUpgrade mariadb-develUpgrade mariadb-server-debuginfoUpgrade mariadb-oqgraph-engineUpgrade galeraUpgrade JudyUpgrade mariadb-backupUpgrade mariadb-server-galeraUpgrade mariadb-test-debuginfo | Aug 3, 2022 | Apr 12, 2022 |
| Rocky_linux | — | Upgrade mariadb-embedded-debuginfoUpgrade mariadbUpgrade galera-debugsourceUpgrade mariadb-oqgraph-engineUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-debugsourceUpgrade mariadb-embeddedUpgrade mariadb-gssapi-serverUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-debuginfoUpgrade galeraUpgrade mariadb-pam-debuginfoUpgrade Judy-debuginfoUpgrade mariadb-server-utilsUpgrade mariadb-testUpgrade mariadb-serverUpgrade mariadb-server-debuginfoUpgrade mariadb-embedded-develUpgrade mariadb-commonUpgrade mariadb-test-debuginfoUpgrade mariadb-backup-debuginfoUpgrade Judy-debugsourceUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-backupUpgrade mariadb-pamUpgrade mariadb-server-galeraUpgrade mariadb-develUpgrade mariadb-errmsgUpgrade JudyUpgrade galera-debuginfo | Mar 12, 2024 | Apr 12, 2022 |
| Suse | — | Upgrade mariadb-rpm-macrosUpgrade mariadb104-clientUpgrade mariadb104Upgrade libmariadbd19Upgrade python3-mysqlclientUpgrade mariadb-benchUpgrade libmysqld-develUpgrade mariadb-galeraUpgrade mariadb104-testUpgrade libmariadb-develUpgrade libmysqld19Upgrade libmariadbd104-develUpgrade mariadb-testUpgrade mariadb-errormessagesUpgrade mariadb104-errormessagesUpgrade mariadb104-toolsUpgrade libmariadb3Upgrade mariadbUpgrade liblz4-1Upgrade mariadb104-galeraUpgrade libmariadbd-develUpgrade mariadb-clientUpgrade mariadb104-benchUpgrade mariadb104-rpm-macrosUpgrade libmariadb_pluginsUpgrade mariadb-tools | Oct 26, 2022 | Apr 12, 2022 |
| Ubuntu | — | Upgrade mariadb-server | Nov 24, 2022 | Apr 12, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 12, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub