MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component Item_func_in::cleanup(), which is exploited via specially crafted SQL statements.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mariadb-serverUpgrade mariadb-server-utilsUpgrade mariadb-embeddedUpgrade mariadb-oqgraph-engineUpgrade mariadb-gssapi-serverUpgrade mariadbUpgrade galeraUpgrade mariadb-errmsgUpgrade mariadb-server-galeraUpgrade mariadb-pamUpgrade mariadb-develUpgrade mariadb-commonUpgrade mariadb-testUpgrade mariadb-embedded-develUpgrade mariadb-backupUpgrade Judy | Aug 8, 2022 | Apr 12, 2022 |
| Alpine Linux | — | Upgrade mariadb | Mar 26, 2024 | Apr 12, 2022 |
| Amazon Linux Ami 2 | — | Upgrade mariadb-oqgraph-engineUpgrade mariadb-server-utilsUpgrade mariadb-connect-engineUpgrade mariadb-libsUpgrade mariadb-server-galeraUpgrade mariadb-rocksdb-engineUpgrade mariadb-develUpgrade mariadb-embedded-develUpgrade mariadbUpgrade mariadb-errmsgUpgrade mariadb-commonUpgrade mariadb-backupUpgrade mariadb-configUpgrade mariadb-cracklib-password-checkUpgrade mariadb-embeddedUpgrade mariadb-gssapi-serverUpgrade mariadb-s3-engineUpgrade mariadb-debuginfoUpgrade mariadb-serverUpgrade mariadb-pamUpgrade mariadb-sphinx-engineUpgrade mariadb-test | Sep 28, 2023 | Apr 12, 2022 |
| Amazon_linux_2023 | — | Upgrade mariadb105-gssapi-server-debuginfoUpgrade mariadb105-backup-debuginfoUpgrade mariadb105-server-utils-debuginfoUpgrade mariadb105-backupUpgrade mariadb105-test-debuginfoUpgrade mariadb105-errmsgUpgrade mariadb105-server-debuginfoUpgrade mariadb105-testUpgrade mariadb105-develUpgrade mariadb105-oqgraph-engine-debuginfoUpgrade mariadb105-cracklib-password-checkUpgrade mariadb105-pam-debuginfoUpgrade mariadb105-oqgraph-engineUpgrade mariadb105Upgrade mariadb105-connect-engine-debuginfoUpgrade mariadb105-debuginfoUpgrade mariadb105-connect-engineUpgrade mariadb105-server-utilsUpgrade mariadb105-pamUpgrade mariadb105-rocksdb-engineUpgrade mariadb105-sphinx-engine-debuginfoUpgrade mariadb105-serverUpgrade mariadb105-gssapi-serverUpgrade mariadb105-commonUpgrade mariadb105-cracklib-password-check-debuginfoUpgrade mariadb105-sphinx-engineUpgrade mariadb105-rocksdb-engine-debuginfoUpgrade mariadb105-debugsource | Feb 17, 2025 | Jul 30, 2021 |
| Centos_linux | — | Upgrade mariadb-embeddedUpgrade galera-debugsourceUpgrade mariadbUpgrade mysql-selinuxUpgrade Judy-debuginfoUpgrade mariadb-develUpgrade mariadb-embedded-develUpgrade mariadb-serverUpgrade mariadb-test-debuginfoUpgrade mariadb-debuginfoUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-errmsgUpgrade galeraUpgrade mariadb-embedded-debuginfoUpgrade mariadb-server-galeraUpgrade mariadb-pam-debuginfoUpgrade mariadb-oqgraph-engineUpgrade mariadb-backupUpgrade mariadb-server-utilsUpgrade mariadb-gssapi-serverUpgrade JudyUpgrade mariadb-debugsourceUpgrade mariadb-gssapi-server-debuginfoUpgrade Judy-debugsourceUpgrade galera-debuginfoUpgrade mariadb-server-debuginfoUpgrade mariadb-commonUpgrade mariadb-testUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-backup-debuginfoUpgrade mariadb-pam | Aug 3, 2022 | Apr 12, 2022 |
| Debian | — | Upgrade mariadb-10.5 | Sep 19, 2022 | Apr 12, 2022 |
| Freebsd | — | Upgrade mariadb103-clientUpgrade mariadb103-serverUpgrade mariadb105-clientUpgrade mariadb105-serverUpgrade mariadb106-clientUpgrade mariadb106-serverUpgrade mariadb104-clientUpgrade mariadb104-server | Nov 4, 2022 | May 23, 2022 |
| Gentoo Linux | — | Upgrade dev-db/mariadb. | May 10, 2024 | Apr 12, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade mariadb-develUpgrade mariadbUpgrade mariadb-common | Jun 22, 2022 | Apr 12, 2022 |
| Mariadb Mariadb | — | Upgrade MariaDB to the latest version | Mar 4, 2025 | Apr 12, 2022 |
| Oracle_linux | — | Upgrade mariadb-pamUpgrade mariadb-errmsgUpgrade JudyUpgrade mariadb-backupUpgrade mariadb-testUpgrade mariadb-commonUpgrade mariadb-embedded-develUpgrade mariadb-oqgraph-engineUpgrade mysql-selinuxUpgrade mariadb-embeddedUpgrade mariadbUpgrade mariadb-server-utilsUpgrade mariadb-develUpgrade mariadb-server-galeraUpgrade mariadb-serverUpgrade mariadb-gssapi-serverUpgrade galera | Aug 4, 2022 | Jul 30, 2021 |
| Redhat_linux | — | Upgrade mariadb-server-utils-debuginfoUpgrade mysql-selinuxUpgrade mariadb-test-debuginfoUpgrade mariadb-server-galeraUpgrade mariadb-oqgraph-engineUpgrade mariadb-develUpgrade mariadb-commonUpgrade mariadb-embedded-develNo solution existsUpgrade mariadb-backupUpgrade JudyUpgrade mariadb-errmsgUpgrade galeraUpgrade mariadb-server-debuginfoUpgrade mariadb-embedded-debuginfoUpgrade mariadb-oqgraph-engine-debuginfoUpgrade galera-debugsourceUpgrade mariadb-testUpgrade mariadb-debuginfoUpgrade mariadb-pam-debuginfoUpgrade mariadb-pamUpgrade mariadb-serverUpgrade mariadb-gssapi-serverUpgrade Judy-debuginfoUpgrade mariadbUpgrade mariadb-embeddedUpgrade mariadb-backup-debuginfoUpgrade mariadb-server-utilsUpgrade mariadb-gssapi-server-debuginfoUpgrade Judy-debugsourceUpgrade galera-debuginfoUpgrade mariadb-debugsource | Aug 3, 2022 | Apr 12, 2022 |
| Rocky_linux | — | Upgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-embedded-debuginfoUpgrade mariadb-debuginfoUpgrade mariadb-server-debuginfoUpgrade mariadbUpgrade mariadb-serverUpgrade mariadb-oqgraph-engineUpgrade mariadb-embeddedUpgrade mariadb-testUpgrade mariadb-server-utilsUpgrade Judy-debuginfoUpgrade galeraUpgrade mariadb-debugsourceUpgrade galera-debugsourceUpgrade mariadb-gssapi-serverUpgrade mariadb-pam-debuginfoUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-commonUpgrade mariadb-test-debuginfoUpgrade JudyUpgrade mariadb-errmsgUpgrade mariadb-server-galeraUpgrade mariadb-pamUpgrade mariadb-embedded-develUpgrade Judy-debugsourceUpgrade mariadb-backupUpgrade galera-debuginfoUpgrade mariadb-develUpgrade mariadb-backup-debuginfo | Mar 12, 2024 | Apr 12, 2022 |
| Suse | — | Upgrade libmariadbd-develUpgrade mariadb104-rpm-macrosUpgrade mariadbUpgrade mariadb-clientUpgrade mariadb-toolsUpgrade libmariadb_pluginsUpgrade liblz4-1Upgrade mariadb104-benchUpgrade mariadb104-galeraUpgrade libmysqld19Upgrade mariadb-benchUpgrade python3-mysqlclientUpgrade libmariadbd19Upgrade mariadb104-testUpgrade libmariadb3Upgrade mariadb104-toolsUpgrade mariadb-galeraUpgrade mariadb-testUpgrade libmariadb-develUpgrade mariadb104Upgrade libmariadbd104-develUpgrade mariadb-rpm-macrosUpgrade mariadb104-errormessagesUpgrade mariadb-errormessagesUpgrade mariadb104-clientUpgrade libmysqld-devel | Oct 26, 2022 | Apr 12, 2022 |
| Ubuntu | — | Upgrade mariadb-server | Nov 24, 2022 | Apr 12, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 12, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub