MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component Item_func_in::cleanup(), which is exploited via specially crafted SQL statements.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-galeraalma-upgrade-judyalma-upgrade-mariadbalma-upgrade-mariadb-backupalma-upgrade-mariadb-commonalma-upgrade-mariadb-develalma-upgrade-mariadb-embeddedalma-upgrade-mariadb-embedded-develalma-upgrade-mariadb-errmsgalma-upgrade-mariadb-gssapi-serveralma-upgrade-mariadb-oqgraph-enginealma-upgrade-mariadb-pamalma-upgrade-mariadb-serveralma-upgrade-mariadb-server-galeraalma-upgrade-mariadb-server-utilsalma-upgrade-mariadb-test | Aug 8, 2022 | Apr 12, 2022 | |
| Alpine Linux | alpine-linux-upgrade-mariadb | Mar 26, 2024 | Apr 12, 2022 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-mariadbamazon-linux-ami-2-upgrade-mariadb-backupamazon-linux-ami-2-upgrade-mariadb-commonamazon-linux-ami-2-upgrade-mariadb-configamazon-linux-ami-2-upgrade-mariadb-connect-engineamazon-linux-ami-2-upgrade-mariadb-cracklib-password-checkamazon-linux-ami-2-upgrade-mariadb-debuginfoamazon-linux-ami-2-upgrade-mariadb-develamazon-linux-ami-2-upgrade-mariadb-embeddedamazon-linux-ami-2-upgrade-mariadb-embedded-develamazon-linux-ami-2-upgrade-mariadb-errmsgamazon-linux-ami-2-upgrade-mariadb-gssapi-serveramazon-linux-ami-2-upgrade-mariadb-libsamazon-linux-ami-2-upgrade-mariadb-oqgraph-engineamazon-linux-ami-2-upgrade-mariadb-pamamazon-linux-ami-2-upgrade-mariadb-rocksdb-engineamazon-linux-ami-2-upgrade-mariadb-s3-engineamazon-linux-ami-2-upgrade-mariadb-serveramazon-linux-ami-2-upgrade-mariadb-server-galeraamazon-linux-ami-2-upgrade-mariadb-server-utilsamazon-linux-ami-2-upgrade-mariadb-sphinx-engineamazon-linux-ami-2-upgrade-mariadb-test | Sep 28, 2023 | Apr 12, 2022 | |
| Amazon_linux_2023 | amazon-linux-2023-upgrade-mariadb105amazon-linux-2023-upgrade-mariadb105-backupamazon-linux-2023-upgrade-mariadb105-backup-debuginfoamazon-linux-2023-upgrade-mariadb105-commonamazon-linux-2023-upgrade-mariadb105-connect-engineamazon-linux-2023-upgrade-mariadb105-connect-engine-debuginfoamazon-linux-2023-upgrade-mariadb105-cracklib-password-checkamazon-linux-2023-upgrade-mariadb105-cracklib-password-check-debuginfoamazon-linux-2023-upgrade-mariadb105-debuginfoamazon-linux-2023-upgrade-mariadb105-debugsourceamazon-linux-2023-upgrade-mariadb105-develamazon-linux-2023-upgrade-mariadb105-errmsgamazon-linux-2023-upgrade-mariadb105-gssapi-serveramazon-linux-2023-upgrade-mariadb105-gssapi-server-debuginfoamazon-linux-2023-upgrade-mariadb105-oqgraph-engineamazon-linux-2023-upgrade-mariadb105-oqgraph-engine-debuginfoamazon-linux-2023-upgrade-mariadb105-pamamazon-linux-2023-upgrade-mariadb105-pam-debuginfoamazon-linux-2023-upgrade-mariadb105-rocksdb-engineamazon-linux-2023-upgrade-mariadb105-rocksdb-engine-debuginfoamazon-linux-2023-upgrade-mariadb105-serveramazon-linux-2023-upgrade-mariadb105-server-debuginfoamazon-linux-2023-upgrade-mariadb105-server-utilsamazon-linux-2023-upgrade-mariadb105-server-utils-debuginfoamazon-linux-2023-upgrade-mariadb105-sphinx-engineamazon-linux-2023-upgrade-mariadb105-sphinx-engine-debuginfoamazon-linux-2023-upgrade-mariadb105-testamazon-linux-2023-upgrade-mariadb105-test-debuginfo | Feb 17, 2025 | Jul 30, 2021 | |
| Centos_linux | — | centos-upgrade-galeracentos-upgrade-galera-debuginfocentos-upgrade-galera-debugsourcecentos-upgrade-judycentos-upgrade-judy-debuginfocentos-upgrade-judy-debugsourcecentos-upgrade-mariadbcentos-upgrade-mariadb-backupcentos-upgrade-mariadb-backup-debuginfocentos-upgrade-mariadb-commoncentos-upgrade-mariadb-debuginfocentos-upgrade-mariadb-debugsourcecentos-upgrade-mariadb-develcentos-upgrade-mariadb-embeddedcentos-upgrade-mariadb-embedded-debuginfocentos-upgrade-mariadb-embedded-develcentos-upgrade-mariadb-errmsgcentos-upgrade-mariadb-gssapi-servercentos-upgrade-mariadb-gssapi-server-debuginfocentos-upgrade-mariadb-oqgraph-enginecentos-upgrade-mariadb-oqgraph-engine-debuginfocentos-upgrade-mariadb-pamcentos-upgrade-mariadb-pam-debuginfocentos-upgrade-mariadb-servercentos-upgrade-mariadb-server-debuginfocentos-upgrade-mariadb-server-galeracentos-upgrade-mariadb-server-utilscentos-upgrade-mariadb-server-utils-debuginfocentos-upgrade-mariadb-testcentos-upgrade-mariadb-test-debuginfocentos-upgrade-mysql-selinux | Aug 3, 2022 | Apr 12, 2022 |
| Debian | debian-upgrade-mariadb-10-5 | Sep 19, 2022 | Apr 12, 2022 | |
| Freebsd | freebsd-upgrade-package-mariadb103-clientfreebsd-upgrade-package-mariadb103-serverfreebsd-upgrade-package-mariadb104-clientfreebsd-upgrade-package-mariadb104-serverfreebsd-upgrade-package-mariadb105-clientfreebsd-upgrade-package-mariadb105-serverfreebsd-upgrade-package-mariadb106-clientfreebsd-upgrade-package-mariadb106-server | Nov 4, 2022 | May 23, 2022 | |
| Gentoo Linux | gentoo-linux-upgrade-dev-db-mariadb | May 10, 2024 | Apr 12, 2022 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-mariadbhuawei-euleros-2_0_sp8-upgrade-mariadb-commonhuawei-euleros-2_0_sp8-upgrade-mariadb-devel | Jun 22, 2022 | Apr 12, 2022 | |
| Mariadb Mariadb | mariadb-mariadb-upgrade-latest | Mar 4, 2025 | Apr 12, 2022 | |
| Oracle_linux | — | oracle-linux-upgrade-galeraoracle-linux-upgrade-judyoracle-linux-upgrade-mariadboracle-linux-upgrade-mariadb-backuporacle-linux-upgrade-mariadb-commonoracle-linux-upgrade-mariadb-develoracle-linux-upgrade-mariadb-embeddedoracle-linux-upgrade-mariadb-embedded-develoracle-linux-upgrade-mariadb-errmsgoracle-linux-upgrade-mariadb-gssapi-serveroracle-linux-upgrade-mariadb-oqgraph-engineoracle-linux-upgrade-mariadb-pamoracle-linux-upgrade-mariadb-serveroracle-linux-upgrade-mariadb-server-galeraoracle-linux-upgrade-mariadb-server-utilsoracle-linux-upgrade-mariadb-testoracle-linux-upgrade-mysql-selinux | Aug 4, 2022 | Jul 30, 2021 |
| Redhat_linux | redhat-upgrade-galeraredhat-upgrade-galera-debuginforedhat-upgrade-galera-debugsourceredhat-upgrade-judyredhat-upgrade-judy-debuginforedhat-upgrade-judy-debugsourceredhat-upgrade-mariadbredhat-upgrade-mariadb-backupredhat-upgrade-mariadb-backup-debuginforedhat-upgrade-mariadb-commonredhat-upgrade-mariadb-debuginforedhat-upgrade-mariadb-debugsourceredhat-upgrade-mariadb-develredhat-upgrade-mariadb-embeddedredhat-upgrade-mariadb-embedded-debuginforedhat-upgrade-mariadb-embedded-develredhat-upgrade-mariadb-errmsgredhat-upgrade-mariadb-gssapi-serverredhat-upgrade-mariadb-gssapi-server-debuginforedhat-upgrade-mariadb-oqgraph-engineredhat-upgrade-mariadb-oqgraph-engine-debuginforedhat-upgrade-mariadb-pamredhat-upgrade-mariadb-pam-debuginforedhat-upgrade-mariadb-serverredhat-upgrade-mariadb-server-debuginforedhat-upgrade-mariadb-server-galeraredhat-upgrade-mariadb-server-utilsredhat-upgrade-mariadb-server-utils-debuginforedhat-upgrade-mariadb-testredhat-upgrade-mariadb-test-debuginforedhat-upgrade-mysql-selinux | Aug 3, 2022 | Apr 12, 2022 | |
| Rocky_linux | rocky-upgrade-galerarocky-upgrade-galera-debuginforocky-upgrade-galera-debugsourcerocky-upgrade-judyrocky-upgrade-judy-debuginforocky-upgrade-judy-debugsourcerocky-upgrade-mariadbrocky-upgrade-mariadb-backuprocky-upgrade-mariadb-backup-debuginforocky-upgrade-mariadb-commonrocky-upgrade-mariadb-debuginforocky-upgrade-mariadb-debugsourcerocky-upgrade-mariadb-develrocky-upgrade-mariadb-embeddedrocky-upgrade-mariadb-embedded-debuginforocky-upgrade-mariadb-embedded-develrocky-upgrade-mariadb-errmsgrocky-upgrade-mariadb-gssapi-serverrocky-upgrade-mariadb-gssapi-server-debuginforocky-upgrade-mariadb-oqgraph-enginerocky-upgrade-mariadb-oqgraph-engine-debuginforocky-upgrade-mariadb-pamrocky-upgrade-mariadb-pam-debuginforocky-upgrade-mariadb-serverrocky-upgrade-mariadb-server-debuginforocky-upgrade-mariadb-server-galerarocky-upgrade-mariadb-server-utilsrocky-upgrade-mariadb-server-utils-debuginforocky-upgrade-mariadb-testrocky-upgrade-mariadb-test-debuginfo | Mar 12, 2024 | Apr 12, 2022 | |
| Suse | — | suse-upgrade-liblz4-1suse-upgrade-libmariadb-develsuse-upgrade-libmariadb3suse-upgrade-libmariadb_pluginssuse-upgrade-libmariadbd-develsuse-upgrade-libmariadbd104-develsuse-upgrade-libmariadbd19suse-upgrade-libmysqld-develsuse-upgrade-libmysqld19suse-upgrade-mariadbsuse-upgrade-mariadb-benchsuse-upgrade-mariadb-clientsuse-upgrade-mariadb-errormessagessuse-upgrade-mariadb-galerasuse-upgrade-mariadb-rpm-macrossuse-upgrade-mariadb-testsuse-upgrade-mariadb-toolssuse-upgrade-mariadb104suse-upgrade-mariadb104-benchsuse-upgrade-mariadb104-clientsuse-upgrade-mariadb104-errormessagessuse-upgrade-mariadb104-galerasuse-upgrade-mariadb104-rpm-macrossuse-upgrade-mariadb104-testsuse-upgrade-mariadb104-toolssuse-upgrade-python3-mysqlclient | Oct 26, 2022 | Apr 12, 2022 |
| Ubuntu | ubuntu-upgrade-mariadb-server | Nov 24, 2022 | Apr 12, 2022 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Apr 12, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub