MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component Item_func_in::cleanup(), which is exploited via specially crafted SQL statements.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mariadb-develUpgrade mariadb-commonUpgrade JudyUpgrade mariadb-embedded-develUpgrade mariadb-server-galeraUpgrade mariadb-pamUpgrade mariadb-backupUpgrade mariadb-testUpgrade mariadb-embeddedUpgrade mariadb-oqgraph-engineUpgrade mariadbUpgrade mariadb-serverUpgrade galeraUpgrade mariadb-errmsgUpgrade mariadb-gssapi-serverUpgrade mariadb-server-utils | Aug 8, 2022 | Apr 12, 2022 |
| Alpine Linux | — | Upgrade mariadb | Mar 26, 2024 | Apr 12, 2022 |
| Amazon Linux Ami 2 | — | Upgrade mariadb-rocksdb-engineUpgrade mariadb-errmsgUpgrade mariadb-commonUpgrade mariadb-server-galeraUpgrade mariadb-backupUpgrade mariadb-embedded-develUpgrade mariadb-libsUpgrade mariadb-server-utilsUpgrade mariadb-connect-engineUpgrade mariadbUpgrade mariadb-develUpgrade mariadb-oqgraph-engineUpgrade mariadb-testUpgrade mariadb-s3-engineUpgrade mariadb-debuginfoUpgrade mariadb-cracklib-password-checkUpgrade mariadb-serverUpgrade mariadb-gssapi-serverUpgrade mariadb-sphinx-engineUpgrade mariadb-pamUpgrade mariadb-configUpgrade mariadb-embedded | Sep 28, 2023 | Apr 12, 2022 |
| Amazon_linux_2023 | — | Upgrade mariadb105-pamUpgrade mariadb105-connect-engineUpgrade mariadb105-cracklib-password-check-debuginfoUpgrade mariadb105-debugsourceUpgrade mariadb105-connect-engine-debuginfoUpgrade mariadb105-sphinx-engine-debuginfoUpgrade mariadb105-server-utilsUpgrade mariadb105-sphinx-engineUpgrade mariadb105-commonUpgrade mariadb105Upgrade mariadb105-rocksdb-engine-debuginfoUpgrade mariadb105-serverUpgrade mariadb105-gssapi-serverUpgrade mariadb105-debuginfoUpgrade mariadb105-rocksdb-engineUpgrade mariadb105-gssapi-server-debuginfoUpgrade mariadb105-test-debuginfoUpgrade mariadb105-backupUpgrade mariadb105-oqgraph-engine-debuginfoUpgrade mariadb105-oqgraph-engineUpgrade mariadb105-errmsgUpgrade mariadb105-develUpgrade mariadb105-testUpgrade mariadb105-cracklib-password-checkUpgrade mariadb105-backup-debuginfoUpgrade mariadb105-server-utils-debuginfoUpgrade mariadb105-server-debuginfoUpgrade mariadb105-pam-debuginfo | Feb 17, 2025 | Jul 30, 2021 |
| Centos_linux | — | Upgrade galera-debugsourceUpgrade Judy-debuginfoUpgrade mariadb-embeddedUpgrade mariadbUpgrade mysql-selinuxUpgrade mariadb-test-debuginfoUpgrade mariadb-develUpgrade mariadb-embedded-develUpgrade mariadb-serverUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-oqgraph-engineUpgrade mariadb-backupUpgrade mariadb-server-galeraUpgrade mariadb-errmsgUpgrade galeraUpgrade mariadb-pam-debuginfoUpgrade mariadb-server-utilsUpgrade mariadb-gssapi-serverUpgrade mariadb-debuginfoUpgrade mariadb-embedded-debuginfoUpgrade mariadb-backup-debuginfoUpgrade mariadb-pamUpgrade mariadb-testUpgrade mariadb-debugsourceUpgrade Judy-debugsourceUpgrade galera-debuginfoUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-commonUpgrade JudyUpgrade mariadb-server-debuginfoUpgrade mariadb-gssapi-server-debuginfo | Aug 3, 2022 | Apr 12, 2022 |
| Debian | — | Upgrade mariadb-10.5 | Sep 19, 2022 | Apr 12, 2022 |
| Freebsd | — | Upgrade mariadb106-serverUpgrade mariadb104-serverUpgrade mariadb104-clientUpgrade mariadb106-clientUpgrade mariadb103-clientUpgrade mariadb105-clientUpgrade mariadb105-serverUpgrade mariadb103-server | Nov 4, 2022 | May 23, 2022 |
| Gentoo Linux | — | Upgrade dev-db/mariadb. | May 10, 2024 | Apr 12, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade mariadb-develUpgrade mariadbUpgrade mariadb-common | Jun 22, 2022 | Apr 12, 2022 |
| Mariadb Mariadb | — | Upgrade MariaDB to the latest version | Mar 4, 2025 | Apr 12, 2022 |
| Oracle_linux | — | Upgrade mariadb-errmsgUpgrade mariadb-testUpgrade mariadb-embedded-develUpgrade mariadb-backupUpgrade mariadb-commonUpgrade JudyUpgrade mariadb-pamUpgrade mariadb-embeddedUpgrade mariadb-server-galeraUpgrade mariadb-oqgraph-engineUpgrade mariadb-gssapi-serverUpgrade mariadb-develUpgrade mariadb-server-utilsUpgrade mariadbUpgrade galeraUpgrade mysql-selinuxUpgrade mariadb-server | Aug 4, 2022 | Jul 30, 2021 |
| Redhat_linux | — | Upgrade mariadb-embeddedUpgrade galera-debugsourceUpgrade mariadb-backup-debuginfoUpgrade mariadb-serverUpgrade mariadb-pam-debuginfoUpgrade mariadbUpgrade mariadb-debuginfoUpgrade mariadb-gssapi-serverUpgrade Judy-debuginfoUpgrade mariadb-server-utilsUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-testUpgrade galera-debuginfoUpgrade mariadb-debugsourceUpgrade mariadb-embedded-develUpgrade mariadb-errmsgUpgrade JudyNo solution existsUpgrade galeraUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-test-debuginfoUpgrade mariadb-embedded-debuginfoUpgrade mariadb-server-debuginfoUpgrade mariadb-develUpgrade mariadb-commonUpgrade mariadb-oqgraph-engineUpgrade mysql-selinuxUpgrade mariadb-backupUpgrade mariadb-server-galera | Aug 3, 2022 | Apr 12, 2022 |
| Rocky_linux | — | Upgrade mariadb-develUpgrade mariadb-backupUpgrade mariadb-backup-debuginfoUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-commonUpgrade JudyUpgrade Judy-debugsourceUpgrade mariadb-test-debuginfoUpgrade galera-debuginfoUpgrade mariadb-pamUpgrade mariadb-embedded-develUpgrade mariadb-errmsgUpgrade mariadb-server-galeraUpgrade mariadb-debugsourceUpgrade galera-debugsourceUpgrade Judy-debuginfoUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-embedded-debuginfoUpgrade mariadb-server-utilsUpgrade mariadb-pam-debuginfoUpgrade galeraUpgrade mariadb-debuginfoUpgrade mariadb-server-debuginfoUpgrade mariadb-embeddedUpgrade mariadb-oqgraph-engineUpgrade mariadb-testUpgrade mariadb-gssapi-serverUpgrade mariadb-serverUpgrade mariadbUpgrade mariadb-server-utils-debuginfo | Mar 12, 2024 | Apr 12, 2022 |
| Suse | — | Upgrade libmariadb_pluginsUpgrade mariadb-toolsUpgrade mariadb104-rpm-macrosUpgrade liblz4-1Upgrade mariadb-clientUpgrade libmariadbd-develUpgrade mariadb104-galeraUpgrade mariadbUpgrade mariadb104-benchUpgrade libmariadb-develUpgrade mariadb-galeraUpgrade mariadb-rpm-macrosUpgrade libmysqld-develUpgrade libmariadbd19Upgrade mariadb-errormessagesUpgrade python3-mysqlclientUpgrade mariadb104-clientUpgrade mariadb-benchUpgrade mariadb104Upgrade libmariadbd104-develUpgrade mariadb-testUpgrade mariadb104-testUpgrade libmariadb3Upgrade mariadb104-toolsUpgrade libmysqld19Upgrade mariadb104-errormessages | Oct 26, 2022 | Apr 12, 2022 |
| Ubuntu | — | Upgrade mariadb-server | Nov 24, 2022 | Apr 12, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 12, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub