MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component Item_func_in::cleanup(), which is exploited via specially crafted SQL statements.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mariadb-backupUpgrade mariadb-commonUpgrade mariadb-pamUpgrade mariadb-testUpgrade JudyUpgrade mariadb-embedded-develUpgrade mariadb-server-galeraUpgrade mariadb-develUpgrade mariadb-serverUpgrade galeraUpgrade mariadb-oqgraph-engineUpgrade mariadbUpgrade mariadb-embeddedUpgrade mariadb-server-utilsUpgrade mariadb-gssapi-serverUpgrade mariadb-errmsg | Aug 8, 2022 | Apr 12, 2022 |
| Alpine Linux | — | Upgrade mariadb | Mar 26, 2024 | Apr 12, 2022 |
| Amazon Linux Ami 2 | — | Upgrade mariadb-backupUpgrade mariadb-connect-engineUpgrade mariadb-oqgraph-engineUpgrade mariadb-server-galeraUpgrade mariadb-server-utilsUpgrade mariadb-rocksdb-engineUpgrade mariadb-errmsgUpgrade mariadb-commonUpgrade mariadb-embedded-develUpgrade mariadbUpgrade mariadb-develUpgrade mariadb-libsUpgrade mariadb-cracklib-password-checkUpgrade mariadb-s3-engineUpgrade mariadb-gssapi-serverUpgrade mariadb-serverUpgrade mariadb-embeddedUpgrade mariadb-debuginfoUpgrade mariadb-pamUpgrade mariadb-sphinx-engineUpgrade mariadb-configUpgrade mariadb-test | Sep 28, 2023 | Apr 12, 2022 |
| Amazon_linux_2023 | — | Upgrade mariadb105-cracklib-password-check-debuginfoUpgrade mariadb105-pamUpgrade mariadb105-sphinx-engine-debuginfoUpgrade mariadb105-commonUpgrade mariadb105-connect-engine-debuginfoUpgrade mariadb105-debuginfoUpgrade mariadb105-sphinx-engineUpgrade mariadb105-debugsourceUpgrade mariadb105-connect-engineUpgrade mariadb105-rocksdb-engine-debuginfoUpgrade mariadb105-server-utilsUpgrade mariadb105Upgrade mariadb105-gssapi-serverUpgrade mariadb105-rocksdb-engineUpgrade mariadb105-serverUpgrade mariadb105-server-utils-debuginfoUpgrade mariadb105-backup-debuginfoUpgrade mariadb105-pam-debuginfoUpgrade mariadb105-backupUpgrade mariadb105-test-debuginfoUpgrade mariadb105-server-debuginfoUpgrade mariadb105-cracklib-password-checkUpgrade mariadb105-oqgraph-engineUpgrade mariadb105-errmsgUpgrade mariadb105-oqgraph-engine-debuginfoUpgrade mariadb105-develUpgrade mariadb105-testUpgrade mariadb105-gssapi-server-debuginfo | Feb 17, 2025 | Jul 30, 2021 |
| Centos_linux | — | Upgrade mariadb-pam-debuginfoUpgrade Judy-debuginfoUpgrade galera-debugsourceUpgrade mariadbUpgrade mariadb-embedded-develUpgrade mariadb-embeddedUpgrade mariadb-serverUpgrade mariadb-backupUpgrade mariadb-develUpgrade mysql-selinuxUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-server-galeraUpgrade mariadb-server-utilsUpgrade mariadb-oqgraph-engineUpgrade mariadb-test-debuginfoUpgrade mariadb-debuginfoUpgrade mariadb-gssapi-serverUpgrade galeraUpgrade mariadb-embedded-debuginfoUpgrade mariadb-errmsgUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-testUpgrade mariadb-backup-debuginfoUpgrade mariadb-pamUpgrade mariadb-server-debuginfoUpgrade mariadb-gssapi-server-debuginfoUpgrade JudyUpgrade Judy-debugsourceUpgrade mariadb-debugsourceUpgrade galera-debuginfoUpgrade mariadb-common | Aug 3, 2022 | Apr 12, 2022 |
| Debian | — | Upgrade mariadb-10.5 | Sep 19, 2022 | Apr 12, 2022 |
| Freebsd | — | Upgrade mariadb105-serverUpgrade mariadb103-clientUpgrade mariadb106-clientUpgrade mariadb105-clientUpgrade mariadb103-serverUpgrade mariadb104-serverUpgrade mariadb106-serverUpgrade mariadb104-client | Nov 4, 2022 | May 23, 2022 |
| Gentoo Linux | — | Upgrade dev-db/mariadb. | May 10, 2024 | Apr 12, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade mariadb-develUpgrade mariadb-commonUpgrade mariadb | Jun 22, 2022 | Apr 12, 2022 |
| Mariadb Mariadb | — | Upgrade MariaDB to the latest version | Mar 4, 2025 | Apr 12, 2022 |
| Oracle_linux | — | Upgrade mariadb-develUpgrade mariadb-serverUpgrade mariadb-server-utilsUpgrade mysql-selinuxUpgrade galeraUpgrade mariadbUpgrade mariadb-embeddedUpgrade mariadb-gssapi-serverUpgrade mariadb-server-galeraUpgrade mariadb-oqgraph-engineUpgrade mariadb-testUpgrade mariadb-backupUpgrade JudyUpgrade mariadb-embedded-develUpgrade mariadb-commonUpgrade mariadb-errmsgUpgrade mariadb-pam | Aug 4, 2022 | Jul 30, 2021 |
| Redhat_linux | — | Upgrade Judy-debugsourceUpgrade galera-debugsourceUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-testUpgrade mariadb-debuginfoUpgrade mariadb-serverUpgrade mariadbUpgrade mariadb-pamUpgrade Judy-debuginfoUpgrade mariadb-server-utilsUpgrade mariadb-gssapi-serverUpgrade mariadb-debugsourceUpgrade mariadb-pam-debuginfoUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-backup-debuginfoUpgrade mariadb-embeddedUpgrade galera-debuginfoUpgrade mariadb-errmsgUpgrade mariadb-server-debuginfoNo solution existsUpgrade JudyUpgrade mariadb-oqgraph-engineUpgrade mariadb-backupUpgrade mariadb-embedded-develUpgrade mariadb-server-galeraUpgrade mariadb-test-debuginfoUpgrade mysql-selinuxUpgrade mariadb-embedded-debuginfoUpgrade mariadb-server-utils-debuginfoUpgrade galeraUpgrade mariadb-develUpgrade mariadb-common | Aug 3, 2022 | Apr 12, 2022 |
| Rocky_linux | — | Upgrade mariadb-errmsgUpgrade mariadb-develUpgrade galera-debuginfoUpgrade mariadb-commonUpgrade mariadb-server-galeraUpgrade JudyUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-backup-debuginfoUpgrade mariadb-test-debuginfoUpgrade mariadb-backupUpgrade mariadb-embedded-develUpgrade mariadb-pamUpgrade Judy-debugsourceUpgrade galeraUpgrade mariadb-serverUpgrade mariadb-server-utilsUpgrade mariadb-server-debuginfoUpgrade mariadb-testUpgrade mariadbUpgrade mariadb-debuginfoUpgrade mariadb-embeddedUpgrade mariadb-gssapi-serverUpgrade mariadb-oqgraph-engineUpgrade galera-debugsourceUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-embedded-debuginfoUpgrade mariadb-server-utils-debuginfoUpgrade Judy-debuginfoUpgrade mariadb-pam-debuginfoUpgrade mariadb-debugsource | Mar 12, 2024 | Apr 12, 2022 |
| Suse | — | Upgrade libmariadbd19Upgrade libmysqld-develUpgrade mariadb104-clientUpgrade mariadb104-errormessagesUpgrade mariadb-benchUpgrade mariadb-galeraUpgrade python3-mysqlclientUpgrade libmariadb-develUpgrade mariadb-rpm-macrosUpgrade libmysqld19Upgrade mariadb-testUpgrade mariadb104-testUpgrade mariadb104-toolsUpgrade mariadb104Upgrade mariadb-errormessagesUpgrade libmariadbd104-develUpgrade libmariadb3Upgrade mariadb-toolsUpgrade libmariadbd-develUpgrade mariadb104-galeraUpgrade mariadbUpgrade mariadb104-benchUpgrade mariadb-clientUpgrade liblz4-1Upgrade mariadb104-rpm-macrosUpgrade libmariadb_plugins | Oct 26, 2022 | Apr 12, 2022 |
| Ubuntu | — | Upgrade mariadb-server | Nov 24, 2022 | Apr 12, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 12, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub