An issue in the component Arg_comparator::compare_real_fixed of MariaDB Server v10.6.2 and below was discovered to allow attackers to cause a Denial of Service (DoS) via specially crafted SQL statements.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade galeraUpgrade mariadb-oqgraph-engineUpgrade mariadb-embeddedUpgrade mariadb-embedded-develUpgrade mariadb-backupUpgrade mariadb-server-galeraUpgrade mariadbUpgrade mariadb-server-utilsUpgrade mariadb-gssapi-serverUpgrade JudyUpgrade mariadb-errmsgUpgrade mariadb-pamUpgrade mariadb-testUpgrade mariadb-serverUpgrade mariadb-commonUpgrade mariadb-devel | Aug 8, 2022 | Apr 12, 2022 |
| Alpine Linux | — | Upgrade mariadb | Mar 26, 2024 | Apr 12, 2022 |
| Amazon Linux Ami 2 | — | Upgrade mariadb-commonUpgrade mariadb-libsUpgrade mariadb-oqgraph-engineUpgrade mariadb-backupUpgrade mariadbUpgrade mariadb-serverUpgrade mariadb-embeddedUpgrade mariadb-gssapi-serverUpgrade mariadb-connect-engineUpgrade mariadb-embedded-develUpgrade mariadb-errmsgUpgrade mariadb-debuginfoUpgrade mariadb-rocksdb-engineUpgrade mariadb-server-galeraUpgrade mariadb-s3-engineUpgrade mariadb-cracklib-password-checkUpgrade mariadb-pamUpgrade mariadb-testUpgrade mariadb-develUpgrade mariadb-sphinx-engineUpgrade mariadb-configUpgrade mariadb-server-utils | Sep 28, 2023 | Apr 12, 2022 |
| Amazon_linux_2023 | — | Upgrade mariadb105-serverUpgrade mariadb105-connect-engineUpgrade mariadb105-pamUpgrade mariadb105-sphinx-engineUpgrade mariadb105-gssapi-server-debuginfoUpgrade mariadb105-errmsgUpgrade mariadb105-backup-debuginfoUpgrade mariadb105Upgrade mariadb105-oqgraph-engineUpgrade mariadb105-rocksdb-engine-debuginfoUpgrade mariadb105-oqgraph-engine-debuginfoUpgrade mariadb105-server-utils-debuginfoUpgrade mariadb105-debuginfoUpgrade mariadb105-cracklib-password-check-debuginfoUpgrade mariadb105-backupUpgrade mariadb105-debugsourceUpgrade mariadb105-server-utilsUpgrade mariadb105-gssapi-serverUpgrade mariadb105-test-debuginfoUpgrade mariadb105-connect-engine-debuginfoUpgrade mariadb105-testUpgrade mariadb105-rocksdb-engineUpgrade mariadb105-cracklib-password-checkUpgrade mariadb105-pam-debuginfoUpgrade mariadb105-commonUpgrade mariadb105-develUpgrade mariadb105-sphinx-engine-debuginfoUpgrade mariadb105-server-debuginfo | Feb 17, 2025 | Aug 13, 2021 |
| Centos_linux | — | Upgrade mariadb-backup-debuginfoUpgrade mariadb-embeddedUpgrade mariadb-pam-debuginfoUpgrade mariadb-develUpgrade galera-debugsourceUpgrade mariadb-oqgraph-engineUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-gssapi-serverUpgrade galeraUpgrade mariadb-embedded-develUpgrade mariadb-debuginfoUpgrade Judy-debuginfoUpgrade mariadb-server-galeraUpgrade mariadb-server-utilsUpgrade mariadb-test-debuginfoUpgrade mariadb-server-debuginfoUpgrade mysql-selinuxUpgrade Judy-debugsourceUpgrade mariadb-backupUpgrade mariadbUpgrade mariadb-debugsourceUpgrade mariadb-gssapi-server-debuginfoUpgrade JudyUpgrade mariadb-embedded-debuginfoUpgrade mariadb-serverUpgrade mariadb-commonUpgrade mariadb-errmsgUpgrade mariadb-testUpgrade galera-debuginfoUpgrade mariadb-pamUpgrade mariadb-oqgraph-engine-debuginfo | Aug 3, 2022 | Apr 12, 2022 |
| Debian | — | Upgrade mariadb-10.5 | Sep 19, 2022 | Apr 12, 2022 |
| Freebsd | — | Upgrade mariadb104-serverUpgrade mariadb103-clientUpgrade mariadb106-serverUpgrade mariadb105-serverUpgrade mariadb106-clientUpgrade mariadb104-clientUpgrade mariadb103-serverUpgrade mariadb105-client | Nov 4, 2022 | May 23, 2022 |
| Gentoo Linux | — | Upgrade dev-db/mariadb. | May 10, 2024 | Apr 12, 2022 |
| Mariadb Mariadb | — | Upgrade MariaDB to the latest version | Mar 4, 2025 | Apr 12, 2022 |
| Oracle_linux | — | Upgrade mariadb-server-utilsUpgrade mariadb-errmsgUpgrade galeraUpgrade mariadb-oqgraph-engineUpgrade mariadb-embedded-develUpgrade mysql-selinuxUpgrade mariadb-backupUpgrade mariadb-embeddedUpgrade mariadb-gssapi-serverUpgrade mariadb-server-galeraUpgrade mariadb-develUpgrade mariadb-serverUpgrade mariadb-commonUpgrade JudyUpgrade mariadb-testUpgrade mariadbUpgrade mariadb-pam | Aug 4, 2022 | Aug 13, 2021 |
| Redhat_linux | — | Upgrade mariadb-backupUpgrade Judy-debugsourceUpgrade mariadb-pam-debuginfoUpgrade galeraUpgrade mariadb-debuginfoUpgrade mariadb-oqgraph-engineUpgrade mariadb-commonUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-serverUpgrade mariadb-debugsourceUpgrade galera-debugsourceUpgrade mariadb-testUpgrade mariadb-embedded-debuginfoUpgrade mariadb-errmsgUpgrade mariadb-server-galeraUpgrade mariadbUpgrade galera-debuginfoUpgrade mariadb-gssapi-serverUpgrade mysql-selinuxNo solution existsUpgrade mariadb-embedded-develUpgrade mariadb-backup-debuginfoUpgrade mariadb-pamUpgrade mariadb-develUpgrade mariadb-server-utilsUpgrade JudyUpgrade mariadb-server-debuginfoUpgrade mariadb-test-debuginfoUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-embeddedUpgrade Judy-debuginfoUpgrade mariadb-server-utils-debuginfo | Aug 3, 2022 | Apr 12, 2022 |
| Rocky_linux | — | Upgrade Judy-debuginfoUpgrade mariadb-oqgraph-engineUpgrade mariadb-embeddedUpgrade mariadb-backup-debuginfoUpgrade mariadb-pam-debuginfoUpgrade mariadb-server-utilsUpgrade mariadb-embedded-develUpgrade mariadb-develUpgrade mariadb-server-debuginfoUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-server-galeraUpgrade galeraUpgrade mariadb-test-debuginfoUpgrade mariadb-backupUpgrade mariadb-pamUpgrade galera-debuginfoUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-gssapi-serverUpgrade mariadb-debugsourceUpgrade mariadb-errmsgUpgrade mariadb-commonUpgrade mariadbUpgrade mariadb-debuginfoUpgrade mariadb-oqgraph-engine-debuginfoUpgrade Judy-debugsourceUpgrade mariadb-serverUpgrade mariadb-testUpgrade mariadb-embedded-debuginfoUpgrade JudyUpgrade galera-debugsource | Mar 12, 2024 | Apr 12, 2022 |
| Suse | — | Upgrade mariadb104-benchUpgrade mariadb-rpm-macrosUpgrade mariadb-toolsUpgrade mariadb104-errormessagesUpgrade libmariadbd19Upgrade mariadb-galeraUpgrade mariadb-testUpgrade mariadb104-toolsUpgrade libmariadb-develUpgrade mariadb104-clientUpgrade mariadb104Upgrade liblz4-1Upgrade libmariadb3Upgrade mariadb-errormessagesUpgrade libmariadbd-develUpgrade python3-mysqlclientUpgrade libmariadbd104-develUpgrade libmariadb_pluginsUpgrade mariadbUpgrade mariadb-clientUpgrade mariadb104-rpm-macrosUpgrade mariadb-benchUpgrade mariadb104-galeraUpgrade mariadb104-test | Oct 26, 2022 | Apr 12, 2022 |
| Ubuntu | — | Upgrade mariadb-server | Nov 24, 2022 | Apr 12, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 12, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub