An issue in the component Arg_comparator::compare_real_fixed of MariaDB Server v10.6.2 and below was discovered to allow attackers to cause a Denial of Service (DoS) via specially crafted SQL statements.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mariadb-oqgraph-engineUpgrade mariadb-embeddedUpgrade mariadb-embedded-develUpgrade mariadbUpgrade mariadb-errmsgUpgrade galeraUpgrade mariadb-gssapi-serverUpgrade mariadb-server-utilsUpgrade mariadb-backupUpgrade JudyUpgrade mariadb-server-galeraUpgrade mariadb-serverUpgrade mariadb-testUpgrade mariadb-pamUpgrade mariadb-develUpgrade mariadb-common | Aug 8, 2022 | Apr 12, 2022 |
| Alpine Linux | — | Upgrade mariadb | Mar 26, 2024 | Apr 12, 2022 |
| Amazon Linux Ami 2 | — | Upgrade mariadb-sphinx-engineUpgrade mariadb-testUpgrade mariadb-server-utilsUpgrade mariadb-configUpgrade mariadb-develUpgrade mariadb-cracklib-password-checkUpgrade mariadb-s3-engineUpgrade mariadb-pamUpgrade mariadb-oqgraph-engineUpgrade mariadb-embedded-develUpgrade mariadb-gssapi-serverUpgrade mariadb-server-galeraUpgrade mariadb-debuginfoUpgrade mariadb-serverUpgrade mariadb-connect-engineUpgrade mariadbUpgrade mariadb-rocksdb-engineUpgrade mariadb-libsUpgrade mariadb-errmsgUpgrade mariadb-backupUpgrade mariadb-embeddedUpgrade mariadb-common | Sep 28, 2023 | Apr 12, 2022 |
| Amazon_linux_2023 | — | Upgrade mariadb105-testUpgrade mariadb105-develUpgrade mariadb105-gssapi-serverUpgrade mariadb105-pam-debuginfoUpgrade mariadb105-connect-engine-debuginfoUpgrade mariadb105-rocksdb-engineUpgrade mariadb105-cracklib-password-checkUpgrade mariadb105-test-debuginfoUpgrade mariadb105-sphinx-engine-debuginfoUpgrade mariadb105-commonUpgrade mariadb105-server-debuginfoUpgrade mariadb105-backupUpgrade mariadb105-server-utils-debuginfoUpgrade mariadb105-oqgraph-engineUpgrade mariadb105Upgrade mariadb105-oqgraph-engine-debuginfoUpgrade mariadb105-sphinx-engineUpgrade mariadb105-pamUpgrade mariadb105-serverUpgrade mariadb105-debuginfoUpgrade mariadb105-debugsourceUpgrade mariadb105-server-utilsUpgrade mariadb105-errmsgUpgrade mariadb105-backup-debuginfoUpgrade mariadb105-rocksdb-engine-debuginfoUpgrade mariadb105-cracklib-password-check-debuginfoUpgrade mariadb105-gssapi-server-debuginfoUpgrade mariadb105-connect-engine | Feb 17, 2025 | Aug 13, 2021 |
| Centos_linux | — | Upgrade mariadb-pam-debuginfoUpgrade mariadb-develUpgrade galeraUpgrade mariadb-embeddedUpgrade mariadb-oqgraph-engineUpgrade mariadb-server-utils-debuginfoUpgrade galera-debugsourceUpgrade mariadb-backup-debuginfoUpgrade mariadb-embedded-develUpgrade mariadb-debuginfoUpgrade mariadb-server-galeraUpgrade mariadb-test-debuginfoUpgrade mariadb-server-debuginfoUpgrade mysql-selinuxUpgrade mariadb-server-utilsUpgrade Judy-debuginfoUpgrade mariadb-gssapi-serverUpgrade mariadb-testUpgrade mariadb-backupUpgrade mariadb-oqgraph-engine-debuginfoUpgrade JudyUpgrade mariadbUpgrade galera-debuginfoUpgrade mariadb-pamUpgrade Judy-debugsourceUpgrade mariadb-commonUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-debugsourceUpgrade mariadb-errmsgUpgrade mariadb-serverUpgrade mariadb-embedded-debuginfo | Aug 3, 2022 | Apr 12, 2022 |
| Debian | — | Upgrade mariadb-10.5 | Sep 19, 2022 | Apr 12, 2022 |
| Freebsd | — | Upgrade mariadb104-serverUpgrade mariadb106-serverUpgrade mariadb103-clientUpgrade mariadb103-serverUpgrade mariadb104-clientUpgrade mariadb106-clientUpgrade mariadb105-serverUpgrade mariadb105-client | Nov 4, 2022 | May 23, 2022 |
| Gentoo Linux | — | Upgrade dev-db/mariadb. | May 10, 2024 | Apr 12, 2022 |
| Mariadb Mariadb | — | Upgrade MariaDB to the latest version | Mar 4, 2025 | Apr 12, 2022 |
| Oracle_linux | — | Upgrade mariadb-commonUpgrade JudyUpgrade mariadb-testUpgrade mariadb-pamUpgrade mariadbUpgrade mariadb-server-galeraUpgrade mariadb-errmsgUpgrade mysql-selinuxUpgrade galeraUpgrade mariadb-gssapi-serverUpgrade mariadb-embeddedUpgrade mariadb-backupUpgrade mariadb-oqgraph-engineUpgrade mariadb-develUpgrade mariadb-serverUpgrade mariadb-embedded-develUpgrade mariadb-server-utils | Aug 4, 2022 | Aug 13, 2021 |
| Redhat_linux | — | Upgrade mariadb-server-utils-debuginfoUpgrade mariadb-develUpgrade JudyUpgrade Judy-debuginfoUpgrade mariadb-pamUpgrade mariadb-test-debuginfoUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-server-debuginfoUpgrade mariadb-server-utilsNo solution existsUpgrade mariadb-embeddedUpgrade mariadb-backup-debuginfoUpgrade mariadb-embedded-develUpgrade mariadb-serverUpgrade galeraUpgrade Judy-debugsourceUpgrade mariadb-testUpgrade mariadb-server-galeraUpgrade mariadbUpgrade mariadb-errmsgUpgrade mariadb-commonUpgrade mysql-selinuxUpgrade galera-debugsourceUpgrade mariadb-embedded-debuginfoUpgrade mariadb-gssapi-serverUpgrade mariadb-debuginfoUpgrade mariadb-debugsourceUpgrade mariadb-backupUpgrade mariadb-pam-debuginfoUpgrade mariadb-oqgraph-engine-debuginfoUpgrade galera-debuginfoUpgrade mariadb-oqgraph-engine | Aug 3, 2022 | Apr 12, 2022 |
| Rocky_linux | — | Upgrade mariadb-embedded-debuginfoUpgrade galera-debugsourceUpgrade JudyUpgrade mariadb-serverUpgrade galera-debuginfoUpgrade mariadb-gssapi-server-debuginfoUpgrade Judy-debugsourceUpgrade mariadb-debuginfoUpgrade mariadbUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-pamUpgrade mariadb-gssapi-serverUpgrade mariadb-errmsgUpgrade mariadb-commonUpgrade mariadb-backupUpgrade mariadb-debugsourceUpgrade mariadb-testUpgrade mariadb-server-utilsUpgrade Judy-debuginfoUpgrade mariadb-embeddedUpgrade mariadb-server-galeraUpgrade mariadb-develUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-pam-debuginfoUpgrade mariadb-oqgraph-engineUpgrade mariadb-embedded-develUpgrade mariadb-test-debuginfoUpgrade galeraUpgrade mariadb-server-debuginfoUpgrade mariadb-backup-debuginfo | Mar 12, 2024 | Apr 12, 2022 |
| Suse | — | Upgrade libmariadb_pluginsUpgrade mariadb-errormessagesUpgrade mariadb-benchUpgrade mariadb104-testUpgrade libmariadbd104-develUpgrade mariadb104-galeraUpgrade python3-mysqlclientUpgrade libmariadbd-develUpgrade mariadbUpgrade libmariadb3Upgrade mariadb104-rpm-macrosUpgrade mariadb-clientUpgrade mariadb104Upgrade mariadb104-toolsUpgrade mariadb-toolsUpgrade mariadb-galeraUpgrade liblz4-1Upgrade mariadb104-benchUpgrade mariadb104-clientUpgrade mariadb-rpm-macrosUpgrade mariadb-testUpgrade libmariadb-develUpgrade libmariadbd19Upgrade mariadb104-errormessages | Oct 26, 2022 | Apr 12, 2022 |
| Ubuntu | — | Upgrade mariadb-server | Nov 24, 2022 | Apr 12, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 12, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub