An issue in the component my_decimal::operator= of MariaDB Server v10.6.3 and below was discovered to allow attackers to cause a Denial of Service (DoS) via specially crafted SQL statements.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mariadb-oqgraph-engineUpgrade mariadb-commonUpgrade galeraUpgrade mariadb-backupUpgrade mariadb-embeddedUpgrade mariadb-testUpgrade mariadb-serverUpgrade mariadb-gssapi-serverUpgrade mariadb-server-galeraUpgrade mariadb-pamUpgrade JudyUpgrade mariadbUpgrade mariadb-errmsgUpgrade mariadb-server-utilsUpgrade mariadb-embedded-develUpgrade mariadb-devel | Aug 8, 2022 | Apr 12, 2022 |
| Alpine Linux | — | Upgrade mariadb | Mar 26, 2024 | Apr 12, 2022 |
| Amazon Linux Ami 2 | — | Upgrade mariadb-backupUpgrade mariadb-embeddedUpgrade mariadb-connect-engineUpgrade mariadb-serverUpgrade mariadb-errmsgUpgrade mariadb-server-galeraUpgrade mariadb-embedded-develUpgrade mariadb-rocksdb-engineUpgrade mariadb-benchUpgrade mariadb-develUpgrade mariadb-libsUpgrade mariadb-oqgraph-engineUpgrade mariadb-server-utilsUpgrade mariadbUpgrade mariadb-commonUpgrade mariadb-testUpgrade mariadb-debuginfoUpgrade mariadb-pamUpgrade mariadb-s3-engineUpgrade mariadb-configUpgrade mariadb-sphinx-engineUpgrade mariadb-gssapi-serverUpgrade mariadb-cracklib-password-check | Jun 6, 2023 | Apr 12, 2022 |
| Amazon_linux_2023 | — | Upgrade mariadb105-cracklib-password-checkUpgrade mariadb105-test-debuginfoUpgrade mariadb105-gssapi-server-debuginfoUpgrade mariadb105-errmsgUpgrade mariadb105-server-debuginfoUpgrade mariadb105-develUpgrade mariadb105-connect-engine-debuginfoUpgrade mariadb105-pam-debuginfoUpgrade mariadb105-server-utils-debuginfoUpgrade mariadb105-gssapi-serverUpgrade mariadb105-debuginfoUpgrade mariadb105-oqgraph-engineUpgrade mariadb105-backupUpgrade mariadb105Upgrade mariadb105-oqgraph-engine-debuginfoUpgrade mariadb105-server-utilsUpgrade mariadb105-sphinx-engineUpgrade mariadb105-testUpgrade mariadb105-rocksdb-engine-debuginfoUpgrade mariadb105-debugsourceUpgrade mariadb105-commonUpgrade mariadb105-connect-engineUpgrade mariadb105-sphinx-engine-debuginfoUpgrade mariadb105-backup-debuginfoUpgrade mariadb105-serverUpgrade mariadb105-rocksdb-engineUpgrade mariadb105-cracklib-password-check-debuginfoUpgrade mariadb105-pam | Feb 17, 2025 | Jun 23, 2021 |
| Centos_linux | — | Upgrade mariadb-backup-debuginfoUpgrade galera-debuginfoUpgrade Judy-debugsourceUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadbUpgrade mariadb-gssapi-serverUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-debugsourceUpgrade mariadb-pamUpgrade mariadb-debuginfoUpgrade mariadb-testUpgrade mariadb-embeddedUpgrade mariadb-pam-debuginfoUpgrade mariadb-embedded-debuginfoUpgrade mariadb-server-utils-debuginfoUpgrade galeraUpgrade mariadb-server-galeraUpgrade mariadb-commonUpgrade galera-debugsourceUpgrade mariadb-serverUpgrade mariadb-errmsgUpgrade mariadb-develUpgrade Judy-debuginfoUpgrade mariadb-oqgraph-engineUpgrade mariadb-test-debuginfoUpgrade mariadb-server-debuginfoUpgrade mariadb-backupUpgrade mysql-selinuxUpgrade mariadb-embedded-develUpgrade JudyUpgrade mariadb-server-utils | Aug 3, 2022 | Apr 12, 2022 |
| Debian | — | Upgrade mariadb-10.5 | Sep 19, 2022 | Apr 12, 2022 |
| Freebsd | — | Upgrade mariadb104-serverUpgrade mariadb106-serverUpgrade mariadb103-clientUpgrade mariadb103-serverUpgrade mariadb105-clientUpgrade mariadb106-clientUpgrade mariadb105-serverUpgrade mariadb104-client | Nov 4, 2022 | May 23, 2022 |
| Gentoo Linux | — | Upgrade dev-db/mariadb. | May 10, 2024 | Apr 12, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade mariadb-commonUpgrade mariadbUpgrade mariadb-devel | Aug 18, 2022 | Apr 12, 2022 |
| Mariadb Mariadb | — | Upgrade MariaDB to the latest version | Mar 4, 2025 | Apr 12, 2022 |
| Oracle_linux | — | Upgrade mariadbUpgrade galeraUpgrade mariadb-oqgraph-engineUpgrade mysql-selinuxUpgrade mariadb-backupUpgrade mariadb-embedded-develUpgrade mariadb-errmsgUpgrade JudyUpgrade mariadb-develUpgrade mariadb-server-utilsUpgrade mariadb-serverUpgrade mariadb-server-galeraUpgrade mariadb-commonUpgrade mariadb-gssapi-serverUpgrade mariadb-pamUpgrade mariadb-embeddedUpgrade mariadb-test | Aug 4, 2022 | Jun 23, 2021 |
| Redhat_linux | — | Upgrade mariadb-embedded-debuginfoUpgrade mariadb-backupUpgrade mariadb-errmsgUpgrade mariadb-oqgraph-engine-debuginfoUpgrade Judy-debugsourceUpgrade mariadb-commonUpgrade mariadb-pamUpgrade mariadb-gssapi-serverUpgrade galera-debuginfoUpgrade mariadbUpgrade JudyUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-testUpgrade mariadb-debugsourceUpgrade mariadb-pam-debuginfoUpgrade mariadb-serverUpgrade galeraUpgrade mariadb-test-debuginfoUpgrade mariadb-oqgraph-engineNo solution existsUpgrade Judy-debuginfoUpgrade mariadb-server-debuginfoUpgrade mariadb-backup-debuginfoUpgrade mariadb-embedded-develUpgrade mariadb-server-galeraUpgrade galera-debugsourceUpgrade mariadb-server-utilsUpgrade mysql-selinuxUpgrade mariadb-embeddedUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-debuginfoUpgrade mariadb-devel | Aug 3, 2022 | Apr 12, 2022 |
| Rocky_linux | — | Upgrade galera-debugsourceUpgrade galeraUpgrade Judy-debugsourceUpgrade galera-debuginfoUpgrade mariadb-pam-debuginfoUpgrade mariadb-server-galeraUpgrade mariadb-embedded-debuginfoUpgrade mariadb-serverUpgrade mariadb-backupUpgrade mariadb-commonUpgrade mariadb-oqgraph-engineUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-errmsgUpgrade mariadb-gssapi-server-debuginfoUpgrade Judy-debuginfoUpgrade JudyUpgrade mariadb-embedded-develUpgrade mariadb-testUpgrade mariadb-test-debuginfoUpgrade mariadb-embeddedUpgrade mariadb-backup-debuginfoUpgrade mariadb-server-debuginfoUpgrade mariadb-server-utilsUpgrade mariadb-debuginfoUpgrade mariadb-gssapi-serverUpgrade mariadbUpgrade mariadb-develUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-debugsourceUpgrade mariadb-pam | Mar 12, 2024 | Apr 12, 2022 |
| Suse | — | Upgrade mariadb-benchUpgrade mariadb-galeraUpgrade mariadb-clientUpgrade libmariadbd104-develUpgrade libmariadb3Upgrade libmariadb_pluginsUpgrade mariadb104-clientUpgrade libmysqld19Upgrade libmariadbd-develUpgrade mariadb104-rpm-macrosUpgrade libmysqld-develUpgrade mariadb104-testUpgrade mariadb104-galeraUpgrade python3-mysqlclientUpgrade libmariadbd19Upgrade mariadb104-toolsUpgrade mariadbUpgrade libmariadb-develUpgrade mariadb-testUpgrade mariadb-errormessagesUpgrade mariadb-toolsUpgrade mariadb-rpm-macrosUpgrade mariadb104-errormessagesUpgrade mariadb104-benchUpgrade mariadb104Upgrade liblz4-1 | Oct 26, 2022 | Apr 12, 2022 |
| Ubuntu | — | Upgrade mariadb-server | Nov 24, 2022 | Apr 12, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 12, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub