MariaDB Server v10.6 and below was discovered to contain an use-after-free in the component my_strcasecmp_8bit, which is exploited via specially crafted SQL statements.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mariadb-embedded-develUpgrade mariadb-embeddedUpgrade mariadb-server-utilsUpgrade mariadb-develUpgrade mariadb-pamUpgrade mariadb-server-galeraUpgrade mariadb-serverUpgrade mariadbUpgrade mariadb-testUpgrade mariadb-backupUpgrade mariadb-gssapi-serverUpgrade mariadb-errmsgUpgrade mariadb-commonUpgrade JudyUpgrade galeraUpgrade mariadb-oqgraph-engine | Aug 8, 2022 | Apr 12, 2022 |
| Alpine Linux | — | Upgrade mariadb | Mar 26, 2024 | Apr 12, 2022 |
| Amazon Linux Ami 2 | — | Upgrade mariadb-develUpgrade mariadb-pamUpgrade mariadb-server-utilsUpgrade mariadb-gssapi-serverUpgrade mariadb-testUpgrade mariadb-sphinx-engineUpgrade mariadb-cracklib-password-checkUpgrade mariadb-configUpgrade mariadb-libsUpgrade mariadb-errmsgUpgrade mariadb-server-galeraUpgrade mariadb-debuginfoUpgrade mariadb-serverUpgrade mariadb-rocksdb-engineUpgrade mariadb-embedded-develUpgrade mariadb-backupUpgrade mariadb-s3-engineUpgrade mariadb-embeddedUpgrade mariadb-commonUpgrade mariadbUpgrade mariadb-connect-engineUpgrade mariadb-oqgraph-engine | Sep 28, 2023 | Apr 12, 2022 |
| Amazon_linux_2023 | — | Upgrade mariadb105-test-debuginfoUpgrade mariadb105-backup-debuginfoUpgrade mariadb105-debuginfoUpgrade mariadb105-server-utils-debuginfoUpgrade mariadb105Upgrade mariadb105-rocksdb-engine-debuginfoUpgrade mariadb105-server-debuginfoUpgrade mariadb105-sphinx-engine-debuginfoUpgrade mariadb105-backupUpgrade mariadb105-pamUpgrade mariadb105-gssapi-server-debuginfoUpgrade mariadb105-oqgraph-engine-debuginfoUpgrade mariadb105-sphinx-engineUpgrade mariadb105-server-utilsUpgrade mariadb105-cracklib-password-check-debuginfoUpgrade mariadb105-debugsourceUpgrade mariadb105-oqgraph-engineUpgrade mariadb105-rocksdb-engineUpgrade mariadb105-errmsgUpgrade mariadb105-develUpgrade mariadb105-gssapi-serverUpgrade mariadb105-cracklib-password-checkUpgrade mariadb105-testUpgrade mariadb105-connect-engineUpgrade mariadb105-serverUpgrade mariadb105-pam-debuginfoUpgrade mariadb105-commonUpgrade mariadb105-connect-engine-debuginfo | Feb 17, 2025 | Aug 9, 2021 |
| Centos_linux | — | Upgrade mariadbUpgrade mariadb-backup-debuginfoUpgrade JudyUpgrade mariadb-embedded-develUpgrade mariadb-commonUpgrade mariadb-server-debuginfoUpgrade Judy-debugsourceUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-pamUpgrade galera-debuginfoUpgrade mariadb-server-utilsUpgrade mariadb-testUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-oqgraph-engineUpgrade mariadb-embeddedUpgrade mariadb-gssapi-serverUpgrade mariadb-backupUpgrade mariadb-develUpgrade mariadb-errmsgUpgrade mariadb-embedded-debuginfoUpgrade mariadb-test-debuginfoUpgrade mariadb-serverUpgrade mariadb-debuginfoUpgrade mysql-selinuxUpgrade mariadb-pam-debuginfoUpgrade galeraUpgrade mariadb-server-galeraUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-debugsourceUpgrade Judy-debuginfoUpgrade galera-debugsource | Aug 3, 2022 | Apr 12, 2022 |
| Debian | — | Upgrade mariadb-10.5 | Sep 19, 2022 | Apr 12, 2022 |
| Freebsd | — | Upgrade mariadb105-clientUpgrade mariadb104-clientUpgrade mariadb106-clientUpgrade mariadb103-serverUpgrade mariadb105-serverUpgrade mariadb103-clientUpgrade mariadb104-serverUpgrade mariadb106-server | Nov 4, 2022 | May 23, 2022 |
| Gentoo Linux | — | Upgrade dev-db/mariadb. | May 10, 2024 | Apr 12, 2022 |
| Huawei Euleros 2_0_sp3 | — | Upgrade mariadb-develUpgrade mariadb-libsUpgrade mariadb-serverUpgrade mariadb-benchUpgrade mariadb | Oct 28, 2022 | Apr 12, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade mariadbUpgrade mariadb-develUpgrade mariadb-serverUpgrade mariadb-benchUpgrade mariadb-libs | Aug 18, 2022 | Apr 12, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade mariadbUpgrade mariadb-develUpgrade mariadb-common | Aug 18, 2022 | Apr 12, 2022 |
| Mariadb Mariadb | — | Upgrade MariaDB to the latest version | Mar 4, 2025 | Apr 12, 2022 |
| Oracle_linux | — | Upgrade mariadb-develUpgrade mariadb-server-utilsUpgrade mariadb-server-galeraUpgrade mariadb-commonUpgrade mariadbUpgrade mariadb-errmsgUpgrade JudyUpgrade mariadb-pamUpgrade mariadb-embedded-develUpgrade mysql-selinuxUpgrade mariadb-oqgraph-engineUpgrade mariadb-embeddedUpgrade mariadb-gssapi-serverUpgrade mariadb-backupUpgrade mariadb-serverUpgrade mariadb-testUpgrade galera | Aug 4, 2022 | Aug 9, 2021 |
| Redhat_linux | — | Upgrade galera-debuginfoUpgrade mariadb-develUpgrade mariadb-test-debuginfoUpgrade mariadb-embedded-develNo solution existsUpgrade JudyUpgrade mariadb-backupUpgrade mariadb-commonUpgrade mariadb-embedded-debuginfoUpgrade Judy-debuginfoUpgrade Judy-debugsourceUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-gssapi-serverUpgrade galeraUpgrade mariadb-oqgraph-engineUpgrade mariadb-errmsgUpgrade mysql-selinuxUpgrade mariadb-debugsourceUpgrade mariadb-backup-debuginfoUpgrade mariadb-serverUpgrade mariadb-server-galeraUpgrade mariadb-server-debuginfoUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-pam | Aug 3, 2022 | Apr 12, 2022 |
| Rocky_linux | — | Upgrade mariadb-debuginfoUpgrade mariadb-pamUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-embeddedUpgrade mariadb-pam-debuginfoUpgrade mariadb-server-utilsUpgrade Judy-debugsourceUpgrade galera-debuginfoUpgrade Judy-debuginfoUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-debugsourceUpgrade mariadb-server-debuginfoUpgrade mariadb-testUpgrade galera-debugsourceUpgrade mariadb-gssapi-serverUpgrade mariadb-backup-debuginfoUpgrade mariadb-embedded-debuginfoUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-errmsgUpgrade JudyUpgrade mariadb-serverUpgrade mariadb-oqgraph-engineUpgrade mariadb-test-debuginfoUpgrade mariadb-develUpgrade mariadb-backupUpgrade mariadb-embedded-develUpgrade mariadb-server-galeraUpgrade mariadbUpgrade galeraUpgrade mariadb-common | Mar 12, 2024 | Apr 12, 2022 |
| Suse | — | Upgrade libmariadbd104-develUpgrade libmysqld-develUpgrade libmariadb_pluginsUpgrade libmysqld19Upgrade mariadb104-testUpgrade mariadb-benchUpgrade mariadb-rpm-macrosUpgrade mariadb104-galeraUpgrade libmariadbd-develUpgrade mariadb104-clientUpgrade mariadb-clientUpgrade mariadb-galeraUpgrade libmariadb3Upgrade liblz4-1Upgrade mariadb104-rpm-macrosUpgrade python3-mysqlclientUpgrade libmariadb-develUpgrade mariadb104-errormessagesUpgrade mariadb104Upgrade mariadb104-benchUpgrade mariadb-toolsUpgrade mariadb104-toolsUpgrade mariadb-testUpgrade libmariadbd19Upgrade mariadbUpgrade mariadb-errormessages | Oct 26, 2022 | Apr 12, 2022 |
| Ubuntu | — | Upgrade mariadb-server | Nov 24, 2022 | Apr 12, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 12, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub