MariaDB Server v10.6 and below was discovered to contain an use-after-free in the component my_strcasecmp_8bit, which is exploited via specially crafted SQL statements.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mariadb-pamUpgrade mariadb-embeddedUpgrade mariadb-server-galeraUpgrade mariadb-embedded-develUpgrade mariadb-develUpgrade mariadb-server-utilsUpgrade mariadbUpgrade mariadb-oqgraph-engineUpgrade mariadb-serverUpgrade mariadb-testUpgrade galeraUpgrade mariadb-commonUpgrade mariadb-backupUpgrade mariadb-errmsgUpgrade mariadb-gssapi-serverUpgrade Judy | Aug 8, 2022 | Apr 12, 2022 |
| Alpine Linux | — | Upgrade mariadb | Mar 26, 2024 | Apr 12, 2022 |
| Amazon Linux Ami 2 | — | Upgrade mariadb-connect-engineUpgrade mariadb-commonUpgrade mariadbUpgrade mariadb-errmsgUpgrade mariadb-libsUpgrade mariadb-oqgraph-engineUpgrade mariadb-server-galeraUpgrade mariadb-serverUpgrade mariadb-embeddedUpgrade mariadb-debuginfoUpgrade mariadb-rocksdb-engineUpgrade mariadb-embedded-develUpgrade mariadb-backupUpgrade mariadb-s3-engineUpgrade mariadb-develUpgrade mariadb-configUpgrade mariadb-gssapi-serverUpgrade mariadb-testUpgrade mariadb-server-utilsUpgrade mariadb-pamUpgrade mariadb-sphinx-engineUpgrade mariadb-cracklib-password-check | Sep 28, 2023 | Apr 12, 2022 |
| Amazon_linux_2023 | — | Upgrade mariadb105-oqgraph-engine-debuginfoUpgrade mariadb105-sphinx-engine-debuginfoUpgrade mariadb105-backupUpgrade mariadb105-pamUpgrade mariadb105-server-debuginfoUpgrade mariadb105-oqgraph-engineUpgrade mariadb105-gssapi-server-debuginfoUpgrade mariadb105-rocksdb-engineUpgrade mariadb105-rocksdb-engine-debuginfoUpgrade mariadb105-errmsgUpgrade mariadb105-debugsourceUpgrade mariadb105-sphinx-engineUpgrade mariadb105-cracklib-password-check-debuginfoUpgrade mariadb105-server-utils-debuginfoUpgrade mariadb105-server-utilsUpgrade mariadb105-test-debuginfoUpgrade mariadb105Upgrade mariadb105-backup-debuginfoUpgrade mariadb105-debuginfoUpgrade mariadb105-cracklib-password-checkUpgrade mariadb105-connect-engine-debuginfoUpgrade mariadb105-commonUpgrade mariadb105-pam-debuginfoUpgrade mariadb105-serverUpgrade mariadb105-testUpgrade mariadb105-gssapi-serverUpgrade mariadb105-develUpgrade mariadb105-connect-engine | Feb 17, 2025 | Aug 9, 2021 |
| Centos_linux | — | Upgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-server-galeraUpgrade mariadb-embedded-debuginfoUpgrade mariadb-test-debuginfoUpgrade mariadb-backupUpgrade mariadb-serverUpgrade mariadb-gssapi-serverUpgrade mariadb-oqgraph-engineUpgrade Judy-debuginfoUpgrade mariadb-debugsourceUpgrade galeraUpgrade mariadb-debuginfoUpgrade mariadb-embeddedUpgrade mariadb-pam-debuginfoUpgrade mariadb-errmsgUpgrade mariadb-develUpgrade mariadb-server-utils-debuginfoUpgrade galera-debugsourceUpgrade mysql-selinuxUpgrade mariadb-testUpgrade mariadbUpgrade mariadb-embedded-develUpgrade galera-debuginfoUpgrade JudyUpgrade mariadb-backup-debuginfoUpgrade mariadb-commonUpgrade mariadb-server-utilsUpgrade mariadb-server-debuginfoUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-pamUpgrade Judy-debugsource | Aug 3, 2022 | Apr 12, 2022 |
| Debian | — | Upgrade mariadb-10.5 | Sep 19, 2022 | Apr 12, 2022 |
| Freebsd | — | Upgrade mariadb105-clientUpgrade mariadb106-clientUpgrade mariadb104-clientUpgrade mariadb103-serverUpgrade mariadb103-clientUpgrade mariadb105-serverUpgrade mariadb106-serverUpgrade mariadb104-server | Nov 4, 2022 | May 23, 2022 |
| Gentoo Linux | — | Upgrade dev-db/mariadb. | May 10, 2024 | Apr 12, 2022 |
| Huawei Euleros 2_0_sp3 | — | Upgrade mariadbUpgrade mariadb-benchUpgrade mariadb-develUpgrade mariadb-libsUpgrade mariadb-server | Oct 28, 2022 | Apr 12, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade mariadbUpgrade mariadb-serverUpgrade mariadb-libsUpgrade mariadb-develUpgrade mariadb-bench | Aug 18, 2022 | Apr 12, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade mariadb-commonUpgrade mariadb-develUpgrade mariadb | Aug 18, 2022 | Apr 12, 2022 |
| Mariadb Mariadb | — | Upgrade MariaDB to the latest version | Mar 4, 2025 | Apr 12, 2022 |
| Oracle_linux | — | Upgrade mysql-selinuxUpgrade mariadb-gssapi-serverUpgrade mariadb-embeddedUpgrade mariadb-serverUpgrade mariadb-oqgraph-engineUpgrade mariadb-testUpgrade mariadb-backupUpgrade galeraUpgrade mariadbUpgrade mariadb-errmsgUpgrade mariadb-develUpgrade mariadb-server-utilsUpgrade mariadb-server-galeraUpgrade mariadb-embedded-develUpgrade mariadb-commonUpgrade mariadb-pamUpgrade Judy | Aug 4, 2022 | Aug 9, 2021 |
| Redhat_linux | — | Upgrade galeraUpgrade mariadb-errmsgUpgrade mariadb-embedded-debuginfoUpgrade mariadb-pam-debuginfoUpgrade mariadb-testUpgrade Judy-debuginfoUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-oqgraph-engineUpgrade mysql-selinuxUpgrade mariadb-debuginfoUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-gssapi-serverUpgrade mariadb-debugsourceUpgrade Judy-debugsourceUpgrade mariadb-server-utilsUpgrade mariadb-embeddedUpgrade mariadb-backup-debuginfoUpgrade mariadb-serverUpgrade mariadbUpgrade galera-debugsourceUpgrade mariadb-embedded-develUpgrade mariadb-oqgraph-engine-debuginfoNo solution existsUpgrade mariadb-develUpgrade galera-debuginfoUpgrade mariadb-commonUpgrade mariadb-pamUpgrade mariadb-backupUpgrade JudyUpgrade mariadb-server-galeraUpgrade mariadb-server-debuginfoUpgrade mariadb-test-debuginfo | Aug 3, 2022 | Apr 12, 2022 |
| Rocky_linux | — | Upgrade mariadb-server-debuginfoUpgrade mariadb-pamUpgrade mariadb-pam-debuginfoUpgrade mariadb-debuginfoUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-testUpgrade galera-debugsourceUpgrade mariadb-backup-debuginfoUpgrade mariadb-server-utilsUpgrade Judy-debugsourceUpgrade mariadb-gssapi-serverUpgrade mariadb-embeddedUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-debugsourceUpgrade galera-debuginfoUpgrade Judy-debuginfoUpgrade mariadb-backupUpgrade mariadb-errmsgUpgrade mariadb-serverUpgrade mariadb-embedded-debuginfoUpgrade mariadb-commonUpgrade mariadb-embedded-develUpgrade JudyUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-server-galeraUpgrade mariadbUpgrade galeraUpgrade mariadb-develUpgrade mariadb-test-debuginfoUpgrade mariadb-oqgraph-engine | Mar 12, 2024 | Apr 12, 2022 |
| Suse | — | Upgrade libmariadb-develUpgrade mariadb-testUpgrade libmariadbd19Upgrade mariadb104-rpm-macrosUpgrade python3-mysqlclientUpgrade mariadb104-errormessagesUpgrade mariadb-errormessagesUpgrade mariadbUpgrade mariadb-toolsUpgrade mariadb104Upgrade liblz4-1Upgrade mariadb104-toolsUpgrade mariadb104-benchUpgrade mariadb104-clientUpgrade mariadb-galeraUpgrade mariadb-rpm-macrosUpgrade libmariadbd-develUpgrade mariadb104-galeraUpgrade libmysqld19Upgrade mariadb-benchUpgrade libmysqld-develUpgrade libmariadb3Upgrade mariadb104-testUpgrade libmariadbd104-develUpgrade libmariadb_pluginsUpgrade mariadb-client | Oct 26, 2022 | Apr 12, 2022 |
| Ubuntu | — | Upgrade mariadb-server | Nov 24, 2022 | Apr 12, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 12, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub