MariaDB Server v10.6 and below was discovered to contain an use-after-free in the component my_strcasecmp_8bit, which is exploited via specially crafted SQL statements.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade JudyUpgrade mariadb-serverUpgrade mariadb-testUpgrade mariadb-oqgraph-engineUpgrade mariadbUpgrade galeraUpgrade mariadb-commonUpgrade mariadb-gssapi-serverUpgrade mariadb-errmsgUpgrade mariadb-backupUpgrade mariadb-embeddedUpgrade mariadb-server-utilsUpgrade mariadb-server-galeraUpgrade mariadb-develUpgrade mariadb-pamUpgrade mariadb-embedded-devel | Aug 8, 2022 | Apr 12, 2022 |
| Alpine Linux | — | Upgrade mariadb | Mar 26, 2024 | Apr 12, 2022 |
| Amazon Linux Ami 2 | — | Upgrade mariadb-server-utilsUpgrade mariadb-testUpgrade mariadb-gssapi-serverUpgrade mariadb-cracklib-password-checkUpgrade mariadb-configUpgrade mariadb-develUpgrade mariadb-sphinx-engineUpgrade mariadb-pamUpgrade mariadb-rocksdb-engineUpgrade mariadb-connect-engineUpgrade mariadb-serverUpgrade mariadb-s3-engineUpgrade mariadb-backupUpgrade mariadb-oqgraph-engineUpgrade mariadb-embedded-develUpgrade mariadb-errmsgUpgrade mariadb-debuginfoUpgrade mariadb-libsUpgrade mariadb-server-galeraUpgrade mariadb-commonUpgrade mariadb-embeddedUpgrade mariadb | Sep 28, 2023 | Apr 12, 2022 |
| Amazon_linux_2023 | — | Upgrade mariadb105-oqgraph-engine-debuginfoUpgrade mariadb105-gssapi-server-debuginfoUpgrade mariadb105Upgrade mariadb105-pamUpgrade mariadb105-sphinx-engine-debuginfoUpgrade mariadb105-debugsourceUpgrade mariadb105-backupUpgrade mariadb105-server-utilsUpgrade mariadb105-server-utils-debuginfoUpgrade mariadb105-rocksdb-engine-debuginfoUpgrade mariadb105-server-debuginfoUpgrade mariadb105-errmsgUpgrade mariadb105-sphinx-engineUpgrade mariadb105-debuginfoUpgrade mariadb105-cracklib-password-check-debuginfoUpgrade mariadb105-test-debuginfoUpgrade mariadb105-backup-debuginfoUpgrade mariadb105-oqgraph-engineUpgrade mariadb105-rocksdb-engineUpgrade mariadb105-commonUpgrade mariadb105-serverUpgrade mariadb105-connect-engineUpgrade mariadb105-gssapi-serverUpgrade mariadb105-testUpgrade mariadb105-connect-engine-debuginfoUpgrade mariadb105-pam-debuginfoUpgrade mariadb105-develUpgrade mariadb105-cracklib-password-check | Feb 17, 2025 | Aug 9, 2021 |
| Centos_linux | — | Upgrade mariadb-testUpgrade mariadb-embedded-develUpgrade mariadbUpgrade Judy-debugsourceUpgrade galera-debuginfoUpgrade mariadb-server-debuginfoUpgrade mariadb-pamUpgrade mariadb-server-utilsUpgrade mariadb-oqgraph-engine-debuginfoUpgrade JudyUpgrade mariadb-backup-debuginfoUpgrade mariadb-commonUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-develUpgrade mariadb-server-galeraUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-debugsourceUpgrade mariadb-embedded-debuginfoUpgrade mariadb-debuginfoUpgrade mariadb-oqgraph-engineUpgrade galera-debugsourceUpgrade mariadb-serverUpgrade mysql-selinuxUpgrade mariadb-test-debuginfoUpgrade mariadb-embeddedUpgrade Judy-debuginfoUpgrade mariadb-gssapi-serverUpgrade mariadb-backupUpgrade mariadb-errmsgUpgrade mariadb-pam-debuginfoUpgrade galera | Aug 3, 2022 | Apr 12, 2022 |
| Debian | — | Upgrade mariadb-10.5 | Sep 19, 2022 | Apr 12, 2022 |
| Freebsd | — | Upgrade mariadb104-serverUpgrade mariadb103-clientUpgrade mariadb105-serverUpgrade mariadb106-serverUpgrade mariadb106-clientUpgrade mariadb103-serverUpgrade mariadb105-clientUpgrade mariadb104-client | Nov 4, 2022 | May 23, 2022 |
| Gentoo Linux | — | Upgrade dev-db/mariadb. | May 10, 2024 | Apr 12, 2022 |
| Huawei Euleros 2_0_sp3 | — | Upgrade mariadb-develUpgrade mariadb-serverUpgrade mariadb-libsUpgrade mariadbUpgrade mariadb-bench | Oct 28, 2022 | Apr 12, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade mariadb-libsUpgrade mariadb-serverUpgrade mariadb-develUpgrade mariadbUpgrade mariadb-bench | Aug 18, 2022 | Apr 12, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade mariadbUpgrade mariadb-commonUpgrade mariadb-devel | Aug 18, 2022 | Apr 12, 2022 |
| Mariadb Mariadb | — | Upgrade MariaDB to the latest version | Mar 4, 2025 | Apr 12, 2022 |
| Oracle_linux | — | Upgrade mariadb-errmsgUpgrade mariadb-pamUpgrade mariadb-commonUpgrade mariadb-embedded-develUpgrade JudyUpgrade mariadbUpgrade mariadb-develUpgrade mariadb-server-galeraUpgrade mariadb-server-utilsUpgrade mariadb-oqgraph-engineUpgrade mariadb-testUpgrade mariadb-backupUpgrade mariadb-gssapi-serverUpgrade mysql-selinuxUpgrade galeraUpgrade mariadb-serverUpgrade mariadb-embedded | Aug 4, 2022 | Aug 9, 2021 |
| Redhat_linux | — | Upgrade mariadb-server-utilsUpgrade mariadb-errmsgUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-debuginfoUpgrade mariadbUpgrade Judy-debuginfoUpgrade mariadb-server-utils-debuginfoUpgrade galeraUpgrade mariadb-gssapi-serverUpgrade Judy-debugsourceUpgrade mariadb-oqgraph-engineUpgrade mariadb-debugsourceUpgrade mariadb-embedded-debuginfoUpgrade mariadb-serverUpgrade mysql-selinuxUpgrade mariadb-embeddedUpgrade mariadb-backup-debuginfoUpgrade galera-debugsourceUpgrade mariadb-pam-debuginfoUpgrade mariadb-testUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-server-galeraUpgrade mariadb-commonUpgrade mariadb-pamUpgrade galera-debuginfoUpgrade mariadb-server-debuginfoUpgrade mariadb-test-debuginfoUpgrade mariadb-embedded-develUpgrade mariadb-develUpgrade mariadb-backupUpgrade JudyNo solution exists | Aug 3, 2022 | Apr 12, 2022 |
| Rocky_linux | — | Upgrade mariadb-server-utilsUpgrade Judy-debugsourceUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-pamUpgrade mariadb-pam-debuginfoUpgrade mariadb-debuginfoUpgrade mariadb-server-debuginfoUpgrade mariadb-embeddedUpgrade mariadb-backup-debuginfoUpgrade mariadb-debugsourceUpgrade galera-debuginfoUpgrade Judy-debuginfoUpgrade mariadb-testUpgrade galera-debugsourceUpgrade mariadb-gssapi-serverUpgrade mariadb-oqgraph-engine-debuginfoUpgrade galeraUpgrade mariadb-test-debuginfoUpgrade mariadb-backupUpgrade mariadb-develUpgrade mariadb-server-utils-debuginfoUpgrade JudyUpgrade mariadb-server-galeraUpgrade mariadb-commonUpgrade mariadb-errmsgUpgrade mariadbUpgrade mariadb-embedded-debuginfoUpgrade mariadb-embedded-develUpgrade mariadb-serverUpgrade mariadb-oqgraph-engine | Mar 12, 2024 | Apr 12, 2022 |
| Suse | — | Upgrade mariadb104-errormessagesUpgrade mariadb104Upgrade mariadb104-toolsUpgrade mariadb-errormessagesUpgrade mariadbUpgrade libmariadbd19Upgrade mariadb-toolsUpgrade mariadb-testUpgrade mariadb104-benchUpgrade python3-mysqlclientUpgrade liblz4-1Upgrade mariadb104-rpm-macrosUpgrade libmariadb-develUpgrade libmariadbd104-develUpgrade mariadb104-clientUpgrade mariadb-rpm-macrosUpgrade mariadb-benchUpgrade libmysqld19Upgrade libmariadb_pluginsUpgrade libmysqld-develUpgrade mariadb-clientUpgrade mariadb104-galeraUpgrade libmariadbd-develUpgrade libmariadb3Upgrade mariadb104-testUpgrade mariadb-galera | Oct 26, 2022 | Apr 12, 2022 |
| Ubuntu | — | Upgrade mariadb-server | Nov 24, 2022 | Apr 12, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 12, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub