An issue in the component Item_subselect::init_expr_cache_tracker of MariaDB Server v10.6 and below was discovered to allow attackers to cause a Denial of Service (DoS) via specially crafted SQL statements.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mariadb-errmsgUpgrade mariadbUpgrade mariadb-gssapi-serverUpgrade mariadb-pamUpgrade mariadb-testUpgrade mariadb-backupUpgrade mariadb-embeddedUpgrade mariadb-develUpgrade JudyUpgrade mariadb-embedded-develUpgrade galeraUpgrade mariadb-server-utilsUpgrade mariadb-server-galeraUpgrade mariadb-serverUpgrade mariadb-oqgraph-engineUpgrade mariadb-common | Aug 8, 2022 | Apr 12, 2022 |
| Alpine Linux | — | Upgrade mariadb | Mar 26, 2024 | Apr 12, 2022 |
| Amazon Linux Ami 2 | — | Upgrade mariadb-pamUpgrade mariadb-commonUpgrade mariadb-embedded-develUpgrade mariadbUpgrade mariadb-testUpgrade mariadb-sphinx-engineUpgrade mariadb-server-galeraUpgrade mariadb-server-utilsUpgrade mariadb-backupUpgrade mariadb-cracklib-password-checkUpgrade mariadb-gssapi-serverUpgrade mariadb-oqgraph-engineUpgrade mariadb-errmsgUpgrade mariadb-configUpgrade mariadb-serverUpgrade mariadb-embeddedUpgrade mariadb-libsUpgrade mariadb-develUpgrade mariadb-connect-engineUpgrade mariadb-s3-engineUpgrade mariadb-debuginfoUpgrade mariadb-rocksdb-engineUpgrade mariadb-bench | Jun 6, 2023 | Apr 12, 2022 |
| Amazon_linux_2023 | — | Upgrade mariadb105-oqgraph-engineUpgrade mariadb105-develUpgrade mariadb105-server-utils-debuginfoUpgrade mariadb105-serverUpgrade mariadb105-backup-debuginfoUpgrade mariadb105-debuginfoUpgrade mariadb105-rocksdb-engineUpgrade mariadb105-oqgraph-engine-debuginfoUpgrade mariadb105-errmsgUpgrade mariadb105-cracklib-password-check-debuginfoUpgrade mariadb105-test-debuginfoUpgrade mariadb105-debugsourceUpgrade mariadb105-server-debuginfoUpgrade mariadb105-backupUpgrade mariadb105-sphinx-engine-debuginfoUpgrade mariadb105-rocksdb-engine-debuginfoUpgrade mariadb105Upgrade mariadb105-server-utilsUpgrade mariadb105-commonUpgrade mariadb105-cracklib-password-checkUpgrade mariadb105-sphinx-engineUpgrade mariadb105-connect-engine-debuginfoUpgrade mariadb105-gssapi-serverUpgrade mariadb105-connect-engineUpgrade mariadb105-testUpgrade mariadb105-pam-debuginfoUpgrade mariadb105-pamUpgrade mariadb105-gssapi-server-debuginfo | Feb 17, 2025 | Jun 30, 2021 |
| Centos_linux | — | Upgrade mariadb-embedded-debuginfoUpgrade mysql-selinuxUpgrade mariadb-gssapi-serverUpgrade mariadb-serverUpgrade mariadb-server-utilsUpgrade mariadb-debuginfoUpgrade mariadb-server-debuginfoUpgrade galeraUpgrade mariadb-pam-debuginfoUpgrade mariadb-server-galeraUpgrade mariadb-oqgraph-engineUpgrade mariadb-server-utils-debuginfoUpgrade Judy-debuginfoUpgrade mariadb-backupUpgrade mariadb-develUpgrade mariadb-embedded-develUpgrade mariadb-errmsgUpgrade mariadb-test-debuginfoUpgrade mariadb-embeddedUpgrade galera-debugsourceUpgrade mariadb-testUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-pamUpgrade galera-debuginfoUpgrade JudyUpgrade mariadb-debugsourceUpgrade Judy-debugsourceUpgrade mariadbUpgrade mariadb-backup-debuginfoUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-common | Aug 3, 2022 | Apr 12, 2022 |
| Debian | — | Upgrade mariadb-10.5 | Sep 19, 2022 | Apr 12, 2022 |
| Freebsd | — | Upgrade mariadb106-clientUpgrade mariadb104-clientUpgrade mariadb104-serverUpgrade mariadb105-serverUpgrade mariadb103-clientUpgrade mariadb105-clientUpgrade mariadb103-serverUpgrade mariadb106-server | Nov 4, 2022 | May 23, 2022 |
| Gentoo Linux | — | Upgrade dev-db/mariadb. | May 10, 2024 | Apr 12, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade mariadbUpgrade mariadb-commonUpgrade mariadb-devel | Aug 18, 2022 | Apr 12, 2022 |
| Mariadb Mariadb | — | Upgrade MariaDB to the latest version | Mar 4, 2025 | Apr 12, 2022 |
| Oracle_linux | — | Upgrade mariadb-serverUpgrade mariadb-oqgraph-engineUpgrade mysql-selinuxUpgrade mariadb-server-galeraUpgrade mariadb-embeddedUpgrade mariadb-develUpgrade mariadb-embedded-develUpgrade mariadb-errmsgUpgrade mariadb-server-utilsUpgrade galeraUpgrade mariadb-gssapi-serverUpgrade mariadb-backupUpgrade mariadbUpgrade mariadb-pamUpgrade JudyUpgrade mariadb-testUpgrade mariadb-common | Aug 4, 2022 | Jun 30, 2021 |
| Redhat_linux | — | Upgrade mariadb-server-galeraNo solution existsUpgrade mariadb-gssapi-server-debuginfoUpgrade galera-debuginfoUpgrade mariadb-server-debuginfoUpgrade mariadb-backupUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mysql-selinuxUpgrade mariadb-oqgraph-engineUpgrade galera-debugsourceUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-commonUpgrade mariadb-test-debuginfoUpgrade JudyUpgrade mariadb-serverUpgrade mariadb-develUpgrade mariadb-embedded-develUpgrade galeraUpgrade mariadb-debugsourceUpgrade mariadb-pamUpgrade mariadb-gssapi-serverUpgrade Judy-debugsourceUpgrade mariadb-server-utilsUpgrade mariadb-embeddedUpgrade mariadb-testUpgrade mariadb-pam-debuginfoUpgrade mariadb-errmsgUpgrade Judy-debuginfoUpgrade mariadb-debuginfoUpgrade mariadbUpgrade mariadb-backup-debuginfoUpgrade mariadb-embedded-debuginfo | Aug 3, 2022 | Apr 12, 2022 |
| Rocky_linux | — | Upgrade mariadb-server-galeraUpgrade galera-debugsourceUpgrade mariadb-server-debuginfoUpgrade mariadb-debuginfoUpgrade mariadb-develUpgrade mariadb-test-debuginfoUpgrade mariadb-pam-debuginfoUpgrade Judy-debuginfoUpgrade mariadb-gssapi-serverUpgrade galeraUpgrade mariadb-errmsgUpgrade mariadb-server-utilsUpgrade mariadb-embeddedUpgrade mariadb-serverUpgrade mariadb-embedded-develUpgrade mariadbUpgrade mariadb-backupUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-embedded-debuginfoUpgrade mariadb-oqgraph-engineUpgrade mariadb-testUpgrade mariadb-gssapi-server-debuginfoUpgrade galera-debuginfoUpgrade Judy-debugsourceUpgrade mariadb-backup-debuginfoUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-commonUpgrade mariadb-debugsourceUpgrade mariadb-pamUpgrade Judy | Mar 12, 2024 | Apr 12, 2022 |
| Suse | — | Upgrade mariadb-galeraUpgrade mariadb104-testUpgrade mariadb-errormessagesUpgrade libmysqld-develUpgrade libmariadbd104-develUpgrade liblz4-1Upgrade mariadb104-toolsUpgrade mariadb104-clientUpgrade mariadb-rpm-macrosUpgrade mariadb104-errormessagesUpgrade python3-mysqlclientUpgrade libmysqld19Upgrade mariadb-testUpgrade libmariadbd19Upgrade mariadb104Upgrade libmariadbd-develUpgrade libmariadb-develUpgrade mariadb104-galeraUpgrade mariadb-toolsUpgrade mariadbUpgrade libmariadb_pluginsUpgrade mariadb104-rpm-macrosUpgrade mariadb-benchUpgrade mariadb-clientUpgrade mariadb104-benchUpgrade libmariadb3 | Oct 26, 2022 | Apr 12, 2022 |
| Ubuntu | — | Upgrade mariadb-server | Nov 24, 2022 | Apr 12, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 12, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub