MariaDB Server v10.7 and below was discovered to contain a global buffer overflow in the component decimal_bin_size, which is exploited via specially crafted SQL statements.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mariadb-embedded-develUpgrade mariadb-server-galeraUpgrade mariadb-backupUpgrade galeraUpgrade mariadb-develUpgrade mariadb-serverUpgrade JudyUpgrade mariadb-commonUpgrade mariadb-server-utilsUpgrade mariadbUpgrade mariadb-embeddedUpgrade mariadb-gssapi-serverUpgrade mariadb-errmsgUpgrade mariadb-oqgraph-engineUpgrade mariadb-pamUpgrade mariadb-test | Aug 8, 2022 | Apr 12, 2022 |
| Alpine Linux | — | Upgrade mariadb | Mar 26, 2024 | Apr 12, 2022 |
| Amazon Linux Ami 2 | — | Upgrade mariadb-embeddedUpgrade mariadb-libsUpgrade mariadb-debuginfoUpgrade mariadb-s3-engineUpgrade mariadb-oqgraph-engineUpgrade mariadb-serverUpgrade mariadb-backupUpgrade mariadb-configUpgrade mariadb-cracklib-password-checkUpgrade mariadb-gssapi-serverUpgrade mariadbUpgrade mariadb-server-utilsUpgrade mariadb-server-galeraUpgrade mariadb-embedded-develUpgrade mariadb-pamUpgrade mariadb-sphinx-engineUpgrade mariadb-develUpgrade mariadb-testUpgrade mariadb-rocksdb-engineUpgrade mariadb-commonUpgrade mariadb-errmsgUpgrade mariadb-connect-engine | Sep 28, 2023 | Apr 12, 2022 |
| Amazon_linux_2023 | — | Upgrade mariadb105-server-utilsUpgrade mariadb105-sphinx-engineUpgrade mariadb105-rocksdb-engine-debuginfoUpgrade mariadb105-debugsourceUpgrade mariadb105-rocksdb-engineUpgrade mariadb105-sphinx-engine-debuginfoUpgrade mariadb105-cracklib-password-check-debuginfoUpgrade mariadb105-serverUpgrade mariadb105-pamUpgrade mariadb105-connect-engine-debuginfoUpgrade mariadb105-debuginfoUpgrade mariadb105-connect-engineUpgrade mariadb105-develUpgrade mariadb105-test-debuginfoUpgrade mariadb105-backup-debuginfoUpgrade mariadb105-server-utils-debuginfoUpgrade mariadb105-gssapi-server-debuginfoUpgrade mariadb105-server-debuginfoUpgrade mariadb105-oqgraph-engineUpgrade mariadb105-testUpgrade mariadb105-pam-debuginfoUpgrade mariadb105-oqgraph-engine-debuginfoUpgrade mariadb105-gssapi-serverUpgrade mariadb105-errmsgUpgrade mariadb105-backupUpgrade mariadb105-cracklib-password-checkUpgrade mariadb105Upgrade mariadb105-common | Feb 17, 2025 | Apr 1, 2021 |
| Centos_linux | — | Upgrade mariadb-debuginfoUpgrade mariadb-pamUpgrade mariadb-backup-debuginfoUpgrade mariadb-gssapi-serverUpgrade mariadb-gssapi-server-debuginfoUpgrade galera-debuginfoUpgrade mariadb-debugsourceUpgrade mariadb-oqgraph-engine-debuginfoUpgrade Judy-debugsourceUpgrade mariadb-testUpgrade mariadb-server-debuginfoUpgrade mariadb-embedded-develUpgrade mariadb-embedded-debuginfoUpgrade galera-debugsourceUpgrade mariadbUpgrade Judy-debuginfoUpgrade mariadb-backupUpgrade mariadb-serverUpgrade mariadb-test-debuginfoUpgrade galeraUpgrade mariadb-commonUpgrade mysql-selinuxUpgrade mariadb-pam-debuginfoUpgrade mariadb-server-utilsUpgrade mariadb-errmsgUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-server-galeraUpgrade JudyUpgrade mariadb-oqgraph-engineUpgrade mariadb-embeddedUpgrade mariadb-devel | Aug 3, 2022 | Apr 12, 2022 |
| Debian | — | Upgrade mariadb-10.5 | Sep 19, 2022 | Apr 12, 2022 |
| Freebsd | — | Upgrade mariadb104-serverUpgrade mariadb103-clientUpgrade mariadb105-clientUpgrade mariadb106-clientUpgrade mariadb103-serverUpgrade mariadb104-clientUpgrade mariadb105-serverUpgrade mariadb106-server | Nov 4, 2022 | May 23, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade mariadbUpgrade mariadb-develUpgrade mariadb-common | Aug 18, 2022 | Apr 12, 2022 |
| Mariadb Mariadb | — | Upgrade MariaDB to the latest version | Mar 4, 2025 | Apr 12, 2022 |
| Oracle_linux | — | Upgrade JudyUpgrade mariadb-pamUpgrade mariadb-testUpgrade mariadb-backupUpgrade mariadb-commonUpgrade mariadb-errmsgUpgrade mariadb-develUpgrade galeraUpgrade mariadb-server-utilsUpgrade mariadbUpgrade mariadb-oqgraph-engineUpgrade mariadb-server-galeraUpgrade mariadb-serverUpgrade mariadb-gssapi-serverUpgrade mariadb-embedded-develUpgrade mariadb-embeddedUpgrade mysql-selinux | Aug 4, 2022 | Apr 1, 2021 |
| Redhat_linux | — | Upgrade mariadb-backup-debuginfoUpgrade galera-debuginfoUpgrade mariadb-pamUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-testUpgrade mariadb-gssapi-serverUpgrade mariadb-oqgraph-engine-debuginfoUpgrade galera-debugsourceUpgrade mariadb-debuginfoUpgrade mariadb-embeddedUpgrade mariadb-debugsourceUpgrade mariadb-server-debuginfoUpgrade Judy-debugsourceUpgrade Judy-debuginfoUpgrade mariadb-pam-debuginfoUpgrade mariadb-embedded-develUpgrade mariadb-server-utilsUpgrade JudyUpgrade mariadb-test-debuginfoUpgrade mariadb-commonUpgrade mariadb-embedded-debuginfoUpgrade galeraUpgrade mariadb-backupUpgrade mariadb-serverUpgrade mariadb-oqgraph-engineUpgrade mariadb-server-galeraUpgrade mysql-selinuxUpgrade mariadbUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-errmsgUpgrade mariadb-develNo solution exists | Aug 3, 2022 | Apr 12, 2022 |
| Rocky_linux | — | Upgrade mariadb-embedded-develUpgrade mariadb-embedded-debuginfoUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-test-debuginfoUpgrade mariadb-develUpgrade mariadb-server-debuginfoUpgrade mariadb-server-galeraUpgrade mariadb-commonUpgrade mariadb-pamUpgrade mariadb-backup-debuginfoUpgrade mariadb-errmsgUpgrade galera-debuginfoUpgrade JudyUpgrade Judy-debugsourceUpgrade mariadb-pam-debuginfoUpgrade mariadb-debugsourceUpgrade mariadb-oqgraph-engineUpgrade galera-debugsourceUpgrade mariadb-embeddedUpgrade galeraUpgrade mariadb-serverUpgrade mariadb-gssapi-serverUpgrade Judy-debuginfoUpgrade mariadb-debuginfoUpgrade mariadb-backupUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-testUpgrade mariadb-server-utilsUpgrade mariadb | Mar 12, 2024 | Apr 12, 2022 |
| Suse | — | Upgrade liblz4-1Upgrade mariadb104-rpm-macrosUpgrade mariadb104-errormessagesUpgrade mariadb-errormessagesUpgrade libmariadb-develUpgrade mariadb-testUpgrade libmariadb_pluginsUpgrade mariadb104Upgrade mariadb-toolsUpgrade mariadbUpgrade python3-mysqlclientUpgrade mariadb104-benchUpgrade mariadb104-toolsUpgrade libmariadbd-develUpgrade libmysqld19Upgrade libmariadb3Upgrade mariadb104-clientUpgrade mariadb-clientUpgrade libmariadbd104-develUpgrade mariadb104-testUpgrade mariadb-benchUpgrade libmysqld-develUpgrade libmariadbd19Upgrade mariadb-rpm-macrosUpgrade mariadb-galeraUpgrade mariadb104-galera | Oct 26, 2022 | Apr 12, 2022 |
| Ubuntu | — | Upgrade mariadb-server | Nov 24, 2022 | Apr 12, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 12, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub