MariaDB Server v10.7 and below was discovered to contain a global buffer overflow in the component decimal_bin_size, which is exploited via specially crafted SQL statements.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mariadb-develUpgrade mariadb-embedded-develUpgrade galeraUpgrade mariadb-serverUpgrade JudyUpgrade mariadb-backupUpgrade mariadb-commonUpgrade mariadb-server-galeraUpgrade mariadb-errmsgUpgrade mariadb-pamUpgrade mariadb-embeddedUpgrade mariadb-server-utilsUpgrade mariadb-gssapi-serverUpgrade mariadb-oqgraph-engineUpgrade mariadb-testUpgrade mariadb | Aug 8, 2022 | Apr 12, 2022 |
| Alpine Linux | — | Upgrade mariadb | Mar 26, 2024 | Apr 12, 2022 |
| Amazon Linux Ami 2 | — | Upgrade mariadb-libsUpgrade mariadb-configUpgrade mariadb-gssapi-serverUpgrade mariadb-embeddedUpgrade mariadb-s3-engineUpgrade mariadb-oqgraph-engineUpgrade mariadb-serverUpgrade mariadb-debuginfoUpgrade mariadb-backupUpgrade mariadb-cracklib-password-checkUpgrade mariadb-server-galeraUpgrade mariadb-server-utilsUpgrade mariadb-commonUpgrade mariadb-develUpgrade mariadbUpgrade mariadb-pamUpgrade mariadb-sphinx-engineUpgrade mariadb-testUpgrade mariadb-embedded-develUpgrade mariadb-rocksdb-engineUpgrade mariadb-errmsgUpgrade mariadb-connect-engine | Sep 28, 2023 | Apr 12, 2022 |
| Amazon_linux_2023 | — | Upgrade mariadb105-server-debuginfoUpgrade mariadb105-test-debuginfoUpgrade mariadb105-cracklib-password-checkUpgrade mariadb105-testUpgrade mariadb105-develUpgrade mariadb105-commonUpgrade mariadb105Upgrade mariadb105-gssapi-server-debuginfoUpgrade mariadb105-oqgraph-engineUpgrade mariadb105-backup-debuginfoUpgrade mariadb105-server-utils-debuginfoUpgrade mariadb105-pam-debuginfoUpgrade mariadb105-errmsgUpgrade mariadb105-backupUpgrade mariadb105-oqgraph-engine-debuginfoUpgrade mariadb105-gssapi-serverUpgrade mariadb105-sphinx-engineUpgrade mariadb105-connect-engine-debuginfoUpgrade mariadb105-debuginfoUpgrade mariadb105-debugsourceUpgrade mariadb105-sphinx-engine-debuginfoUpgrade mariadb105-rocksdb-engineUpgrade mariadb105-connect-engineUpgrade mariadb105-pamUpgrade mariadb105-server-utilsUpgrade mariadb105-rocksdb-engine-debuginfoUpgrade mariadb105-serverUpgrade mariadb105-cracklib-password-check-debuginfo | Feb 17, 2025 | Apr 1, 2021 |
| Centos_linux | — | Upgrade mariadb-oqgraph-engineUpgrade mariadb-errmsgUpgrade mariadb-embeddedUpgrade mariadb-embedded-debuginfoUpgrade mariadb-develUpgrade JudyUpgrade mariadb-backupUpgrade Judy-debuginfoUpgrade galera-debugsourceUpgrade mariadb-embedded-develUpgrade mariadb-server-debuginfoUpgrade mariadb-server-galeraUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-server-utilsUpgrade galeraUpgrade mariadb-pam-debuginfoUpgrade mariadbUpgrade mariadb-test-debuginfoUpgrade mariadb-commonUpgrade mariadb-serverUpgrade mysql-selinuxUpgrade mariadb-pamUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-debuginfoUpgrade Judy-debugsourceUpgrade mariadb-debugsourceUpgrade mariadb-testUpgrade mariadb-oqgraph-engine-debuginfoUpgrade galera-debuginfoUpgrade mariadb-gssapi-serverUpgrade mariadb-backup-debuginfo | Aug 3, 2022 | Apr 12, 2022 |
| Debian | — | Upgrade mariadb-10.5 | Sep 19, 2022 | Apr 12, 2022 |
| Freebsd | — | Upgrade mariadb103-serverUpgrade mariadb103-clientUpgrade mariadb105-clientUpgrade mariadb106-clientUpgrade mariadb104-serverUpgrade mariadb105-serverUpgrade mariadb104-clientUpgrade mariadb106-server | Nov 4, 2022 | May 23, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade mariadbUpgrade mariadb-develUpgrade mariadb-common | Aug 18, 2022 | Apr 12, 2022 |
| Mariadb Mariadb | — | Upgrade MariaDB to the latest version | Mar 4, 2025 | Apr 12, 2022 |
| Oracle_linux | — | Upgrade JudyUpgrade mariadb-pamUpgrade mariadb-commonUpgrade mariadb-errmsgUpgrade mariadb-testUpgrade mariadb-backupUpgrade mariadb-oqgraph-engineUpgrade mariadb-gssapi-serverUpgrade mariadb-serverUpgrade mariadb-embedded-develUpgrade mariadb-server-galeraUpgrade galeraUpgrade mariadbUpgrade mariadb-develUpgrade mariadb-embedded | Aug 4, 2022 | Apr 1, 2021 |
| Redhat_linux | — | Upgrade galera-debuginfoUpgrade mariadb-server-debuginfoUpgrade mariadb-debugsourceUpgrade mariadb-testUpgrade mariadb-pamUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-embeddedUpgrade Judy-debugsourceUpgrade mariadb-pam-debuginfoUpgrade mariadb-debuginfoUpgrade Judy-debuginfoUpgrade mariadb-backup-debuginfoUpgrade galera-debugsourceUpgrade mariadb-gssapi-serverUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-server-galeraUpgrade mariadb-develUpgrade mariadb-embedded-develUpgrade mariadb-server-utils-debuginfoUpgrade galeraUpgrade mariadb-server-utilsUpgrade mariadb-serverUpgrade mariadb-backupUpgrade mariadb-errmsgUpgrade mariadb-oqgraph-engineUpgrade mariadb-commonUpgrade JudyUpgrade mariadb-test-debuginfoUpgrade mariadbNo solution existsUpgrade mariadb-embedded-debuginfoUpgrade mysql-selinux | Aug 3, 2022 | Apr 12, 2022 |
| Rocky_linux | — | Upgrade mariadb-develUpgrade mariadb-backup-debuginfoUpgrade mariadb-test-debuginfoUpgrade galera-debuginfoUpgrade JudyUpgrade mariadb-commonUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-server-debuginfoUpgrade mariadb-errmsgUpgrade mariadb-embedded-debuginfoUpgrade mariadb-pamUpgrade mariadb-embedded-develUpgrade mariadb-server-galeraUpgrade Judy-debugsourceUpgrade galera-debugsourceUpgrade mariadbUpgrade galeraUpgrade mariadb-server-utilsUpgrade mariadb-debuginfoUpgrade Judy-debuginfoUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-testUpgrade mariadb-serverUpgrade mariadb-backupUpgrade mariadb-gssapi-serverUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-embeddedUpgrade mariadb-oqgraph-engineUpgrade mariadb-pam-debuginfoUpgrade mariadb-debugsource | Mar 12, 2024 | Apr 12, 2022 |
| Suse | — | Upgrade libmysqld19Upgrade mariadb-galeraUpgrade libmariadbd19Upgrade libmysqld-develUpgrade mariadb-benchUpgrade mariadb104-testUpgrade mariadb-clientUpgrade libmariadb3Upgrade mariadb104-galeraUpgrade mariadb104-clientUpgrade mariadb-rpm-macrosUpgrade libmariadbd104-develUpgrade mariadb104-benchUpgrade libmariadbd-develUpgrade mariadb104-toolsUpgrade mariadb-errormessagesUpgrade mariadb104-rpm-macrosUpgrade python3-mysqlclientUpgrade libmariadb_pluginsUpgrade mariadb104-errormessagesUpgrade mariadb-toolsUpgrade mariadb-testUpgrade libmariadb-develUpgrade liblz4-1Upgrade mariadbUpgrade mariadb104 | Oct 26, 2022 | Apr 12, 2022 |
| Ubuntu | — | Upgrade mariadb-server | Nov 24, 2022 | Apr 12, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 12, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub