MariaDB Server v10.7 and below was discovered to contain a global buffer overflow in the component decimal_bin_size, which is exploited via specially crafted SQL statements.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mariadb-commonUpgrade mariadb-embedded-develUpgrade JudyUpgrade galeraUpgrade mariadb-develUpgrade mariadb-serverUpgrade mariadb-backupUpgrade mariadb-server-galeraUpgrade mariadbUpgrade mariadb-gssapi-serverUpgrade mariadb-embeddedUpgrade mariadb-server-utilsUpgrade mariadb-testUpgrade mariadb-errmsgUpgrade mariadb-pamUpgrade mariadb-oqgraph-engine | Aug 8, 2022 | Apr 12, 2022 |
| Alpine Linux | — | Upgrade mariadb | Mar 26, 2024 | Apr 12, 2022 |
| Amazon Linux Ami 2 | — | Upgrade mariadb-serverUpgrade mariadb-libsUpgrade mariadb-gssapi-serverUpgrade mariadb-embeddedUpgrade mariadb-backupUpgrade mariadb-cracklib-password-checkUpgrade mariadb-debuginfoUpgrade mariadb-configUpgrade mariadb-s3-engineUpgrade mariadb-oqgraph-engineUpgrade mariadb-errmsgUpgrade mariadb-embedded-develUpgrade mariadb-connect-engineUpgrade mariadb-rocksdb-engineUpgrade mariadb-pamUpgrade mariadb-testUpgrade mariadb-sphinx-engineUpgrade mariadb-server-galeraUpgrade mariadb-develUpgrade mariadbUpgrade mariadb-commonUpgrade mariadb-server-utils | Sep 28, 2023 | Apr 12, 2022 |
| Amazon_linux_2023 | — | Upgrade mariadb105-develUpgrade mariadb105-server-debuginfoUpgrade mariadb105-commonUpgrade mariadb105-test-debuginfoUpgrade mariadb105-cracklib-password-checkUpgrade mariadb105Upgrade mariadb105-oqgraph-engineUpgrade mariadb105-testUpgrade mariadb105-backupUpgrade mariadb105-gssapi-serverUpgrade mariadb105-oqgraph-engine-debuginfoUpgrade mariadb105-errmsgUpgrade mariadb105-pam-debuginfoUpgrade mariadb105-server-utils-debuginfoUpgrade mariadb105-backup-debuginfoUpgrade mariadb105-gssapi-server-debuginfoUpgrade mariadb105-connect-engineUpgrade mariadb105-debugsourceUpgrade mariadb105-cracklib-password-check-debuginfoUpgrade mariadb105-rocksdb-engineUpgrade mariadb105-sphinx-engine-debuginfoUpgrade mariadb105-sphinx-engineUpgrade mariadb105-serverUpgrade mariadb105-server-utilsUpgrade mariadb105-rocksdb-engine-debuginfoUpgrade mariadb105-connect-engine-debuginfoUpgrade mariadb105-debuginfoUpgrade mariadb105-pam | Feb 17, 2025 | Apr 1, 2021 |
| Centos_linux | — | Upgrade mariadb-pamUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-debugsourceUpgrade mariadb-backup-debuginfoUpgrade mariadb-gssapi-serverUpgrade galera-debuginfoUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-testUpgrade Judy-debugsourceUpgrade mariadb-debuginfoUpgrade mariadb-test-debuginfoUpgrade Judy-debuginfoUpgrade mariadb-backupUpgrade mariadb-commonUpgrade galeraUpgrade mariadb-errmsgUpgrade mariadb-serverUpgrade mariadbUpgrade mariadb-server-debuginfoUpgrade mariadb-embedded-debuginfoUpgrade mariadb-embeddedUpgrade mariadb-develUpgrade galera-debugsourceUpgrade mariadb-server-utilsUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-server-galeraUpgrade mariadb-oqgraph-engineUpgrade mariadb-embedded-develUpgrade JudyUpgrade mariadb-pam-debuginfoUpgrade mysql-selinux | Aug 3, 2022 | Apr 12, 2022 |
| Debian | — | Upgrade mariadb-10.5 | Sep 19, 2022 | Apr 12, 2022 |
| Freebsd | — | Upgrade mariadb103-clientUpgrade mariadb105-clientUpgrade mariadb106-clientUpgrade mariadb103-serverUpgrade mariadb104-serverUpgrade mariadb105-serverUpgrade mariadb106-serverUpgrade mariadb104-client | Nov 4, 2022 | May 23, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade mariadbUpgrade mariadb-commonUpgrade mariadb-devel | Aug 18, 2022 | Apr 12, 2022 |
| Mariadb Mariadb | — | Upgrade MariaDB to the latest version | Mar 4, 2025 | Apr 12, 2022 |
| Oracle_linux | — | Upgrade mariadb-gssapi-serverUpgrade mariadb-serverUpgrade galeraUpgrade mariadb-oqgraph-engineUpgrade mariadb-server-utilsUpgrade mariadb-server-galeraUpgrade mariadb-develUpgrade mariadb-embedded-develUpgrade mariadb-embeddedUpgrade mysql-selinuxUpgrade mariadbUpgrade JudyUpgrade mariadb-commonUpgrade mariadb-errmsgUpgrade mariadb-testUpgrade mariadb-pamUpgrade mariadb-backup | Aug 4, 2022 | Apr 1, 2021 |
| Redhat_linux | — | Upgrade galeraUpgrade mariadb-commonUpgrade mysql-selinuxUpgrade mariadbNo solution existsUpgrade mariadb-serverUpgrade mariadb-errmsgUpgrade JudyUpgrade mariadb-backupUpgrade mariadb-oqgraph-engineUpgrade mariadb-develUpgrade mariadb-server-utilsUpgrade mariadb-embedded-develUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-server-galeraUpgrade mariadb-test-debuginfoUpgrade mariadb-embedded-debuginfoUpgrade mariadb-debugsourceUpgrade galera-debuginfoUpgrade mariadb-pamUpgrade mariadb-server-debuginfoUpgrade mariadb-backup-debuginfoUpgrade Judy-debuginfoUpgrade mariadb-debuginfoUpgrade galera-debugsourceUpgrade mariadb-gssapi-serverUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-testUpgrade mariadb-pam-debuginfoUpgrade mariadb-embeddedUpgrade Judy-debugsourceUpgrade mariadb-gssapi-server-debuginfo | Aug 3, 2022 | Apr 12, 2022 |
| Rocky_linux | — | Upgrade mariadb-errmsgUpgrade mariadb-server-debuginfoUpgrade mariadb-backup-debuginfoUpgrade mariadb-server-galeraUpgrade mariadb-oqgraph-engine-debuginfoUpgrade JudyUpgrade mariadb-embedded-debuginfoUpgrade mariadb-pamUpgrade mariadb-test-debuginfoUpgrade mariadb-develUpgrade galera-debuginfoUpgrade mariadb-embedded-develUpgrade mariadb-commonUpgrade mariadb-debugsourceUpgrade mariadb-backupUpgrade Judy-debuginfoUpgrade mariadb-gssapi-serverUpgrade Judy-debugsourceUpgrade galera-debugsourceUpgrade mariadbUpgrade mariadb-oqgraph-engineUpgrade mariadb-embeddedUpgrade mariadb-pam-debuginfoUpgrade mariadb-debuginfoUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-serverUpgrade mariadb-testUpgrade mariadb-server-utilsUpgrade mariadb-gssapi-server-debuginfoUpgrade galera | Mar 12, 2024 | Apr 12, 2022 |
| Suse | — | Upgrade mariadb104-benchUpgrade mariadb104-galeraUpgrade libmariadb3Upgrade mariadb-rpm-macrosUpgrade mariadb104-toolsUpgrade mariadb104-clientUpgrade libmariadbd-develUpgrade libmariadbd104-develUpgrade mariadb-galeraUpgrade libmysqld19Upgrade mariadb104-testUpgrade libmysqld-develUpgrade libmariadbd19Upgrade mariadb-benchUpgrade mariadb-clientUpgrade mariadbUpgrade python3-mysqlclientUpgrade mariadb104-rpm-macrosUpgrade mariadb-toolsUpgrade mariadb104Upgrade mariadb-errormessagesUpgrade liblz4-1Upgrade libmariadb-develUpgrade mariadb104-errormessagesUpgrade mariadb-testUpgrade libmariadb_plugins | Oct 26, 2022 | Apr 12, 2022 |
| Ubuntu | — | Upgrade mariadb-server | Nov 24, 2022 | Apr 12, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 12, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub