MariaDB Server v10.9 and below was discovered to contain a use-after-free via the component Binary_string::free_buffer() at /sql/sql_string.h.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mariadb-pamUpgrade mariadb-commonUpgrade mariadb-testUpgrade JudyUpgrade mariadbUpgrade mariadb-develUpgrade mariadb-serverUpgrade mariadb-backupUpgrade mariadb-oqgraph-engineUpgrade mariadb-errmsgUpgrade mariadb-embeddedUpgrade galeraUpgrade mariadb-embedded-develUpgrade mariadb-server-galeraUpgrade mariadb-server-utilsUpgrade mariadb-gssapi-server | Aug 8, 2022 | Apr 14, 2022 |
| Alpine Linux | — | Upgrade mariadb | Mar 26, 2024 | Apr 14, 2022 |
| Amazon Linux Ami 2 | — | Upgrade mariadb-debuginfoUpgrade mariadb-embeddedUpgrade mariadb-server-utilsUpgrade mariadb-testUpgrade mariadb-s3-engineUpgrade mariadb-serverUpgrade mariadb-backupUpgrade mariadbUpgrade mariadb-errmsgUpgrade mariadb-connect-engineUpgrade mariadb-gssapi-serverUpgrade mariadb-develUpgrade mariadb-configUpgrade mariadb-oqgraph-engineUpgrade mariadb-commonUpgrade mariadb-rocksdb-engineUpgrade mariadb-libsUpgrade mariadb-server-galeraUpgrade mariadb-embedded-develUpgrade mariadb-sphinx-engineUpgrade mariadb-pamUpgrade mariadb-cracklib-password-check | Sep 28, 2023 | Apr 14, 2022 |
| Amazon_linux_2023 | — | Upgrade mariadb105-rocksdb-engineUpgrade mariadb105-server-utilsUpgrade mariadb105-gssapi-serverUpgrade mariadb105-commonUpgrade mariadb105Upgrade mariadb105-connect-engine-debuginfoUpgrade mariadb105-pamUpgrade mariadb105-serverUpgrade mariadb105-backup-debuginfoUpgrade mariadb105-connect-engineUpgrade mariadb105-debuginfoUpgrade mariadb105-testUpgrade mariadb105-debugsourceUpgrade mariadb105-sphinx-engineUpgrade mariadb105-rocksdb-engine-debuginfoUpgrade mariadb105-oqgraph-engineUpgrade mariadb105-sphinx-engine-debuginfoUpgrade mariadb105-server-debuginfoUpgrade mariadb105-backupUpgrade mariadb105-cracklib-password-checkUpgrade mariadb105-pam-debuginfoUpgrade mariadb105-errmsgUpgrade mariadb105-oqgraph-engine-debuginfoUpgrade mariadb105-server-utils-debuginfoUpgrade mariadb105-develUpgrade mariadb105-test-debuginfoUpgrade mariadb105-cracklib-password-check-debuginfoUpgrade mariadb105-gssapi-server-debuginfo | Feb 17, 2025 | Nov 9, 2020 |
| Centos_linux | — | Upgrade mariadb-develUpgrade mariadb-errmsgUpgrade mariadb-commonUpgrade mariadb-test-debuginfoUpgrade mariadb-server-utilsUpgrade mariadb-server-debuginfoUpgrade mariadb-backupUpgrade mariadb-embedded-debuginfoUpgrade mariadb-server-galeraUpgrade JudyUpgrade mariadb-embedded-develUpgrade mariadb-oqgraph-engineUpgrade mariadb-server-utils-debuginfoUpgrade mysql-selinuxUpgrade mariadb-serverUpgrade galeraUpgrade mariadb-pamUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-testUpgrade mariadb-debuginfoUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadbUpgrade galera-debuginfoUpgrade Judy-debugsourceUpgrade mariadb-pam-debuginfoUpgrade mariadb-debugsourceUpgrade galera-debugsourceUpgrade mariadb-backup-debuginfoUpgrade mariadb-embeddedUpgrade mariadb-gssapi-serverUpgrade Judy-debuginfo | Aug 3, 2022 | Apr 14, 2022 |
| Debian | — | Upgrade mariadb-10.5 | Sep 19, 2022 | Apr 14, 2022 |
| Freebsd | — | Upgrade mariadb103-clientUpgrade mariadb106-serverUpgrade mariadb104-clientUpgrade mariadb103-serverUpgrade mariadb105-clientUpgrade mariadb104-serverUpgrade mariadb105-serverUpgrade mariadb106-client | Nov 4, 2022 | May 23, 2022 |
| Gentoo Linux | — | Upgrade dev-db/mariadb. | May 10, 2024 | Apr 14, 2022 |
| Mariadb Mariadb | — | Upgrade MariaDB to the latest version | Mar 4, 2025 | Apr 14, 2022 |
| Oracle_linux | — | Upgrade mariadb-embedded-develUpgrade mariadb-develUpgrade galeraUpgrade mariadb-serverUpgrade mariadb-oqgraph-engineUpgrade mariadb-commonUpgrade mysql-selinuxUpgrade mariadb-backupUpgrade JudyUpgrade mariadb-errmsgUpgrade mariadbUpgrade mariadb-pamUpgrade mariadb-server-utilsUpgrade mariadb-gssapi-serverUpgrade mariadb-testUpgrade mariadb-server-galeraUpgrade mariadb-embedded | Aug 4, 2022 | Nov 9, 2020 |
| Redhat_linux | — | Upgrade mariadbUpgrade galera-debugsourceUpgrade mariadb-server-utils-debuginfoUpgrade mariadb-embeddedUpgrade mariadb-debuginfoUpgrade mysql-selinuxUpgrade mariadb-server-debuginfoUpgrade galeraUpgrade mariadb-debugsourceUpgrade mariadb-backupUpgrade Judy-debuginfoUpgrade mariadb-gssapi-serverUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-serverUpgrade mariadb-testUpgrade mariadb-server-utilsUpgrade mariadb-pam-debuginfoUpgrade mariadb-oqgraph-engineUpgrade mariadb-errmsgUpgrade mariadb-test-debuginfoUpgrade mariadb-commonUpgrade mariadb-develUpgrade galera-debuginfoUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-pamUpgrade mariadb-embedded-develUpgrade mariadb-server-galeraUpgrade mariadb-backup-debuginfoUpgrade mariadb-embedded-debuginfoUpgrade Judy-debugsourceNo solution existsUpgrade Judy | Aug 3, 2022 | Apr 14, 2022 |
| Rocky_linux | — | Upgrade mariadb-testUpgrade mariadb-test-debuginfoUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-oqgraph-engineUpgrade galera-debuginfoUpgrade galeraUpgrade mariadb-serverUpgrade galera-debugsourceUpgrade mariadb-pam-debuginfoUpgrade mariadb-backupUpgrade mariadb-server-debuginfoUpgrade mariadb-commonUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb-develUpgrade mariadb-debuginfoUpgrade mariadb-server-utilsUpgrade mariadb-embeddedUpgrade Judy-debugsourceUpgrade mariadb-server-galeraUpgrade mariadb-backup-debuginfoUpgrade mariadb-embedded-develUpgrade Judy-debuginfoUpgrade mariadb-gssapi-serverUpgrade mariadb-errmsgUpgrade mariadb-pamUpgrade mariadb-embedded-debuginfoUpgrade JudyUpgrade mariadbUpgrade mariadb-debugsourceUpgrade mariadb-server-utils-debuginfo | Mar 12, 2024 | Apr 14, 2022 |
| Suse | — | Upgrade mariadbUpgrade mariadb-clientUpgrade mariadb104-rpm-macrosUpgrade liblz4-1Upgrade mariadb104-galeraUpgrade libmariadb_pluginsUpgrade mariadb-toolsUpgrade python3-mysqlclientUpgrade mariadb104-clientUpgrade mariadb-rpm-macrosUpgrade mariadb104-toolsUpgrade libmariadb-develUpgrade mariadb104-errormessagesUpgrade libmariadb3Upgrade mariadb104-benchUpgrade mariadb-benchUpgrade libmariadbd19Upgrade mariadb-galeraUpgrade libmariadbd104-develUpgrade mariadb-errormessagesUpgrade libmariadbd-develUpgrade mariadb104-testUpgrade mariadb-testUpgrade mariadb104 | Oct 26, 2022 | Apr 14, 2022 |
| Ubuntu | — | Upgrade mariadb-server | Nov 24, 2022 | Apr 14, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 14, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub