Lucene search
AnonymousZDI-22-365HistoryFeb 16, 2022 - 12:00 a.m.
MariaDB CONNECT Storage Engine Format String Privilege Escalation Vulnerability
2022-02-1600:00:00
Anonymous
www.zerodayinitiative.com
13
0.0004 Low
EPSS
Percentile
14.4%
This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL queries. The issue results from the lack of proper validation of a user-supplied string before using it as a format specifier. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the service account.
References
Related
osv
osv
BIT-mariadb-2022-24051
2024-03-06 11:02:25
BIT-mysql-client-2022-24051
2024-03-06 11:04:21
CVE-2022-24051
2022-02-18 20:15:17
prion
prion
Design/Logic Flaw
2022-02-18 20:15:00
cbl_mariner
cbl_mariner
CVE-2022-24051 affecting package mariadb for versions less than 10.6.7-1
2022-04-09 06:52:52
CVE-2022-24051 affecting package mariadb 10.3.32-1
2022-03-10 23:47:43
nvd
nvd
CVE-2022-24051
2022-02-18 20:15:17
alpinelinux
alpinelinux
CVE-2022-24051
2022-02-18 20:15:17
cvelist
cvelist
CVE-2022-24051
2022-02-18 19:51:46
redhatcve
redhatcve
CVE-2022-24051
2022-03-24 18:04:36
ubuntucve
ubuntucve
CVE-2022-24051
2022-02-18 00:00:00
veracode
veracode
Privilege Escalation
2022-03-19 11:30:47
debiancve
debiancve
CVE-2022-24051
2022-02-18 20:15:17
mariadbunix
mariadbunix
CVE-2022-24051
2022-02-18 20:15:17
zdi
zdi
cve
cve
CVE-2022-24051
2022-02-18 20:15:17
openvas
openvas
MariaDB Multiple Vulnerabilities (Feb 2022) - Linux
2022-02-14 00:00:00
MariaDB Multiple Vulnerabilities (Feb 2022) - Windows
2022-02-14 00:00:00
Ubuntu: Security Advisory (USN-5305-1)
2022-03-01 00:00:00
redos
redos
ROS-20220217-01
2022-02-17 00:00:00
freebsd
freebsd
MariaDB -- Multiple vulnerabilities
2022-02-10 00:00:00
nessus
nessus
MariaDB 10.8.0 < 10.8.1 Multiple Vulnerabilities
2022-02-09 00:00:00
FreeBSD : MariaDB -- Multiple vulnerabilities (ff5606f7-8a45-11ec-8be6-d4c9ef517024)
2022-02-10 00:00:00
MariaDB 10.4.0 < 10.4.23 Multiple Vulnerabilities
2022-02-09 00:00:00
mageia
mageia
Updated mariadb packages fix security vulnerability
2022-02-18 03:14:24
ubuntu
ubuntu
MariaDB vulnerabilities
2022-02-28 00:00:00
fedora
fedora
[SECURITY] Fedora 34 Update: mariadb-10.5.15-1.fc34
2022-05-08 02:04:10
[SECURITY] Fedora 36 Update: galera-26.4.11-1.fc36
2022-05-07 05:15:12
[SECURITY] Fedora 35 Update: mariadb-10.5.15-1.fc35
2022-05-08 01:50:37
suse
suse
Security update for mariadb (important)
2022-03-04 00:00:00
Security update for mariadb (important)
2022-03-04 00:00:00
Security update for mariadb (important)
2022-04-29 00:00:00
photon
photon
Critical Photon OS Security Update - PHSA-2022-3.0-0361
2022-02-14 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2023-2253
2023-10-21 15:31:29
rocky
rocky
galera, mariadb, and mysql-selinux security, bug fix, and enhancement update
2022-08-09 09:35:35
mariadb:10.5 security, bug fix, and enhancement update
2022-08-02 07:05:52
mariadb:10.3 security and bug fix update
2022-09-13 07:36:42
oraclelinux
oraclelinux
mariadb:10.3 security and bug fix update
2022-09-15 00:00:00
galera, mariadb, and mysql-selinux security, bug fix, and enhancement update
2022-08-10 00:00:00
mariadb:10.5 security, bug fix, and enhancement update
2022-08-03 00:00:00
redhat
redhat
(RHSA-2022:6443) Moderate: mariadb:10.3 security and bug fix update
2022-09-13 07:36:42
almalinux
almalinux
Moderate: mariadb:10.5 security, bug fix, and enhancement update
2022-08-02 00:00:00
Moderate: galera, mariadb, and mysql-selinux security, bug fix, and enhancement update
2022-08-09 00:00:00
Moderate: mariadb:10.3 security and bug fix update
2022-09-13 00:00:00
gentoo
gentoo
MariaDB: Multiple Vulnerabilities
2024-05-08 00:00:00