OESA-2022-1619

See a problem?
Please try reporting it to the source first.

Source

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2022-1619

Import Source

https://repo.openeuler.org/security/data/osv/OESA-2022-1619.json

JSON Data

https://api.test.osv.dev/v1/vulns/OESA-2022-1619

Upstream

CVE-2022-24052

Published

2022-04-29T11:03:42Z

Modified

2025-08-12T05:12:44.290933Z

Summary

mariadb security update

Details

MariaDB is a community developed fork from MySQL - a multi-user, multi-threaded SQL database server. It is a client/server implementation consisting of a server daemon (mariadbd) and many different client programs and libraries. The base package contains the standard MariaDB/MySQL client programs and utilities.

Security Fix(es):

MariaDB CONNECT Storage Engine Heap-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL queries. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the service account. Was ZDI-CAN-16190.(CVE-2022-24052)

Database specific

{
    "severity": "High"
}

References

Affected packages

openEuler:20.03-LTS-SP1 / mariadb

Package

Name: mariadb
Purl: pkg:rpm/openEuler/mariadb&distro=openEuler-20.03-LTS-SP1

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

10.3.34-1.oe1

Ecosystem specific

{
    "aarch64": [
        "mariadb-common-10.3.34-1.oe1.aarch64.rpm",
        "mariadb-server-10.3.34-1.oe1.aarch64.rpm",
        "mariadb-10.3.34-1.oe1.aarch64.rpm",
        "mariadb-devel-10.3.34-1.oe1.aarch64.rpm",
        "mariadb-oqgraph-engine-10.3.34-1.oe1.aarch64.rpm",
        "mariadb-errmessage-10.3.34-1.oe1.aarch64.rpm",
        "mariadb-backup-10.3.34-1.oe1.aarch64.rpm",
        "mariadb-debugsource-10.3.34-1.oe1.aarch64.rpm",
        "mariadb-embedded-10.3.34-1.oe1.aarch64.rpm",
        "mariadb-gssapi-server-10.3.34-1.oe1.aarch64.rpm",
        "mariadb-debuginfo-10.3.34-1.oe1.aarch64.rpm",
        "mariadb-test-10.3.34-1.oe1.aarch64.rpm",
        "mariadb-cracklib-10.3.34-1.oe1.aarch64.rpm",
        "mariadb-server-galera-10.3.34-1.oe1.aarch64.rpm",
        "mariadb-embedded-devel-10.3.34-1.oe1.aarch64.rpm"
    ],
    "x86_64": [
        "mariadb-devel-10.3.34-1.oe1.x86_64.rpm",
        "mariadb-debuginfo-10.3.34-1.oe1.x86_64.rpm",
        "mariadb-cracklib-10.3.34-1.oe1.x86_64.rpm",
        "mariadb-debugsource-10.3.34-1.oe1.x86_64.rpm",
        "mariadb-gssapi-server-10.3.34-1.oe1.x86_64.rpm",
        "mariadb-oqgraph-engine-10.3.34-1.oe1.x86_64.rpm",
        "mariadb-test-10.3.34-1.oe1.x86_64.rpm",
        "mariadb-server-galera-10.3.34-1.oe1.x86_64.rpm",
        "mariadb-embedded-devel-10.3.34-1.oe1.x86_64.rpm",
        "mariadb-errmessage-10.3.34-1.oe1.x86_64.rpm",
        "mariadb-embedded-10.3.34-1.oe1.x86_64.rpm",
        "mariadb-backup-10.3.34-1.oe1.x86_64.rpm",
        "mariadb-10.3.34-1.oe1.x86_64.rpm",
        "mariadb-common-10.3.34-1.oe1.x86_64.rpm",
        "mariadb-server-10.3.34-1.oe1.x86_64.rpm"
    ],
    "src": [
        "mariadb-10.3.34-1.oe1.src.rpm"
    ]
}

openEuler:20.03-LTS-SP2 / mariadb

Package

Name: mariadb
Purl: pkg:rpm/openEuler/mariadb&distro=openEuler-20.03-LTS-SP2

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

10.3.34-1.oe1

Ecosystem specific

{
    "aarch64": [
        "mariadb-common-10.3.34-1.oe1.aarch64.rpm",
        "mariadb-server-10.3.34-1.oe1.aarch64.rpm",
        "mariadb-10.3.34-1.oe1.aarch64.rpm",
        "mariadb-devel-10.3.34-1.oe1.aarch64.rpm",
        "mariadb-oqgraph-engine-10.3.34-1.oe1.aarch64.rpm",
        "mariadb-errmessage-10.3.34-1.oe1.aarch64.rpm",
        "mariadb-backup-10.3.34-1.oe1.aarch64.rpm",
        "mariadb-debugsource-10.3.34-1.oe1.aarch64.rpm",
        "mariadb-embedded-10.3.34-1.oe1.aarch64.rpm",
        "mariadb-gssapi-server-10.3.34-1.oe1.aarch64.rpm",
        "mariadb-debuginfo-10.3.34-1.oe1.aarch64.rpm",
        "mariadb-test-10.3.34-1.oe1.aarch64.rpm",
        "mariadb-cracklib-10.3.34-1.oe1.aarch64.rpm",
        "mariadb-server-galera-10.3.34-1.oe1.aarch64.rpm",
        "mariadb-embedded-devel-10.3.34-1.oe1.aarch64.rpm"
    ],
    "x86_64": [
        "mariadb-devel-10.3.34-1.oe1.x86_64.rpm",
        "mariadb-debuginfo-10.3.34-1.oe1.x86_64.rpm",
        "mariadb-cracklib-10.3.34-1.oe1.x86_64.rpm",
        "mariadb-debugsource-10.3.34-1.oe1.x86_64.rpm",
        "mariadb-gssapi-server-10.3.34-1.oe1.x86_64.rpm",
        "mariadb-oqgraph-engine-10.3.34-1.oe1.x86_64.rpm",
        "mariadb-test-10.3.34-1.oe1.x86_64.rpm",
        "mariadb-server-galera-10.3.34-1.oe1.x86_64.rpm",
        "mariadb-embedded-devel-10.3.34-1.oe1.x86_64.rpm",
        "mariadb-errmessage-10.3.34-1.oe1.x86_64.rpm",
        "mariadb-embedded-10.3.34-1.oe1.x86_64.rpm",
        "mariadb-backup-10.3.34-1.oe1.x86_64.rpm",
        "mariadb-10.3.34-1.oe1.x86_64.rpm",
        "mariadb-common-10.3.34-1.oe1.x86_64.rpm",
        "mariadb-server-10.3.34-1.oe1.x86_64.rpm"
    ],
    "src": [
        "mariadb-10.3.34-1.oe1.src.rpm"
    ]
}

openEuler:20.03-LTS-SP3 / mariadb

Package

Name: mariadb
Purl: pkg:rpm/openEuler/mariadb&distro=openEuler-20.03-LTS-SP3

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

10.3.34-1.oe1

Ecosystem specific

{
    "aarch64": [
        "mariadb-common-10.3.34-1.oe1.aarch64.rpm",
        "mariadb-server-10.3.34-1.oe1.aarch64.rpm",
        "mariadb-10.3.34-1.oe1.aarch64.rpm",
        "mariadb-devel-10.3.34-1.oe1.aarch64.rpm",
        "mariadb-oqgraph-engine-10.3.34-1.oe1.aarch64.rpm",
        "mariadb-errmessage-10.3.34-1.oe1.aarch64.rpm",
        "mariadb-backup-10.3.34-1.oe1.aarch64.rpm",
        "mariadb-debugsource-10.3.34-1.oe1.aarch64.rpm",
        "mariadb-embedded-10.3.34-1.oe1.aarch64.rpm",
        "mariadb-gssapi-server-10.3.34-1.oe1.aarch64.rpm",
        "mariadb-debuginfo-10.3.34-1.oe1.aarch64.rpm",
        "mariadb-test-10.3.34-1.oe1.aarch64.rpm",
        "mariadb-cracklib-10.3.34-1.oe1.aarch64.rpm",
        "mariadb-server-galera-10.3.34-1.oe1.aarch64.rpm",
        "mariadb-embedded-devel-10.3.34-1.oe1.aarch64.rpm"
    ],
    "x86_64": [
        "mariadb-devel-10.3.34-1.oe1.x86_64.rpm",
        "mariadb-debuginfo-10.3.34-1.oe1.x86_64.rpm",
        "mariadb-cracklib-10.3.34-1.oe1.x86_64.rpm",
        "mariadb-debugsource-10.3.34-1.oe1.x86_64.rpm",
        "mariadb-gssapi-server-10.3.34-1.oe1.x86_64.rpm",
        "mariadb-oqgraph-engine-10.3.34-1.oe1.x86_64.rpm",
        "mariadb-test-10.3.34-1.oe1.x86_64.rpm",
        "mariadb-server-galera-10.3.34-1.oe1.x86_64.rpm",
        "mariadb-embedded-devel-10.3.34-1.oe1.x86_64.rpm",
        "mariadb-errmessage-10.3.34-1.oe1.x86_64.rpm",
        "mariadb-embedded-10.3.34-1.oe1.x86_64.rpm",
        "mariadb-backup-10.3.34-1.oe1.x86_64.rpm",
        "mariadb-10.3.34-1.oe1.x86_64.rpm",
        "mariadb-common-10.3.34-1.oe1.x86_64.rpm",
        "mariadb-server-10.3.34-1.oe1.x86_64.rpm"
    ],
    "src": [
        "mariadb-10.3.34-1.oe1.src.rpm"
    ]
}

openEuler:22.03-LTS / mariadb

Package

Name: mariadb
Purl: pkg:rpm/openEuler/mariadb&distro=openEuler-22.03-LTS

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

10.5.15-2.oe2203

Ecosystem specific

{
    "aarch64": [
        "mariadb-10.5.15-2.oe2203.aarch64.rpm",
        "mariadb-config-10.5.15-2.oe2203.aarch64.rpm",
        "mariadb-common-10.5.15-2.oe2203.aarch64.rpm",
        "mariadb-embedded-devel-10.5.15-2.oe2203.aarch64.rpm",
        "mariadb-test-10.5.15-2.oe2203.aarch64.rpm",
        "mariadb-server-10.5.15-2.oe2203.aarch64.rpm",
        "mariadb-devel-10.5.15-2.oe2203.aarch64.rpm",
        "mariadb-server-galera-10.5.15-2.oe2203.aarch64.rpm",
        "mariadb-embedded-10.5.15-2.oe2203.aarch64.rpm",
        "mariadb-backup-10.5.15-2.oe2203.aarch64.rpm",
        "mariadb-gssapi-server-10.5.15-2.oe2203.aarch64.rpm",
        "mariadb-errmsg-10.5.15-2.oe2203.aarch64.rpm",
        "mariadb-debugsource-10.5.15-2.oe2203.aarch64.rpm",
        "mariadb-debuginfo-10.5.15-2.oe2203.aarch64.rpm",
        "mariadb-oqgraph-engine-10.5.15-2.oe2203.aarch64.rpm",
        "mariadb-pam-10.5.15-2.oe2203.aarch64.rpm",
        "mariadb-rocksdb-engine-10.5.15-2.oe2203.aarch64.rpm",
        "mariadb-server-utils-10.5.15-2.oe2203.aarch64.rpm"
    ],
    "x86_64": [
        "mariadb-gssapi-server-10.5.15-2.oe2203.x86_64.rpm",
        "mariadb-common-10.5.15-2.oe2203.x86_64.rpm",
        "mariadb-backup-10.5.15-2.oe2203.x86_64.rpm",
        "mariadb-debugsource-10.5.15-2.oe2203.x86_64.rpm",
        "mariadb-debuginfo-10.5.15-2.oe2203.x86_64.rpm",
        "mariadb-devel-10.5.15-2.oe2203.x86_64.rpm",
        "mariadb-errmsg-10.5.15-2.oe2203.x86_64.rpm",
        "mariadb-embedded-10.5.15-2.oe2203.x86_64.rpm",
        "mariadb-oqgraph-engine-10.5.15-2.oe2203.x86_64.rpm",
        "mariadb-embedded-devel-10.5.15-2.oe2203.x86_64.rpm",
        "mariadb-config-10.5.15-2.oe2203.x86_64.rpm",
        "mariadb-server-galera-10.5.15-2.oe2203.x86_64.rpm",
        "mariadb-server-10.5.15-2.oe2203.x86_64.rpm",
        "mariadb-test-10.5.15-2.oe2203.x86_64.rpm",
        "mariadb-10.5.15-2.oe2203.x86_64.rpm",
        "mariadb-pam-10.5.15-2.oe2203.x86_64.rpm",
        "mariadb-server-utils-10.5.15-2.oe2203.x86_64.rpm"
    ],
    "src": [
        "mariadb-10.5.15-2.oe2203.src.rpm"
    ]
}