Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
alpinelinuxAlpine Linux Development TeamALPINE:CVE-2022-24051
HistoryFeb 18, 2022 - 8:15 p.m.

CVE-2022-24051

2022-02-1820:15:17
Alpine Linux Development Team
security.alpinelinux.org
25
cve-2022-24051
mariadb
privilege escalation
authentication
sql queries
validation
user-supplied string
arbitrary code
zdi-can-16193
unix

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.9

Confidence

High

EPSS

0

Percentile

14.2%

JSON

MariaDB CONNECT Storage Engine Format String Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL queries. The issue results from the lack of proper validation of a user-supplied string before using it as a format specifier. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the service account. Was ZDI-CAN-16193.

Related

osv 10
prion 1
redhatcve 1
veracode 1
ubuntucve 1
debiancve 1
cbl_mariner 2
cvelist 1
zdi 2
nvd 1
cve 1
mariadbunix 1
openvas 19
nessus 38
redos 1
freebsd 1
ubuntu 1
mageia 1
fedora 5
suse 5
photon 1
rosalinux 1
almalinux 3
rocky 3
oraclelinux 3
redhat 5
gentoo 1
osv
osv
BIT-mariadb-2022-24051
2024-03-06 11:02:25
CVE-2022-24051
2022-02-18 20:15:17
BIT-mysql-client-2022-24051
2024-03-06 11:04:21
prion
prion
Design/Logic Flaw
2022-02-18 20:15:00
redhatcve
redhatcve
CVE-2022-24051
2022-03-24 18:04:36
veracode
veracode
Privilege Escalation
2022-03-19 11:30:47
ubuntucve
ubuntucve
CVE-2022-24051
2022-02-18 00:00:00
debiancve
debiancve
CVE-2022-24051
2022-02-18 20:15:17
cbl_mariner
cbl_mariner
CVE-2022-24051 affecting package mariadb 10.3.32-1
2022-03-10 23:47:43
CVE-2022-24051 affecting package mariadb for versions less than 10.6.7-1
2022-04-09 06:52:52
cvelist
cvelist
CVE-2022-24051
2022-02-18 19:51:46
zdi
zdi
MariaDB CONNECT Storage Engine Format String Privilege Escalation Vulnerability
2022-02-16 00:00:00
MariaDB CONNECT Storage Engine Format String Privilege Escalation Vulnerability
2022-02-11 00:00:00
nvd
nvd
CVE-2022-24051
2022-02-18 20:15:17
cve
cve
CVE-2022-24051
2022-02-18 20:15:17
mariadbunix
mariadbunix
CVE-2022-24051
2022-02-18 20:15:17
openvas
openvas
MariaDB Multiple Vulnerabilities (Feb 2022) - Linux
2022-02-14 00:00:00
MariaDB Multiple Vulnerabilities (Feb 2022) - Windows
2022-02-14 00:00:00
Ubuntu: Security Advisory (USN-5305-1)
2022-03-01 00:00:00
nessus
nessus
MariaDB 10.8.0 < 10.8.1 Multiple Vulnerabilities
2022-02-09 00:00:00
FreeBSD : MariaDB -- Multiple vulnerabilities (ff5606f7-8a45-11ec-8be6-d4c9ef517024)
2022-02-10 00:00:00
MariaDB 10.3.0 < 10.3.33 Multiple Vulnerabilities
2022-02-09 00:00:00
redos
redos
ROS-20220217-01
2022-02-17 00:00:00
freebsd
freebsd
MariaDB -- Multiple vulnerabilities
2022-02-10 00:00:00
ubuntu
ubuntu
MariaDB vulnerabilities
2022-02-28 00:00:00
mageia
mageia
Updated mariadb packages fix security vulnerability
2022-02-18 03:14:24
fedora
fedora
[SECURITY] Fedora 34 Update: mariadb-10.5.15-1.fc34
2022-05-08 02:04:10
[SECURITY] Fedora 36 Update: galera-26.4.11-1.fc36
2022-05-07 05:15:12
[SECURITY] Fedora 35 Update: galera-26.4.11-1.fc35
2022-05-08 01:50:36
suse
suse
Security update for mariadb (important)
2022-03-04 00:00:00
Security update for mariadb (important)
2022-04-29 00:00:00
Security update for mariadb (important)
2022-03-04 00:00:00
photon
photon
Critical Photon OS Security Update - PHSA-2022-3.0-0361
2022-02-14 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2023-2253
2023-10-21 15:31:29
almalinux
almalinux
Moderate: mariadb:10.5 security, bug fix, and enhancement update
2022-08-02 00:00:00
Moderate: galera, mariadb, and mysql-selinux security, bug fix, and enhancement update
2022-08-09 00:00:00
Moderate: mariadb:10.3 security and bug fix update
2022-09-13 00:00:00
rocky
rocky
mariadb:10.5 security, bug fix, and enhancement update
2022-08-02 07:05:52
galera, mariadb, and mysql-selinux security, bug fix, and enhancement update
2022-08-09 09:35:35
mariadb:10.3 security and bug fix update
2022-09-13 07:36:42
oraclelinux
oraclelinux
mariadb:10.3 security and bug fix update
2022-09-15 00:00:00
galera, mariadb, and mysql-selinux security, bug fix, and enhancement update
2022-08-10 00:00:00
mariadb:10.5 security, bug fix, and enhancement update
2022-08-03 00:00:00
redhat
redhat
(RHSA-2022:5826) Moderate: mariadb:10.5 security, bug fix, and enhancement update
2022-08-02 07:05:52
(RHSA-2022:6443) Moderate: mariadb:10.3 security and bug fix update
2022-09-13 07:36:42
(RHSA-2022:5948) Moderate: galera, mariadb, and mysql-selinux security, bug fix, and enhancement update
2022-08-09 09:35:35
gentoo
gentoo
MariaDB: Multiple Vulnerabilities
2024-05-08 00:00:00

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.9

Confidence

High

EPSS

0

Percentile

14.2%

JSON
Related for ALPINE:CVE-2022-24051
osv10prion1redhatcve1veracode1ubuntucve1debiancve1cbl_mariner2cvelist1zdi2nvd1cve1mariadbunix1openvas19nessus38redos1freebsd1ubuntu1mageia1fedora5suse5photon1rosalinux1almalinux3rocky3oraclelinux3redhat5gentoo1