High severity7.8NVD Advisory· Published Feb 18, 2022· Updated Jun 17, 2026

CVE-2022-24048

Description

MariaDB CONNECT Storage Engine Stack-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL queries. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the service account. Was ZDI-CAN-16191.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

MariaDB/MariaDB4 versions
cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*range: >=10.2.0,<10.2.42
- cpe:2.3:a:mariadb:mariadb:10.8.0:*:*:*:*:*:*:*
- (no CPE)
- (no CPE)range: 10.6.5
Fedoraproject/Fedora3 versions
cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*
osv-coords68 versions
pkg:bitnami/mariadb pkg:bitnami/mariadb-min pkg:bitnami/mysql-client pkg:rpm/almalinux/Judy pkg:rpm/almalinux/galera pkg:rpm/almalinux/mariadb pkg:rpm/almalinux/mariadb-backup pkg:rpm/almalinux/mariadb-common pkg:rpm/almalinux/mariadb-devel pkg:rpm/almalinux/mariadb-embedded pkg:rpm/almalinux/mariadb-embedded-devel pkg:rpm/almalinux/mariadb-errmsg pkg:rpm/almalinux/mariadb-gssapi-server pkg:rpm/almalinux/mariadb-oqgraph-engine pkg:rpm/almalinux/mariadb-pam pkg:rpm/almalinux/mariadb-server pkg:rpm/almalinux/mariadb-server-galera pkg:rpm/almalinux/mariadb-server-utils pkg:rpm/almalinux/mariadb-test pkg:rpm/opensuse/mariadb&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/mariadb&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/mariadb&distro=openSUSE%20Tumbleweed pkg:rpm/suse/lz4&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5 pkg:rpm/suse/lz4&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5 pkg:rpm/suse/lz4&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP5 pkg:rpm/suse/mariadb&distro=SUSE%20Enterprise%20Storage%206 pkg:rpm/suse/mariadb&distro=SUSE%20Enterprise%20Storage%207 pkg:rpm/suse/mariadb&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-ESPOS pkg:rpm/suse/mariadb&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-LTSS pkg:rpm/suse/mariadb&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-ESPOS pkg:rpm/suse/mariadb&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-LTSS pkg:rpm/suse/mariadb&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-ESPOS pkg:rpm/suse/mariadb&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-LTSS pkg:rpm/suse/mariadb&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Server%20Applications%2015%20SP3 pkg:rpm/suse/mariadb&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Server%20Applications%2015%20SP4 pkg:rpm/suse/mariadb&distro=SUSE%20Linux%20Enterprise%20Real%20Time%2015%20SP2 pkg:rpm/suse/mariadb&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP4-LTSS pkg:rpm/suse/mariadb&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5 pkg:rpm/suse/mariadb&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-BCL pkg:rpm/suse/mariadb&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-LTSS pkg:rpm/suse/mariadb&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-BCL pkg:rpm/suse/mariadb&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-LTSS pkg:rpm/suse/mariadb&distro=SUSE%20Linux%20Enterprise%20Server%2015-LTSS pkg:rpm/suse/mariadb&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP4 pkg:rpm/suse/mariadb&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5 pkg:rpm/suse/mariadb&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015 pkg:rpm/suse/mariadb&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP1 pkg:rpm/suse/mariadb&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP2 pkg:rpm/suse/mariadb&distro=SUSE%20Manager%20Proxy%204.1 pkg:rpm/suse/mariadb&distro=SUSE%20Manager%20Retail%20Branch%20Server%204.1 pkg:rpm/suse/mariadb&distro=SUSE%20Manager%20Server%204.1 pkg:rpm/suse/mariadb&distro=SUSE%20OpenStack%20Cloud%209 pkg:rpm/suse/mariadb&distro=SUSE%20OpenStack%20Cloud%20Crowbar%209 pkg:rpm/suse/mariadb-connector-c&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5 pkg:rpm/suse/mariadb-connector-c&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5 pkg:rpm/suse/mariadb-connector-c&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP5 pkg:rpm/suse/mariadb104&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-LTSS pkg:rpm/suse/mariadb104&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5 pkg:rpm/suse/mariadb104&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-LTSS pkg:rpm/suse/mariadb104&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5 pkg:rpm/suse/mariadb104&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP1 pkg:rpm/suse/mariadb104&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP5 pkg:rpm/suse/python-mysqlclient&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-LTSS pkg:rpm/suse/python-mysqlclient&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5 pkg:rpm/suse/python-mysqlclient&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-LTSS pkg:rpm/suse/python-mysqlclient&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5 pkg:rpm/suse/python-mysqlclient&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP1 pkg:rpm/suse/python-mysqlclient&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP5
>= 10.2.0, < 10.2.42+ 67 more
- (no CPE)range: >= 10.2.0, < 10.2.42
- (no CPE)range: >= 10.2.0, < 10.2.42
- (no CPE)range: >= 10.2.0, < 10.2.42
- (no CPE)range: < 1.0.5-18.module_el8.6.0+3072+3c630e87
- (no CPE)range: < 26.4.11-1.module_el8.6.0+3072+3c630e87
- (no CPE)range: < 3:10.5.16-2.module_el8.6.0+3072+3c630e87
- (no CPE)range: < 3:10.5.16-2.module_el8.6.0+3072+3c630e87
- (no CPE)range: < 3:10.5.16-2.module_el8.6.0+3072+3c630e87
- (no CPE)range: < 3:10.5.16-2.module_el8.6.0+3072+3c630e87
- (no CPE)range: < 3:10.5.16-2.module_el8.6.0+3072+3c630e87
- (no CPE)range: < 3:10.5.16-2.module_el8.6.0+3072+3c630e87
- (no CPE)range: < 3:10.5.16-2.module_el8.6.0+3072+3c630e87
- (no CPE)range: < 3:10.5.16-2.module_el8.6.0+3072+3c630e87
- (no CPE)range: < 3:10.5.16-2.module_el8.6.0+3072+3c630e87
- (no CPE)range: < 3:10.5.16-2.module_el8.6.0+3072+3c630e87
- (no CPE)range: < 3:10.5.16-2.module_el8.6.0+3072+3c630e87
- (no CPE)range: < 3:10.5.16-2.module_el8.6.0+3072+3c630e87
- (no CPE)range: < 3:10.5.16-2.module_el8.6.0+3072+3c630e87
- (no CPE)range: < 3:10.5.16-2.module_el8.6.0+3072+3c630e87
- (no CPE)range: < 10.5.15-150300.3.15.1
- (no CPE)range: < 10.5.15-150300.3.15.1
- (no CPE)range: < 10.7.3-1.1
- (no CPE)range: < 1.8.0-3.5.2
- (no CPE)range: < 1.8.0-3.5.2
- (no CPE)range: < 1.8.0-3.5.2
- (no CPE)range: < 10.2.43-3.51.1
- (no CPE)range: < 10.4.24-3.25.1
- (no CPE)range: < 10.2.43-3.51.1
- (no CPE)range: < 10.2.43-3.51.1
- (no CPE)range: < 10.4.24-3.25.1
- (no CPE)range: < 10.4.24-3.25.1
- (no CPE)range: < 10.2.43-3.51.1
- (no CPE)range: < 10.2.43-3.51.1
- (no CPE)range: < 10.5.15-150300.3.15.1
- (no CPE)range: < 10.6.8-150400.3.7.1
- (no CPE)range: < 10.4.24-3.25.1
- (no CPE)range: < 10.2.43-3.47.1
- (no CPE)range: < 10.2.43-3.47.1
- (no CPE)range: < 10.2.43-3.51.1
- (no CPE)range: < 10.2.43-3.51.1
- (no CPE)range: < 10.4.24-3.25.1
- (no CPE)range: < 10.4.24-3.25.1
- (no CPE)range: < 10.2.43-3.51.1
- (no CPE)range: < 10.2.43-3.47.1
- (no CPE)range: < 10.2.43-3.47.1
- (no CPE)range: < 10.2.43-3.51.1
- (no CPE)range: < 10.2.43-3.51.1
- (no CPE)range: < 10.4.24-3.25.1
- (no CPE)range: < 10.4.24-3.25.1
- (no CPE)range: < 10.4.24-3.25.1
- (no CPE)range: < 10.4.24-3.25.1
- (no CPE)range: < 10.2.43-3.47.1
- (no CPE)range: < 10.2.43-3.47.1
- (no CPE)range: < 3.1.22-2.35.1
- (no CPE)range: < 3.1.22-2.35.1
- (no CPE)range: < 3.1.22-2.35.1
- (no CPE)range: < 10.4.30-150100.3.5.10
- (no CPE)range: < 10.4.30-8.5.46
- (no CPE)range: < 10.4.30-150100.3.5.10
- (no CPE)range: < 10.4.30-8.5.46
- (no CPE)range: < 10.4.30-150100.3.5.10
- (no CPE)range: < 10.4.30-8.5.46
- (no CPE)range: < 1.4.6-150100.3.3.7
- (no CPE)range: < 1.3.14-8.9.2
- (no CPE)range: < 1.4.6-150100.3.3.7
- (no CPE)range: < 1.3.14-8.9.2
- (no CPE)range: < 1.4.6-150100.3.3.7
- (no CPE)range: < 1.3.14-8.9.2

Patches

Vulnerability mechanics

References

mariadb.com/kb/en/security/nvdPatchVendor Advisory
security.netapp.com/advisory/ntap-20220318-0004/nvdThird Party Advisory
www.zerodayinitiative.com/advisories/ZDI-22-363/nvdThird Party AdvisoryVDB Entry
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DKJRBYJAQCOPHSED43A3HUPNKQLDTFGD/nvd
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EZFZVMJL5UDTOZMARLXQIMG3BTG6UNYW/nvd
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NJ4KDAGF3H4D4BDTHRAM6ZEAJJWWMRUO/nvd

News mentions

No linked articles in our index yet.

cvss	0.507
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000