CVE-2022-24050: MariaDB CONNECT Storage Engine Use-After-Free Privilege Escalation Vulnerability
MariaDB CONNECT Storage Engine Use-After-Free Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL queries. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the service account. Was ZDI-CAN-16207.
Other sources
This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL queries. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the service account
References: https://www.zerodayinitiative.com/advisories/ZDI-22-364/ https://mariadb.com/kb/en/security/ https://security.netapp.com/advisory/ntap-20220318-0004/
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/mariadbto a version that resolves this vulnerability.Fixed in 10.8.1 - Upgrade
Upgrade
redhat/mariadbto a version that resolves this vulnerability.Fixed in 10.7.2 - Upgrade
Upgrade
redhat/mariadbto a version that resolves this vulnerability.Fixed in 10.6.6 - Upgrade
Upgrade
redhat/mariadbto a version that resolves this vulnerability.Fixed in 10.5.14 - Upgrade
Upgrade
redhat/mariadbto a version that resolves this vulnerability.Fixed in 10.4.23 - Upgrade
Upgrade
redhat/mariadbto a version that resolves this vulnerability.Fixed in 10.3.33 - Upgrade
Upgrade
redhat/mariadbto a version that resolves this vulnerability.Fixed in 10.2.42
Event History
Frequently Asked Questions
What is CVE-2022-24050?
CVE-2022-24050 is a vulnerability in the MariaDB CONNECT Storage Engine that allows local attackers to escalate privileges on affected installations of MariaDB.
Who is affected by CVE-2022-24050?
Anyone with an affected installation of MariaDB version 10.2.0 to 10.2.42, 10.3.0 to 10.3.33, 10.4.0 to 10.4.23, 10.5.0 to 10.5.14, 10.6.0 to 10.6.6, 10.7.0 to 10.7.2, or 10.8.0 is potentially affected by CVE-2022-24050.
What is the severity of CVE-2022-24050?
The severity of CVE-2022-24050 is rated as high with a CVSS score of 7.8.
How can I fix CVE-2022-24050?
To fix CVE-2022-24050, users should update to MariaDB version 10.2.42, 10.3.33, 10.4.23, 10.5.14, 10.6.6, 10.7.2, or 10.8.1.
Where can I find more information about CVE-2022-24050?
For more information about CVE-2022-24050, you can visit the MariaDB Security Knowledge Base at https://mariadb.com/kb/en/security/ or the Zero Day Initiative advisories at https://www.zerodayinitiative.com/advisories/ZDI-22-364/.