Homepage

Improper Use of Validation Framework The advisory has been revoked - it doesn't affect any version of package mariadb-errmsg  (opens in a new tab)

Threat Intelligence

EPSS
0.64% (47th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-RHEL9-MARIADBERRMSG-9490243
  • published21 Mar 2025
  • disclosed18 Feb 2022
Report a new vulnerability Found a mistake?

Introduced: 18 Feb 2022

CVE-2022-24050  (opens in a new tab)
CWE-1173  (opens in a new tab)

Amendment

The Red Hat security team deemed this advisory irrelevant for RHEL:9.

NVD Description

Note: Versions mentioned in the description apply only to the upstream mariadb-errmsg package and not the mariadb-errmsg package as distributed by RHEL.

MariaDB CONNECT Storage Engine Use-After-Free Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL queries. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the service account. Was ZDI-CAN-16207.

References