Vulnerability Database

322,905

Total vulnerabilities in the database

CVE-2022-24050

MariaDB CONNECT Storage Engine Use-After-Free Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL queries. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the service account. Was ZDI-CAN-16207.

  • Published: Feb 18, 2022
  • Updated: Nov 16, 2025
  • CVE: CVE-2022-24050
  • Severity: High
  • Exploit:

CVSS v3:

  • Severity: High
  • Score: 7.8
  • AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v2:

  • Severity: Low
  • Score: 4.6
  • AV:L/AC:L/Au:N/C:P/I:P/A:P

CWEs:

Software From Fixed in
mariadb / mariadb 10.3.0 10.3.33
mariadb / mariadb 10.4.0 10.4.23
mariadb / mariadb 10.5.0 10.5.14
mariadb / mariadb 10.7.0 10.7.2
mariadb / mariadb 10.6.0 10.6.6
mariadb / mariadb 10.2.0 10.2.42
mariadb / mariadb 10.8.0 10.8.0.x
fedoraproject / fedora 34 34.x
fedoraproject / fedora 35 35.x
fedoraproject / fedora 36 36.x