Privilege Escalation Vulnerability in MariaDB: CVE-2022-24050
Summary
ALPINE-CVE-2022-24050: MariaDB CONNECT Storage Engine Use-After-Free Privilege Escalation Vulnerability. Affects mariadb versions < 10.4.24-r0. Fixed in 10.4.24-r0. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
MariaDB is an open-source relational database management system that is widely used for managing and organizing data. It is known for its high performance, scalability, and compatibility with MySQL. However, it is susceptible to various security vulnerabilities, including CVE-2022-24050, which allows local attackers to escalate privileges on affected installations.
Vulnerability Detail
The CVE-2022-24050 vulnerability is a use-after-free privilege escalation issue found in the MariaDB CONNECT Storage Engine. This flaw arises from the lack of validation of an object's existence before performing operations on it, allowing authenticated attackers to escalate privileges and execute arbitrary code within the context of the service account. The vulnerability is particularly concerning as it can lead to unauthorized access and manipulation of sensitive data.
How To Fix
Minimum fixed version
10.4.24-r0
This is the first release that contains the fix.
sudo apk add --upgrade mariadbTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, consider restricting access to the MariaDB service to trusted users only, and ensure that all users have the least privileges necessary to perform their tasks.
Conclusion
CVE-2022-24050 is a significant privilege escalation vulnerability affecting MariaDB installations. It is crucial for users to update their MariaDB packages to the patched versions to mitigate the risk of exploitation. Regular monitoring and vulnerability management practices, such as using tools like Vulert, can help maintain the security of your applications.
See every vulnerability recorded for mariadb →
FAQ
CVE-2022-24050 is a vulnerability in the MariaDB CONNECT Storage Engine that allows local attackers to escalate privileges.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
The CVSS score for CVE-2022-24050 is 7.8, indicating a high severity level.
Yes, authentication is required to exploit CVE-2022-24050.
Exploitation of this vulnerability can lead to unauthorized privilege escalation, allowing attackers to execute arbitrary code and potentially compromise sensitive data.
References
Related vulnerabilities
Recent vulnerabilities recorded for mariadb.
