CVE-2022-24051: fedoraproject fedora

CVSS: 7.8v3.1HighModified

AliasesALPINE-CVE-2022-24051UBUNTU-CVE-2022-24051DEBIAN-CVE-2022-24051

Published 18-02-2022Last modified 03-08-2024

Vulnerability summary

CVE-2022-24051 is a high (CVSS 7.8) vulnerability in fedoraproject fedora. EPSS estimates a 0.66% chance of exploitation in the next 30 days, higher than 50.7% of scored vulnerabilities.

Overall risk

31/100

0100

Medium · default modelHow is this calculated?

CVSS score

7.8/10

010

High · v3.1 (NVD)

EPSS score

0.66%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 18 · Related 11

MGASA-2022-0070 OPENSUSE-SU-2022:0731-1 OPENSUSE-SU-2024:11867-1 RHSA-2022:5759 RHSA-2022:5826 RHSA-2022:5948+12 more

Timeline

18-02-2022
PublishedVulnerability first disclosed.
03-08-2024
Last modifiedVulnerability information updated.

Description

MariaDB CONNECT Storage Engine Format String Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL queries. The issue results from the lack of proper validation of a user-supplied string before using it as a format specifier. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the service account. Was ZDI-CAN-16193.

CVSS metrics

8 scores · 5 sources · 3 versions

v3.17.8v3.07.0v2.04.6

EPSS trend

Probability

0.66%

Chance of exploitation in the next 30 days

Percentile

51%

Versus all other CVEs

30-day change

0.00 pp

From 0.66% on 19-09-2026

19-09-202619-10-2026

EPSS score

0.66%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-134Use of Externally-Controlled Format StringThe product uses a function that accepts a format string as an argument, but the format string originates from an external source.

Affected systems

Ubuntu3 products

mariadb-10.0All versions (No fix recorded)
mariadb-10.1All versions (No fix recorded)
mariadb-10.3< 1:10.3.34-0ubuntu0.20.04.1

Alpine1 product

mariadb≥ 10.2.0, < 10.4.24-r0 | ≥ 10.2.0, < 10.5.15-r0 | ≥ 10.2.0, < 10.6.7-r0

Debian1 product

mariadb-10.5< 1:10.5.15-0+deb11u1

Fedoraproject1 product

fedoraEOL34 | 35 | 36

Mariadb1 product

mariadbEOL10.6.5 | ≥ 10.2.0, < 10.2.42 | ≥ 10.3.0, < 10.3.33 | ≥ 10.4.0, < 10.4.23 | ≥ 10.5.0, < 10.5.14 | ≥ 10.6.0, < 10.6.6 | ≥ 10.7.0, < 10.7.2 | 10.8.0

5 vendors · 7 products