Skip to content
OpenAdvisories
High WID-SEC-2026-3856 9 CVEs

MariaDB: Mehrere Schwachstellen

Published Oct 11, 2026 · Updated Nov 8, 2026 · Revision 6 · de

Vendor: amazon Vendor: MariaDB Vendor: Red Hat Vendor: SUSE Product: Enterprise Linux Product: Linux 2 Product: MariaDB Product: openSUSE Platform: Linux Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in MariaDB ausnutzen, um beliebigen Programmcode auszuführen, um seine Privilegien zu erhöhen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen und um Sicherheitsvorkehrungen zu umgehen.

Product

MariaDB ist ein relationales Datenbanksystem, das anwendungskompatibel mit MySQL ist.

Vulnerabilities 9

  • High 8.5
    CVE-2026-107815

    MariaDB: one byte OOB write in DOS tables of the CONNECT engine

    MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the CONNECT engine's DOS table type used an incorrect boundary check that permitted a one-byte null write beyond a stack bu…

    MariaDB server mariadb-10.3 mariadb-10.0 Debian Ubuntu
  • High 8.4
    CVE-2026-107814

    MariaDB: Insecure $HOME in MariaDB rpm packages

    MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, MariaDB RPM packages created the dedicated mysql service account with the database data directory as its home directory. A …

    MariaDB server mariadb-10.3 mariadb-10.0 Ubuntu
  • High 8.4
    CVE-2026-107818

    MariaDB: environment injection via wsrep bootstrap in the mariadb.service file

    MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the mariadb.service unit used /run/mysqld/wsrep-new-cluster during the next service restart. A database user with FILE priv…

    MariaDB server mariadb-10.3 mariadb-10.0 Debian Ubuntu
  • High 8.0
    CVE-2026-107821 Public exploit

    MariaDB: insufficient validation of binary frm data when opening a table

    MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, MariaDB insufficiently validated counts, offsets, lengths, and field boundaries in FRM metadata while opening binary FRM fi…

    MariaDB server mariadb-10.3 mariadb-10.0 Debian Ubuntu
  • High 7.2
    CVE-2026-107823

    MariaDB: privilege escalation via incorrect view frm parsing

    MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the MariaDB view FRM parser did not safely encode embedded newline characters in a username. An account with CREATE USER an…

    MariaDB server mariadb-10.3 mariadb-10.0 Debian Ubuntu
  • Medium 6.4
    CVE-2026-107816

    MariaDB: `qc_info` plugin can do OOB reads if query contains \0

    MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the qc_info plugin could be confused by a query containing embedded null bytes. Reading information_schema.query_cache_info…

    MariaDB server mariadb-10.3 mariadb-10.0 Debian Ubuntu
  • Medium 6.4
    CVE-2026-107822

    MariaDB: database privilege escalation via user / role name collision in the acl cache

    MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, MariaDB's ACL cache could generate the same database-privilege cache key for role and localhost user names that matched bec…

    MariaDB server mariadb-10.3 mariadb-10.0 Debian Ubuntu
  • Medium 5.9
    CVE-2026-107819

    MariaDB Connector/C: libmariadb allowed cleartext password leakage on TLS hostname verification failure

    MariaDB Connector/C is a C and C++ client library for connecting applications to MariaDB and MySQL databases. From 3.4.1 until 3.4.10, the MariaDB Connector/C libmariadb Zero-Configuration SSL authentication-switch logic checked certificate trust failure but …

    MariaDB server mariadb Ubuntu
  • Medium 4.4
    CVE-2026-107817

    MariaDB: mysql_json plugin OOB reads

    MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the mysql_json plugin assumed that imported MySQL tables contained valid MySQL binary JSON data. A specially prepared MySQL…

    MariaDB server mariadb-10.3 mariadb-10.0 Debian Ubuntu

Revision history

  1. #6

    Neue Updates von openSUSE aufgenommen

  2. #5

    Neue Updates von Amazon aufgenommen

  3. #4

    Neue Updates von Red Hat aufgenommen

  4. #3

    Neue Updates von Red Hat aufgenommen

  5. #2

    Neue Updates von Red Hat aufgenommen

  6. #1

    Initiale Fassung

References