p PatchFirst

PatchFirst · Vulnerabilidades recientes

mariadb 11.8.3: vulnerabilidades conocidas

Vulnerabilidades conocidas que afectan a mariadb 11.8.3: 2. Compara las versiones corregidas de abajo con la que tienes instalada.

Filtrar vulnerabilidades
Borrar filtros

Vulnerabilidades: 2

  1. CVE-2026-35549

    Media · CVSS 6.5EPSS 0,26%Corrección disponible

    CVE-2026-35549

    An issue was discovered in MariaDB Server before 11.4.10, 11.5.x through 11.8.x before 11.8.6, and 12.x before 12.2.2. If the caching_sha2_password authentication plugin is installed, and some user accounts are configured to use it, a large packet can crash the server because sha256_crypt_r uses alloca.

    • Actualiza a 11.8.6
    Publicación Actualización
  2. CVE-2025-13699

    Alta · CVSS 7.0EPSS 0,52%Sin corrección publicada

    MariaDB mariadb-dump Utility Directory Traversal Remote Code Execution Vulnerability

    MariaDB mariadb-dump Utility Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of MariaDB. Interaction with the mariadb-dump utility is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the handling of view names. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execute code in the context of the current user. Was ZDI-CAN-27000.

    Publicación Actualización

Comprueba tu servidor

Compara tu pila y las versiones instaladas con las bases actuales de vulnerabilidades.

Comprueba tu servidor →