Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-3xgj-m9hf-j98g

Опубликовано: 03 апр. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

An issue was discovered in MariaDB Server before 11.4.10, 11.5.x through 11.8.x before 11.8.6, and 12.x before 12.2.2. If the caching_sha2_password authentication plugin is installed, and some user accounts are configured to use it, a large packet can crash the server because sha256_crypt_r uses alloca.

An issue was discovered in MariaDB Server before 11.4.10, 11.5.x through 11.8.x before 11.8.6, and 12.x before 12.2.2. If the caching_sha2_password authentication plugin is installed, and some user accounts are configured to use it, a large packet can crash the server because sha256_crypt_r uses alloca.

EPSS

Процентиль: 17%
0.00256
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-789

Связанные уязвимости

CVSS3: 6.5
ubuntu
4 месяца назад

An issue was discovered in MariaDB Server before 11.4.10, 11.5.x through 11.8.x before 11.8.6, and 12.x before 12.2.2. If the caching_sha2_password authentication plugin is installed, and some user accounts are configured to use it, a large packet can crash the server because sha256_crypt_r uses alloca.

CVSS3: 6.5
redhat
4 месяца назад

An issue was discovered in MariaDB Server before 11.4.10, 11.5.x through 11.8.x before 11.8.6, and 12.x before 12.2.2. If the caching_sha2_password authentication plugin is installed, and some user accounts are configured to use it, a large packet can crash the server because sha256_crypt_r uses alloca.

CVSS3: 6.5
nvd
4 месяца назад

An issue was discovered in MariaDB Server before 11.4.10, 11.5.x through 11.8.x before 11.8.6, and 12.x before 12.2.2. If the caching_sha2_password authentication plugin is installed, and some user accounts are configured to use it, a large packet can crash the server because sha256_crypt_r uses alloca.

msrc
4 месяца назад

Описание отсутствует

CVSS3: 6.5
debian
4 месяца назад

An issue was discovered in MariaDB Server before 11.4.10, 11.5.x throu ...

EPSS

Процентиль: 17%
0.00256
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-789