Описание
MariaDB Server 10.4 through 10.5., 10.6 through 10.6., 10.7 through 10.11., and 11.0 through 11.0. can sometimes crash with an empty backtrace log. This may be related to make_aggr_tables_info and optimize_stage2.
A flaw was found in MariaDB Server. This vulnerability may allow an attacker to cause a crash via an issue related to make_aggr_tables_info and optimize_stage2, resulting in an empty backtrace log.
Отчет
Moderate-impact vulnerability affecting Red Hat Enterprise Linux streams that provide MariaDB 10.11. A network attacker with high privileges and no user interaction may trigger an issue in make_aggr_tables_info and optimize_stage2, causing MariaDB Server to crash and produce an empty backtrace log, resulting in a denial of service. Red Hat Enterprise Linux streams with MariaDB 10.3, including RHEL 7 ELS, are not affected because the vulnerable code is not present; Community Projects MariaDB streams are affected, and Red Hat In-Vehicle OS is affected with remediation deferred. For affected Red Hat streams marked DEFER, the current flaw records no more specific deferral rationale; the residual risk is the authenticated network-triggered MariaDB crash. Red Hat's CVSS 4.9 Moderate assessment matches the CVE.org assessment and vector.
Меры по смягчению последствий
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 7 | mariadb | Not affected | ||
| Red Hat Enterprise Linux 8 | mariadb:10.3/mariadb | Not affected | ||
| Red Hat Enterprise Linux 10 | mariadb10.11 | Fixed | RHSA-2026:0136 | 06.01.2026 |
| Red Hat Enterprise Linux 10.0 Extended Update Support | mariadb10.11 | Fixed | RHSA-2026:0376 | 08.01.2026 |
| Red Hat Enterprise Linux 10.0 Extended Update Support | mariadb10.11 | Fixed | RHSA-2026:49522 | 03.08.2026 |
| Red Hat Enterprise Linux 8 | mariadb | Fixed | RHSA-2025:19572 | 04.11.2025 |
| Red Hat Enterprise Linux 8 | mariadb | Fixed | RHSA-2026:6435 | 02.04.2026 |
| Red Hat Enterprise Linux 9 | galera | Fixed | RHSA-2025:19584 | 04.11.2025 |
| Red Hat Enterprise Linux 9 | mariadb | Fixed | RHSA-2025:19584 | 04.11.2025 |
| Red Hat Enterprise Linux 9 | mariadb | Fixed | RHSA-2026:0247 | 07.01.2026 |
Показывать по
Дополнительная информация
Статус:
EPSS
4.9 Medium
CVSS3
Связанные уязвимости
MariaDB Server 10.4 through 10.5.*, 10.6 through 10.6.*, 10.7 through 10.11.*, and 11.0 through 11.0.* can sometimes crash with an empty backtrace log. This may be related to make_aggr_tables_info and optimize_stage2.
MariaDB Server 10.4 through 10.5.*, 10.6 through 10.6.*, 10.7 through 10.11.*, and 11.0 through 11.0.* can sometimes crash with an empty backtrace log. This may be related to make_aggr_tables_info and optimize_stage2.
MariaDB Server 10.4 through 10.5.*, 10.6 through 10.6.*, 10.7 through 10.11.*, and 11.0 through 11.0.* can sometimes crash with an empty backtrace log. This may be related to make_aggr_tables_info and optimize_stage2.
MariaDB Server 10.4 through 10.5.*, 10.6 through 10.6.*, 10.7 through ...
MariaDB Server 10.4 through 10.5.*, 10.6 through 10.6.*, 10.7 through 10.11.*, and 11.0 through 11.0.* can sometimes crash with an empty backtrace log. This may be related to make_aggr_tables_info and optimize_stage2.
EPSS
4.9 Medium
CVSS3