Описание
MariaDB Server 10.10 through 10.11.* and 11.0 through 11.4.* crashes in JOIN::fix_all_splittings_in_plan.
A flaw was found in MariaDB Server. This vulnerability may allow an attacker to cause a crash via improper handling of join operations in JOIN::fix_all_splittings_in_plan.
Отчет
Moderate impact: Red Hat Enterprise Linux systems using affected MariaDB 10.11 streams can be crashed by a network attacker with high privileges who triggers improper handling of join operations in JOIN::fix_all_splittings_in_plan. This is an availability-only issue, with no confidentiality or integrity impact, consistent with the CVSS 4.9 score. Some affected Red Hat Enterprise Linux streams have a DEFER resolution, so the residual risk is a privileged remote denial of service while the fix is deferred; other affected streams have a DELEGATED resolution, for which a fix is being pursued. Other Red Hat Enterprise Linux streams are not affected because the vulnerable code is not present. Affected Community Projects MariaDB 10.11 streams are also delegated.
Меры по смягчению последствий
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 7 | mariadb | Not affected | ||
| Red Hat Enterprise Linux 8 | mariadb:10.3/mariadb | Not affected | ||
| Red Hat Enterprise Linux 8 | mariadb:10.5/mariadb | Not affected | ||
| Red Hat Enterprise Linux 8 | mariadb-devel:10.3/mariadb | Not affected | ||
| Red Hat Enterprise Linux 9 | mariadb | Not affected | ||
| Red Hat Enterprise Linux 10 | mariadb10.11 | Fixed | RHSA-2026:0136 | 06.01.2026 |
| Red Hat Enterprise Linux 10.0 Extended Update Support | mariadb10.11 | Fixed | RHSA-2026:0376 | 08.01.2026 |
| Red Hat Enterprise Linux 10.0 Extended Update Support | mariadb10.11 | Fixed | RHSA-2026:49522 | 03.08.2026 |
| Red Hat Enterprise Linux 8 | mariadb | Fixed | RHSA-2026:6435 | 02.04.2026 |
| Red Hat Enterprise Linux 9 | mariadb | Fixed | RHSA-2026:0247 | 07.01.2026 |
Показывать по
Дополнительная информация
Статус:
EPSS
4.9 Medium
CVSS3
Связанные уязвимости
MariaDB Server 10.10 through 10.11.* and 11.0 through 11.4.* crashes in JOIN::fix_all_splittings_in_plan.
MariaDB Server 10.10 through 10.11.* and 11.0 through 11.4.* crashes in JOIN::fix_all_splittings_in_plan.
MariaDB Server 10.10 through 10.11.* and 11.0 through 11.4.* crashes in JOIN::fix_all_splittings_in_plan.
MariaDB Server 10.10 through 10.11.* and 11.0 through 11.4.* crashes i ...
MariaDB Server 10.10 through 10.11.* and 11.0 through 11.4.* crashes in JOIN::fix_all_splittings_in_plan.
EPSS
4.9 Medium
CVSS3