Описание
MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the qc_info plugin could be confused by a query containing embedded null bytes. Reading information_schema.query_cache_info after such a query was cached could access data beyond the end of a heap-allocated buffer, potentially disclosing adjacent memory or crashing the server. This issue is fixed in versions 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2.
A flaw was found in MariaDB. An authenticated user can execute a database query containing embedded null bytes, which misleads the query cache information (qc_info) plugin. When the cached query details are later read from the information schema, the server accesses memory beyond the allocated buffer. This issue can lead to unauthorized information disclosure or cause a denial of service (DoS) by crashing the database server.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 10 | mariadb10.11 | Fix deferred | ||
| Red Hat Enterprise Linux 10 | mariadb11.8 | Fix deferred | ||
| Red Hat Enterprise Linux 7 | mariadb | Fix deferred | ||
| Red Hat Enterprise Linux 8 | mariadb:10.11/mariadb | Fix deferred | ||
| Red Hat Enterprise Linux 8 | mariadb:10.3/mariadb | Fix deferred | ||
| Red Hat Enterprise Linux 8 | mariadb-devel:10.3/mariadb | Fix deferred | ||
| Red Hat Enterprise Linux 9 | mariadb | Fix deferred | ||
| Red Hat Enterprise Linux 9 | mariadb:10.11/mariadb | Fix deferred | ||
| Red Hat Enterprise Linux 9 | mariadb:11.8/mariadb | Fix deferred | ||
| Red Hat OpenStack Platform 13 (Queens) | mariadb | Out of support scope |
Показывать по
Ссылки на источники
Дополнительная информация
Статус:
5.4 Medium
CVSS3
Связанные уязвимости
MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the qc_info plugin could be confused by a query containing embedded null bytes. Reading information_schema.query_cache_info after such a query was cached could access data beyond the end of a heap-allocated buffer, potentially disclosing adjacent memory or crashing the server. This issue is fixed in versions 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2.
MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the qc_info plugin could be confused by a query containing embedded null bytes. Reading information_schema.query_cache_info after such a query was cached could access data beyond the end of a heap-allocated buffer, potentially disclosing adjacent memory or crashing the server. This issue is fixed in versions 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2.
MariaDB server is a community developed fork of MySQL server. From 10. ...
`qc_info` plugin can do OOB reads if query contains \0
ALT-PU-2026-13312: package `mariadb` update to version 10.6.28-alt1
5.4 Medium
CVSS3