Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2026-3494

Опубликовано: 03 мар. 2026
Источник: redhat
CVSS3: 4.3
EPSS Низкий

Описание

In MariaDB server version through 11.8.5, when server audit plugin is enabled with server_audit_events variable configured with QUERY_DCL, QUERY_DDL, or QUERY_DML filtering, if an authenticated database user invokes a SQL statement prefixed with double-hyphen (—) or hash (#) style comments, the statement is not logged.

A flaw was found in MariaDB. An authenticated database user can exploit this vulnerability by invoking SQL statements prefixed with double-hyphen (—) or hash (#) style comments. When the server audit plugin is enabled with specific event filtering, these statements are not logged. This oversight can lead to information disclosure, as critical database operations may bypass audit logging, hindering security monitoring and compliance.

Меры по смягчению последствий

To prevent authenticated users from bypassing logging of SQL statements prefixed with comments, disable the MariaDB Server Audit Plugin if its current behavior is not suitable for your auditing requirements. To disable the plugin, modify your MariaDB configuration file (e.g., /etc/my.cnf or a file in /etc/my.cnf.d/) to set server_audit_logging=OFF within the [mariadb] section.

[mariadb] server_audit_logging=OFF

After modifying the configuration, restart the MariaDB service for the changes to take effect:

systemctl restart mariadb

Disabling this plugin will cease all auditing performed by the MariaDB Server Audit Plugin. Ensure this aligns with your security policies and that alternative auditing mechanisms are in place if comprehensive logging is required.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 10mariadb10.11Fix deferred
Red Hat Enterprise Linux 10mariadb11.8Fix deferred
Red Hat Enterprise Linux 7mariadbFix deferred
Red Hat Enterprise Linux 8mariadb:10.11/mariadbFix deferred
Red Hat Enterprise Linux 8mariadb:10.3/mariadbFix deferred
Red Hat Enterprise Linux 8mariadb:10.5/mariadbFix deferred
Red Hat Enterprise Linux 8mariadb-devel:10.3/mariadbFix deferred
Red Hat Enterprise Linux 9mariadbFix deferred
Red Hat Enterprise Linux 9mariadb:10.11/mariadbFix deferred

Показывать по

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-1286
https://bugzilla.redhat.com/show_bug.cgi?id=2444155MariaDB: MariaDB: Information disclosure due to unlogged SQL statements with comments

EPSS

Процентиль: 2%
0.00013
Низкий

4.3 Medium

CVSS3

Связанные уязвимости

CVSS3: 4.3
nvd
23 дня назад

In MariaDB server version through 11.8.5, when server audit plugin is enabled with server_audit_events variable configured with QUERY_DCL, QUERY_DDL, or QUERY_DML filtering, if an authenticated database user invokes a SQL statement prefixed with double-hyphen (—) or hash (#) style comments, the statement is not logged.

CVSS3: 4.3
msrc
20 дней назад

MariaDB Server Audit Plugin Comment Handling Bypass

CVSS3: 4.3
github
23 дня назад

In MariaDB server version through 11.8.5, when server audit plugin is enabled with server_audit_events variable configured with QUERY_DCL, QUERY_DDL, or QUERY_DML filtering, if an authenticated database user invokes a SQL statement prefixed with double-hyphen (—) or hash (#) style comments, the statement is not logged.

EPSS

Процентиль: 2%
0.00013
Низкий

4.3 Medium

CVSS3