Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Количество 7

Количество 7

ubuntu логотип

CVE-2026-107816

14 дней назад

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the qc_info plugin could be confused by a query containing embedded null bytes. Reading information_schema.query_cache_info after such a query was cached could access data beyond the end of a heap-allocated buffer, potentially disclosing adjacent memory or crashing the server. This issue is fixed in versions 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2.

CVSS3: 6.4
EPSS: Низкий
redhat логотип

CVE-2026-107816

14 дней назад

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the qc_info plugin could be confused by a query containing embedded null bytes. Reading information_schema.query_cache_info after such a query was cached could access data beyond the end of a heap-allocated buffer, potentially disclosing adjacent memory or crashing the server. This issue is fixed in versions 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2.

CVSS3: 5.4
EPSS: Низкий
nvd логотип

CVE-2026-107816

14 дней назад

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the qc_info plugin could be confused by a query containing embedded null bytes. Reading information_schema.query_cache_info after such a query was cached could access data beyond the end of a heap-allocated buffer, potentially disclosing adjacent memory or crashing the server. This issue is fixed in versions 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2.

CVSS3: 6.4
EPSS: Низкий
debian логотип

CVE-2026-107816

14 дней назад

MariaDB server is a community developed fork of MySQL server. From 10. ...

CVSS3: 6.4
EPSS: Низкий
github логотип

GHSA-wfqg-88r5-55f6

около 2 месяцев назад

`qc_info` plugin can do OOB reads if query contains \0

CVSS3: 6.4
EPSS: Низкий
altlinux логотип

ALT-PU-2026-13312

2 месяца назад

ALT-PU-2026-13312: package `mariadb` update to version 10.6.28-alt1

CVSS3: 10
EPSS: Низкий
altlinux логотип

ALT-PU-2026-13966

около 2 месяцев назад

ALT-PU-2026-13966: package `mariadb` update to version 12.3.3-alt1

CVSS3: 8.5
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2026-107816

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the qc_info plugin could be confused by a query containing embedded null bytes. Reading information_schema.query_cache_info after such a query was cached could access data beyond the end of a heap-allocated buffer, potentially disclosing adjacent memory or crashing the server. This issue is fixed in versions 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2.

CVSS3: 6.4
0%
Низкий
14 дней назад
redhat логотип
CVE-2026-107816

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the qc_info plugin could be confused by a query containing embedded null bytes. Reading information_schema.query_cache_info after such a query was cached could access data beyond the end of a heap-allocated buffer, potentially disclosing adjacent memory or crashing the server. This issue is fixed in versions 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2.

CVSS3: 5.4
0%
Низкий
14 дней назад
nvd логотип
CVE-2026-107816

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the qc_info plugin could be confused by a query containing embedded null bytes. Reading information_schema.query_cache_info after such a query was cached could access data beyond the end of a heap-allocated buffer, potentially disclosing adjacent memory or crashing the server. This issue is fixed in versions 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2.

CVSS3: 6.4
0%
Низкий
14 дней назад
debian логотип
CVE-2026-107816

MariaDB server is a community developed fork of MySQL server. From 10. ...

CVSS3: 6.4
0%
Низкий
14 дней назад
github логотип
GHSA-wfqg-88r5-55f6

`qc_info` plugin can do OOB reads if query contains \0

CVSS3: 6.4
0%
Низкий
около 2 месяцев назад
altlinux логотип
ALT-PU-2026-13312

ALT-PU-2026-13312: package `mariadb` update to version 10.6.28-alt1

CVSS3: 10
2 месяца назад
altlinux логотип
ALT-PU-2026-13966

ALT-PU-2026-13966: package `mariadb` update to version 12.3.3-alt1

CVSS3: 8.5
около 2 месяцев назад

Уязвимостей на страницу