In MariaDB server version through 11.8.5, when server audit plugin is enabled with server_audit_events variable configured with QUERY_DCL, QUERY_DDL, or QUERY_DML filtering, if an authenticated database user invokes a SQL statement prefixed with double-hyphen (—) or hash (#) style comments, the statement is not logged.
CVSS Details
- CVSS 4.0 Base Score: 5.3 (MEDIUM)
- CVSS 4.0 Vector: (CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X)
- CVSS 3.1 Base Score: 4.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade mariadb | Apr 21, 2026 | Mar 3, 2026 |
| Amazon_linux_2023 | — | Upgrade mariadb114-client-utilsUpgrade mariadb114-server-utils-debuginfoUpgrade mariadb1011-develUpgrade mariadb114-backupUpgrade mariadb114-connect-engine-debuginfoUpgrade mariadb1011Upgrade mariadb114-cracklib-password-check-debuginfoUpgrade mariadb114-errmsgUpgrade mariadb114-gssapi-server-debuginfoUpgrade mariadb114-server-debuginfoUpgrade mariadb114-test-debuginfoUpgrade mariadb114-sphinx-engine-debuginfoUpgrade mariadb1011-commonUpgrade mariadb1011-debugsourceUpgrade mariadb114-oqgraph-engine-debuginfoUpgrade mariadb114-server-utilsUpgrade mariadb1011-server-utilsUpgrade mariadb114-serverUpgrade mariadb1011-gssapi-server-debuginfoUpgrade mariadb1011-oqgraph-engine-debuginfoUpgrade mariadb114-testUpgrade mariadb114-oqgraph-engineUpgrade mariadb114-rocksdb-engineUpgrade mariadb114-pam-debuginfoUpgrade mariadb1011-testUpgrade mariadb1011-errmsgUpgrade mariadb114-pamUpgrade mariadb1011-server-debuginfoUpgrade mariadb1011-sphinx-engineUpgrade mariadb1011-connect-engine-debuginfoUpgrade mariadb1011-cracklib-password-checkUpgrade mariadb1011-oqgraph-engineUpgrade mariadb1011-connect-engineUpgrade mariadb1011-rocksdb-engineUpgrade mariadb114-develUpgrade mariadb114Upgrade mariadb1011-gssapi-serverUpgrade mariadb114-sphinx-engineUpgrade mariadb1011-server-utils-debuginfoUpgrade mariadb114-rocksdb-engine-debuginfoUpgrade mariadb1011-backup-debuginfoUpgrade mariadb1011-serverUpgrade mariadb1011-rocksdb-engine-debuginfoUpgrade mariadb1011-test-debuginfoUpgrade mariadb1011-pam-debuginfoUpgrade mariadb114-debuginfoUpgrade mariadb1011-backupUpgrade mariadb1011-cracklib-password-check-debuginfoUpgrade mariadb114-cracklib-password-checkUpgrade mariadb114-commonUpgrade mariadb114-backup-debuginfoUpgrade mariadb1011-pamUpgrade mariadb114-connect-engineUpgrade mariadb114-gssapi-serverUpgrade mariadb1011-client-utilsUpgrade mariadb1011-debuginfoUpgrade mariadb114-debugsourceUpgrade mariadb1011-sphinx-engine-debuginfo | Jun 9, 2026 | Mar 3, 2026 |
| Debian | — | Upgrade mariadb | Jul 12, 2026 | Jul 12, 2026 |
| Mariadb Mariadb | — | Upgrade MariaDB to the latest version | May 6, 2026 | Mar 3, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Mar 3, 2026 |
| Suse | — | Upgrade mariadb-clientUpgrade mariadb-errormessagesUpgrade mariadb-toolsUpgrade libmariadbd19Upgrade mariadb-testUpgrade mariadb-rpm-macrosUpgrade libmariadbd-develUpgrade mariadbUpgrade mariadb-benchUpgrade mariadb-galera | Jun 8, 2026 | Jun 5, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Mar 3, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub