MariaDB server is a community developed fork of MySQL server. In versions 3.3.18 and 3.4.8, an application that was taking non-validated user input, escaping it with mysql_real_escape_string() and sending it to the database using text protocol and big5 character set was vulnerable to SQL injections, even though mysql_real_escape_string() was supposed to prevent them. This issue has been patched in versions 3.3.19 and 3.4.9.
CVSS Details
- CVSS 4.0 Base Score: 6.9 (MEDIUM)
- CVSS 4.0 Vector: (CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X)
- CVSS 3.1 Base Score: 9.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade mariadb | Jun 18, 2026 | Jun 12, 2026 |
| Amazon_linux_2023 | — | Upgrade mariadb-connector-c-develUpgrade mariadb114-serverUpgrade mariadb-connector-cUpgrade mariadb114-connect-engine-debuginfoUpgrade mariadb-connector-c-configUpgrade mariadb114-pamUpgrade mariadb114-backup-debuginfoUpgrade mariadb114-backupUpgrade mariadb114-errmsgUpgrade mariadb114-client-utilsUpgrade mariadb-connector-c-debugsourceUpgrade mariadb114Upgrade mariadb114-gssapi-serverUpgrade mariadb114-testUpgrade mariadb114-debuginfoUpgrade mariadb-connector-c-devel-debuginfoUpgrade mariadb-connector-c-docUpgrade mariadb-connector-c-test-debuginfoUpgrade mariadb114-server-utilsUpgrade mariadb114-rocksdb-engineUpgrade mariadb114-oqgraph-engineUpgrade mariadb114-rocksdb-engine-debuginfoUpgrade mariadb-connector-c-debuginfoUpgrade mariadb114-debugsourceUpgrade mariadb114-server-utils-debuginfoUpgrade mariadb114-pam-debuginfoUpgrade mariadb114-oqgraph-engine-debuginfoUpgrade mariadb114-develUpgrade mariadb114-test-debuginfoUpgrade mariadb114-cracklib-password-checkUpgrade mariadb114-sphinx-engineUpgrade mariadb-connector-c-testUpgrade mariadb114-gssapi-server-debuginfoUpgrade mariadb114-connect-engineUpgrade mariadb114-server-debuginfoUpgrade mariadb114-sphinx-engine-debuginfoUpgrade mariadb114-commonUpgrade mariadb114-cracklib-password-check-debuginfo | Jun 23, 2026 | Jun 12, 2026 |
| Debian | — | Upgrade mariadb | Jul 12, 2026 | Jul 12, 2026 |
| Freebsd | — | Upgrade mariadb118-serverUpgrade mariadb1011-serverUpgrade mariadb114-clientUpgrade mariadb106-clientUpgrade mariadb106-serverUpgrade mariadb1011-clientUpgrade mariadb114-serverUpgrade mariadb118-client | May 21, 2026 | May 19, 2026 |
| Mariadb Mariadb | — | Upgrade MariaDB to the latest version | Jun 24, 2026 | Jun 12, 2026 |
| Redhat_linux | — | Upgrade mariadb-connector-c-testUpgrade mariadb-testUpgrade mariadb10.11-debugsourceUpgrade mariadb-server-utilsUpgrade mariadb11.8-pam-debuginfoUpgrade mariadb-server-debuginfoUpgrade mariadb11.8-embedded-develUpgrade mariadb-connector-c-docUpgrade mariadb11.8-develUpgrade mariadb11.8-oqgraph-engine-debuginfoUpgrade mariadb11.8-serverUpgrade mariadb11.8Upgrade mariadb11.8-server-galera-debuginfoUpgrade mariadb-gssapi-server-debuginfoUpgrade mariadb11.8-debuginfoUpgrade mariadb11.8-client-utilsUpgrade mariadb-backup-debuginfoUpgrade mariadb-connector-c-test-debuginfoUpgrade mariadb11.8-gssapi-serverUpgrade mariadb-server-galera-debuginfoUpgrade mariadb11.8-embeddedUpgrade mariadb10.11-debuginfoUpgrade mariadb-pamUpgrade mariadb-connector-c-debuginfoUpgrade mariadb11.8-backupUpgrade JudyUpgrade galera-debuginfoUpgrade mariadb-oqgraph-engine-debuginfoUpgrade mariadb-connector-c-debugsourceUpgrade mariadb11.8-test-debuginfoUpgrade mariadb-serverUpgrade mariadb11.8-testUpgrade mariadb11.8-errmsgUpgrade mariadb-client-utilsUpgrade mariadb11.8-server-utilsNo solution existsUpgrade mariadb-debugsourceUpgrade mariadb-oqgraph-engineUpgrade mariadb-connector-c-develUpgrade mariadb11.8-server-debuginfoUpgrade mariadb11.8-commonUpgrade mariadb11.8-gssapi-server-debuginfoUpgrade mariadbUpgrade mariadb-embeddedUpgrade mariadb11.8-pamUpgrade mariadb11.8-oqgraph-engineUpgrade mariadb11.8-backup-debuginfoUpgrade mariadb11.8-debugsourceUpgrade mariadb-develUpgrade mariadb11.8-embedded-debuginfoUpgrade mariadb-connector-c-configUpgrade mariadb-embedded-debuginfoUpgrade mariadb-debuginfoUpgrade mariadb-gssapi-serverUpgrade mariadb-connector-cUpgrade mariadb-backupUpgrade mariadb-pam-debuginfoUpgrade mariadb-server-utils-debuginfoUpgrade mariadb11.8-server-galeraUpgrade galeraUpgrade Judy-debuginfoUpgrade mariadb-connector-c-devel-debuginfoUpgrade mariadb-errmsgUpgrade mariadb-embedded-develUpgrade mariadb-commonUpgrade mariadb-test-debuginfoUpgrade mariadb-server-galeraUpgrade galera-debugsourceUpgrade Judy-debugsource | Jul 3, 2026 | Jun 12, 2026 |
| Rocky_linux | — | Upgrade mariadb-connector-c-debugsourceUpgrade mariadb-connector-c-devel-debuginfoUpgrade mariadb-connector-c-debuginfoUpgrade mariadb-connector-c-develUpgrade mariadb-connector-c-test-debuginfoUpgrade mariadb-connector-cUpgrade mariadb-connector-c-test | Jul 3, 2026 | Jun 30, 2026 |
| Ubuntu | — | Upgrade mariadb-server | Jul 14, 2026 | Jun 12, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub