CVE-2026-107815
ADVISORY - nistSummary
MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the CONNECT engine's DOS table type used an incorrect boundary check that permitted a one-byte null write beyond a stack buffer at an attacker-controlled offset. An authenticated user able to use the CONNECT engine could cause a crash and potentially remote code execution. This issue is fixed in versions 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2.
Common Weakness Enumeration (CWE)
Out-of-bounds Write
Out-of-bounds Write
NIST
1.8
CVSS SCORE
8.5highDebian
-
Ubuntu
-
CVSS SCORE
N/AmediumAmazon
-
CVSS SCORE
N/AhighAmazon
-
CVSS SCORE
N/AhighAmazon
-
CVSS SCORE
N/AhighAmazon
-
CVSS SCORE
N/AhighBitnami
BIT-mariadb-2026-107815
1.8
CVSS SCORE
8.5highBitnami
BIT-mariadb-min-2026-107815
1.8
CVSS SCORE
8.5highBitnami
BIT-mysql-client-2026-107815
1.8
CVSS SCORE
8.5highRed Hat
1.6
CVSS SCORE
7.5highminimos
MINI-2wqp-m7x6-gqvc
-
minimos
MINI-5mpq-phxc-j96g
-
minimos
MINI-98vj-rj6v-m2h4
-
minimos
MINI-r8w7-w9c2-mj46
-
minimos
MINI-rf6p-8hpr-2v4c
-
minimos
MINI-v5rh-4r6h-cjxc
-