5.0Orta

CVE-2026-44173MariaDB: FILE privilege was not checked for subqueries in the FROM clause

MariaDB server; Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 8; Red Hat Red Hat Enterprise Linux 9 Yayım: (5 ay önce)

Açıklama

MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.26, 10.11.1 to before 10.11.17, 11.4.1 to before 11.4.11, 11.8.1 to before 11.8.7, and 12.3.1, MariaDB allowed SELECT ... INTO OUTFILE and SELECT ... INTO DUMPFILE without verifying the FILE privilege if the FROM clause contained only subqueries. This issue has been patched in versions 10.6.26, 10.11.17, 11.4.11, 11.8.7, and 12.3.2.

Zayıflık türü (CWE): CWE-863CWE-266

Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.

Etkilenen ürünler ve sürümler

ÜreticiÜrünSürümler
mariadb mariadb 10.6.1 – < 10.6.26
MariaDB server >= 10.6.1, < 10.6.26, >= 10.11.1, < 10.11.17, >= 11.4.1, < 11.4.11, >= 11.8.1, < 11.8.7, >= 12.3.1, < 12.3.2
Red Hat Red Hat Enterprise Linux 10 all versions
Red Hat Red Hat Enterprise Linux 7 —
Red Hat Red Hat Enterprise Linux 8 all versions
Red Hat Red Hat Enterprise Linux 9 all versions
Red Hat Red Hat Hardened Images all versions

Kaynaklar ve yamalar

CPE eşleşmeleri (NVD) (5)

  • cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:* ≥ 10.6.1 < 10.6.26
  • cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:* ≥ 10.11.1 < 10.11.17
  • cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:* ≥ 11.4.1 < 11.4.11
  • cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:* ≥ 11.8.1 < 11.8.7
  • cpe:2.3:a:mariadb:mariadb:12.3.1:*:*:*:*:*:*:*