CVE-2023-26785

MariaDB v10.5 was discovered to contain a remote code execution (RCE) vulnerability via UDF Code in a Shared Object File, followed by a "create functi...

Original description

The description as published by the source.

MariaDB v10.5 was discovered to contain a remote code execution (RCE) vulnerability via UDF Code in a Shared Object File, followed by a "create function" statement. NOTE: this is disputed by the MariaDB Foundation because no privilege boundary is crossed.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Affected packages

Bitnami mariadb-min

[{"type":"SEMVER","events":[{"introduced":"10.5.0"},{"last_affected":"10.5.0"}]}]

Bitnami mysql-client

[{"type":"SEMVER","events":[{"introduced":"10.5.0"},{"last_affected":"10.5.0"}]}]

Bitnami mariadb

[{"type":"SEMVER","events":[{"introduced":"10.5.0"},{"last_affected":"10.5.0"}]}]

References

advisory nvd.nist.gov
advisory github.com
package github.com
web seclists.org